last executing test programs: 9.94100435s ago: executing program 1 (id=637): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan1\x00', {0x2}}) (async, rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x883, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)=' ']}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async, rerun: 64) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340)) (rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x3, 0x0, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) sendto$inet6(r5, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0000000008530846010000000000010902"], 0x0) shutdown(r5, 0x1) 8.919607268s ago: executing program 2 (id=645): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x644, 0xffffffff, 0x100, 0x3f8, 0x0, 0xfeffffff, 0xffffffff, 0x57c, 0x57c, 0x57c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'pimreg\x00', 'batadv_slave_1\x00'}, 0x0, 0x2d4, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1000}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2acfb6eeb4d0b56b17245a1cc3edf31622d201da1aa7f8323703e803a29da56", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES8=r0], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="a01d432a8fc898ed85c1aa68e1e7d3e2874b1357c9dce87f6f4c5ad203a7385415d49eeb76ef6436311d431404c6755eee43b4634640dc031df91404c9f80618ed7c03054b948da28662bcd051ed0a06a5a9ea633708642879dd5e0b7a5993f87fa318f3a5c727a0997e2bd938ee35f3c2c2acfb6eeb4d0b56b17245a1cc3edf31622d201da1aa7f8323703e803a29da56", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES8=r0], &(0x7f0000000540)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000700), 0x347c305cb751d6, 0x24004094) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') migrate_pages(0x0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e0407a) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f0000000840)}, {&(0x7f00000009c0)=""/87, 0x57}, {&(0x7f0000000a40)=""/19, 0x13}, {&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b00)=""/44, 0x2c}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}], 0x4, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980), 0x0, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/238, 0xee}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f0000000840)}, {&(0x7f00000009c0)=""/87, 0x57}, {&(0x7f0000000a40)=""/19, 0x13}, {&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b00)=""/44, 0x2c}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}], 0x4, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0) 8.591964738s ago: executing program 1 (id=647): pipe2(&(0x7f0000001180), 0x4000) (async) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x2, &(0x7f00000001c0)={0x8, 0x4007}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'erspan0\x00', {0x2, 0x4e22, @local}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) r5 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, 0x0, 0x0) syz_io_uring_setup(0x7d19, &(0x7f0000000300)={0x0, 0x71f, 0x80c, 0x0, 0x80, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080)) (async) r6 = syz_io_uring_setup(0x7d19, &(0x7f0000000300)={0x0, 0x71f, 0x80c, 0x0, 0x80, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x40000002}) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x800, 0x8003, 0x55}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x3, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x100, 0x0, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(r4, &(0x7f0000000180)=[{{0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x40084}}], 0x1, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.120163226s ago: executing program 1 (id=648): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xfffffff9, 0x0, 0x4) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000040)=@isdn={0x22, 0x6, 0x8, 0x4, 0x4d}}) io_uring_enter(r1, 0x68be, 0x5002, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) (async) r8 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x12) inotify_init() (async) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6b5fd0db88"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "21e951"}]}, 0x44}, 0x1, 0x0, 0x0, 0x100d0}, 0x4000000) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r7, r8, 0x26, 0x0, @void}, 0x10) (async, rerun: 32) r9 = getpgid(0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) sched_setscheduler(r9, 0x1, &(0x7f0000000280)=0x8) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r11) sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100273d7000fedb05c3377dc9df251000000008ee0000", @ANYRES32=0x0, @ANYBLOB="05000f000700000006001100ac040000"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) (async) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000)) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="02"], 0x10) (async, rerun: 64) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e04601c0c"], 0x7) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r14, @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES16=r14, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 7.847848697s ago: executing program 1 (id=651): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x1, 0x0, 0x1, 0x8001, 0x7f}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x75d}]}}]}, 0x68}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x16b681, 0x0) close(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = fcntl$dupfd(r6, 0x0, r6) ioctl$VT_GETMODE(r10, 0x5601, &(0x7f00000001c0)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0xf63, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 7.291127906s ago: executing program 2 (id=657): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f00000000c0)=0x102, 0x4) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cdbdf25748817e20d2b12f8658a56dc", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) 6.937103214s ago: executing program 3 (id=658): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x3c}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r2, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x3bb7, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl(r3, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0xc0000000000000, 0xff, 0xf, 0x800000000}) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000240)="c55b58a0ce7afb288d916ba1f86b8137101ff357073fe7697d57dda81b9087708ea25d774265", 0x26) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102388, 0x18ff4) ioctl$SG_IO(r0, 0x2285, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = msgget$private(0x0, 0x100) msgsnd(r8, &(0x7f0000000700)=ANY=[], 0x8, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000680)={0x4c0, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind$packet(r6, &(0x7f0000000280)={0x11, 0x0, r7, 0x1, 0x1, 0x6, @local}, 0x14) 5.952015139s ago: executing program 2 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000104000000000300000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff00000000000166d5acd2d0428fc3a7012572f5e3fd8592158aff02705ef5ac8f1957360e3c7457a307fb908cac2aa6139c12414ffb7a1c5fba05bc3bbcf8bf76c4d87900602088997027e268e40b9103a43b4fe53be61250a938cba61ab93441e4eb149846cf074533bf2489b46f8d37312f486463a25435e3d6e0f2c2b5ea992b15ad49398ed1429e00f72865b245f89b37cec370697aa2896de5bb4b877868447b6c2a28d55b18a6252dfe18896da44ffda6fb34746f441d24e29b497cafff9fc587f3f05f5c855c9fc67116de934e"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80000000}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 5.412660242s ago: executing program 0 (id=662): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = getpid() tgkill(r3, r3, 0x26) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f00000001c0)="9c9014", 0x3, 0x44000, 0x0, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) 5.369953212s ago: executing program 3 (id=663): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000000, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f0000000080)='hfs\x00', 0x1) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000840)=ANY=[@ANYBLOB]) 5.179912951s ago: executing program 4 (id=664): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6387, &(0x7f0000000740)={0x0, 0xcc0a, 0x10100, 0x0, 0x1, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000680)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/167, 0xa7}, 0x9}, {{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/52, 0x34}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f000001a240)=""/4096, 0x1000}], 0x5, &(0x7f00000005c0)=""/160, 0xa0}, 0x7}], 0x2, 0x0, &(0x7f00000007c0)={r6, r7+10000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040)=0xfffffffe, 0x0, 0x4) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a82c7df4dd086d04b1082a6d0000de0009e421d88c11522fa8bcf6541db10212000100000000090400000015b38300"], 0x0) 5.179379355s ago: executing program 2 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) 4.623542078s ago: executing program 4 (id=666): socket$inet(0x2, 0x3, 0x6) (async) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaa04aaaabbbbc0bbbbbb86dd607f00ef00142c00fe84000000000005eb000000000000bbff000000000000000700000000000000d1a09b9844210c907801000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000fbff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000fbff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet6(0xa, 0x1, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, &(0x7f0000000080)) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000180)) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000280)=0x3) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x11bac0, 0x1a8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x6, 0x19, 0x5}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) sendfile(r7, r7, 0x0, 0xb) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f00000000c0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f00000000c0)) 4.532773517s ago: executing program 3 (id=667): userfaultfd(0x80001) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES64=0x0], 0x50) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000340)={'bridge_slave_0\x00', 0x4088}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r8, &(0x7f0000000e00), 0x12) 4.091967148s ago: executing program 4 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x141200, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r7, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x6}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "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"}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) 3.986609112s ago: executing program 2 (id=669): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000040), 0x4) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0xe0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.951834298s ago: executing program 3 (id=670): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async, rerun: 64) r1 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (async) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) setreuid(0xee01, 0xee01) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) (rerun: 32) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000580)={r4, 0x5, 0x1, 0x9, 0x219c, 0x8, 0x4, 0xd, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x8, 0x9, 0xdb, 0x5, 0x5}}, &(0x7f0000000280)=0xb0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) prlimit64(r5, 0xb, &(0x7f0000000140)={0x7, 0x2}, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) (async, rerun: 64) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='jffs2\x00', 0x40000, 0x0) 2.77172794s ago: executing program 3 (id=671): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80000000, @mcast1, 0x4}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r7, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000f5ffffffffffffff00000001050016000200000014000700ff"], 0xa4}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x4, r6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x1, r10}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.318955942s ago: executing program 0 (id=672): socket$inet(0x2, 0x3, 0x4) r0 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mkdirat(r3, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000000)='./file1\x00', 0x0) renameat(r3, &(0x7f0000000540)='./file1\x00', r3, &(0x7f0000000140)='./file0/file0\x00') r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet(0x2, 0x3, 0x4) (async) socket$inet(0x2, 0x3, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) (async) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x0) (async) mkdirat(r3, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(r3, &(0x7f0000000000)='./file1\x00', 0x0) (async) renameat(r3, &(0x7f0000000540)='./file1\x00', r3, &(0x7f0000000140)='./file0/file0\x00') (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 2.217298847s ago: executing program 0 (id=673): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x1fffffff, 0x0, 0x1000010, 0x20000], [0x0, 0x40006], [0x3, 0x10000000100001, 0x2]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x1fffffff, 0x0, 0x1000010, 0x20000], [0x0, 0x40006], [0x3, 0x10000000100001, 0x2]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) epoll_create(0x9) (async) r2 = epoll_create(0x9) epoll_pwait2(r2, &(0x7f00000000c0)=[{}, {}], 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={[0x7]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100260008000300b93ccf888e62c4e8c6f7d8e59742b93efdb24fe5fea4dd03a9ebb0e2a5627d1e75ad00"/52, @ANYRES32=r4, @ANYBLOB="29003300b098030008021100000108021100000050505050505057f99eb3c401010003005c021001500000000400cd00"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000001ac0)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000001ac0)) 2.025552683s ago: executing program 0 (id=674): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x801, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) splice(r5, 0x0, r6, &(0x7f00000002c0)=0x4, 0x6, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%ps \x00'}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="0400000000000000002000001ef400000000000006248e16799fc401db35bb", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000000010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc86}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x2e, &(0x7f0000000240)=""/46, 0x41000, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xe, 0x4, 0x6}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000640)=[0xffffffffffffffff, r7, r5, r5, r8, r5, r9, r5], &(0x7f0000000680)=[{0x5, 0x5, 0x5, 0x4}, {0x2, 0x1}, {0x1, 0x5, 0xb, 0x3}, {0x4, 0x1, 0xf, 0x1}, {0x4, 0x1, 0xb, 0xd}, {0x2, 0x5, 0xe}, {0x0, 0x5, 0x8, 0x6}, {0x4, 0x3, 0x3}, {0x4, 0x5, 0xe, 0x9}, {0x0, 0x4, 0x7, 0x8}], 0x10, 0x4}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 2.024455752s ago: executing program 1 (id=675): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff000000fa77a6"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.883392834s ago: executing program 3 (id=676): io_setup(0x2007, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.022101066s ago: executing program 0 (id=677): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r1, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) setresuid(0x0, 0xee00, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SG_IO(r0, 0x2285, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) mkdir(&(0x7f0000000000)='./file0\x00', 0x6e) mount(0x0, 0x0, &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect(r3, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x200, @empty, 0x80}}, 0x80) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xd) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 952.704365ms ago: executing program 4 (id=678): r0 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}}, 0x0, 0x26, 0x0, 0xffffffbe, 0x2}, 0x28) (async) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8, 0x400000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000140)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000240)) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) dup(r4) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x6, 0x5]}, &(0x7f0000000080)=0x44) (async) open_by_handle_at(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000001000000000000000500080000000000"], 0x109900) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) 839.689586ms ago: executing program 2 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x32, 0x200004, 0x0, 0x9, 0x0, 0x6, 0x2, 0xf9, 0x10, 0x0, 0x0, 0x0, 0x7e0, 0x0, 0x0, 0x45, [0x7eff, 0x10000000]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201080000000008431955225a8dee02030109022400010862800109057d090905091eff03036b077c4ebe780000000000000000000064954c5aaf28dad378af0943d5629b66a02971982bbbfdffbd2ced164ee12b13f36fb844b2c99169430166769f1d4fe213865b40066c79982db6c956"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = msgget$private(0x0, 0x60c) msgsnd(r1, &(0x7f0000000000)={0x0, 'p'}, 0x9, 0x0) (async) msgsnd(r1, &(0x7f0000000000)={0x0, 'p'}, 0x9, 0x0) 464.286152ms ago: executing program 4 (id=680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20044842) 440.007529ms ago: executing program 0 (id=681): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sched_setattr(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) r4 = open$dir(&(0x7f00000000c0)='./file1/file0\x00', 0x200000, 0x4) execveat(r4, &(0x7f00000001c0)='./file1/file0\x00', 0x0, 0x0, 0x1000) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') fchdir(r7) (async) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) keyctl$update(0x2, r8, &(0x7f0000000300)="9d", 0x1) mount(0x0, &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000000)='affs\x00', 0x8028a0, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120111030000001018050200400001020301090409210004430122150b0905810300040f03fc00000000000000000000000080000000"], 0x0) (rerun: 32) syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/pid_for_children\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) (async) fsopen(&(0x7f0000000340)='devpts\x00', 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 324.064534ms ago: executing program 4 (id=682): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e23", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000000220000002100fdffffff1711000042a3df84cbaf598e2413f82b3754421050bcd9f4ce20f4083ab17ad8b3e808d9beb827cc23e1253d57657180dded69825bf57c827bdcd363f8fa9688c91c7b3ef99e37699618490764c769896b88e69c40298468001012fa34959c8fb0470d2016452e1f551e8da1af3c928ddc38e7372bca5961c846fe85c35c28112f9eaf62dea6f88a17fee8b7604e2641a4aca496ef787874203b295d889a86f905a5ca30ab29855f257e", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0x78, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_police={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x10, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x4, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000080), 0x0}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 0s ago: executing program 1 (id=683): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'pim6reg1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="ead9132d02ca9c7c5dd111fcce08099f3eed74d53d92b744f328a46167bd51c3d1befd544140967a887c622ab5d35faab9dc541688092f9dea766b9d0362a98ada523df2f405cd338a2adda403af63bb73bb77937f3b48d009c302dd9271b428e88722d94505e038652186fae5b3df66733e7f990eafa518793152ad8c90d36a934ac0e71c1f4e", 0x87}], 0x1, &(0x7f0000000280)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x68}, 0x20008045) (async) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808000, 0x0, 0x0, 0x2080, 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0xf, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x800}) kernel console output (not intermixed with test programs): syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46978e929 code=0x7ffc0000 [ 141.624034][ T30] audit: type=1326 audit(1751938866.238:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46978e929 code=0x7ffc0000 [ 141.647900][ T30] audit: type=1326 audit(1751938866.238:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd46978e929 code=0x7ffc0000 [ 141.672672][ T30] audit: type=1326 audit(1751938866.238:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46978e929 code=0x7ffc0000 [ 141.717510][ T7118] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 141.725437][ T7118] netlink: 188 bytes leftover after parsing attributes in process `syz.4.291'. [ 142.384365][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.614278][ T43] usb 3-1: device descriptor read/64, error -71 [ 142.627032][ T7155] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 142.770880][ T7155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.864307][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.007786][ T43] usb 3-1: device descriptor read/64, error -71 [ 143.045948][ T2145] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.135994][ T43] usb usb3-port1: attempt power cycle [ 143.184298][ T2145] usb 1-1: device descriptor read/64, error -71 [ 143.424386][ T2145] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 143.494422][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 143.525135][ T43] usb 3-1: device descriptor read/8, error -71 [ 143.576720][ T2145] usb 1-1: device descriptor read/64, error -71 [ 143.704694][ T2145] usb usb1-port1: attempt power cycle [ 143.794332][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.816843][ T43] usb 3-1: device descriptor read/8, error -71 [ 143.904306][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.927440][ T43] usb usb3-port1: unable to enumerate USB device [ 143.941348][ T7196] capability: warning: `syz.3.303' uses deprecated v2 capabilities in a way that may be insecure [ 143.991039][ T7200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 144.004582][ T7200] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.044481][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.056418][ T2145] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 144.084807][ T2145] usb 1-1: device descriptor read/8, error -71 [ 144.693942][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 144.744347][ T2145] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 144.764935][ T2145] usb 1-1: device descriptor read/8, error -71 [ 144.854430][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.877286][ T2145] usb usb1-port1: unable to enumerate USB device [ 144.934299][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.984445][ T9] usb usb2-port1: attempt power cycle [ 145.084395][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 145.090857][ T43] usb 5-1: config 0 has an invalid interface number: 57 but max is 0 [ 145.099080][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.109264][ T5896] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.116858][ T43] usb 5-1: config 0 has no interface number 0 [ 145.122963][ T43] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 46227, setting to 64 [ 145.134150][ T43] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=57.d9 [ 145.144460][ T5974] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 145.145002][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.162751][ T43] usb 5-1: config 0 descriptor?? [ 145.314404][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 145.321448][ T5896] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 145.324296][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 145.330019][ T5896] usb 3-1: config 0 has no interface number 0 [ 145.335056][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 145.341154][ T5896] usb 3-1: config 0 interface 184 has no altsetting 0 [ 145.352799][ T5974] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 145.358707][ T5896] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 145.363796][ T5974] usb 4-1: config 0 has no interface number 0 [ 145.379994][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.388405][ T5974] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 145.398076][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.407967][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.409167][ T5974] usb 4-1: Product: syz [ 145.416161][ T5896] usb 3-1: Product: syz [ 145.425187][ T5896] usb 3-1: Manufacturer: syz [ 145.429984][ T5896] usb 3-1: SerialNumber: syz [ 145.430470][ T5974] usb 4-1: Manufacturer: syz [ 145.440238][ T5974] usb 4-1: SerialNumber: syz [ 145.442204][ T5896] usb 3-1: config 0 descriptor?? [ 145.448881][ T5974] usb 4-1: config 0 descriptor?? [ 145.459786][ T5974] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 145.460766][ T5896] smsc75xx v1.0.0 [ 145.625316][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 145.644816][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.666409][ T5974] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 145.680771][ T5974] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 145.763175][ T9] usb usb2-port1: unable to enumerate USB device [ 145.811371][ T7211] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 145.834009][ T7211] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.885417][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.905440][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.069006][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 146.080191][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 146.120103][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 146.131768][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 146.135548][ T2145] usb 4-1: USB disconnect, device number 14 [ 146.149750][ T2145] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 146.164940][ T2145] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 146.183459][ T2145] quatech2 4-1:0.51: device disconnected [ 146.698939][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 146.709751][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 146.711672][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 146.711685][ T30] audit: type=1400 audit(1751938872.028:469): avc: denied { setattr } for pid=7216 comm="syz.3.310" name="NETLINK" dev="sockfs" ino=13525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.768067][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 146.806559][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 146.818423][ T5896] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 146.950812][ T30] audit: type=1400 audit(1751938872.268:470): avc: denied { ioctl } for pid=7226 comm="syz.0.312" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 147.018114][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 147.038707][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 147.190297][ T43] usb 5-1: string descriptor 0 read error: -71 [ 147.235490][ T43] legousbtower 5-1:0.57: interrupt endpoints not found [ 147.547610][ T43] usb 5-1: USB disconnect, device number 11 [ 148.328547][ T30] audit: type=1400 audit(1751938873.648:471): avc: denied { name_connect } for pid=7251 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 149.087255][ T5974] usb 3-1: USB disconnect, device number 14 [ 149.411069][ T7272] netlink: 'syz.4.322': attribute type 10 has an invalid length. [ 149.419324][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.427643][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.503987][ T5974] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.519279][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.526509][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.534483][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.542347][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.560871][ T7272] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 149.704593][ T5974] usb 3-1: Using ep0 maxpacket: 32 [ 149.717638][ T5974] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 149.752595][ T5974] usb 3-1: config 0 has no interface number 0 [ 149.903162][ T5974] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.014354][ T5974] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 150.024076][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.032734][ T5974] usb 3-1: Product: syz [ 150.037253][ T5974] usb 3-1: Manufacturer: syz [ 150.041869][ T5974] usb 3-1: SerialNumber: syz [ 150.068110][ T5974] usb 3-1: config 0 descriptor?? [ 150.127332][ T5974] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 150.161648][ T5974] em28xx 3-1:0.132: Video interface 132 found: [ 150.203903][ T7293] binder: 7290:7293 ioctl 540f 2000000001c0 returned -22 [ 150.403348][ T7294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7294 comm=syz.4.327 [ 150.714923][ T5974] em28xx 3-1:0.132: unknown em28xx chip ID (252) [ 150.784624][ T7291] Process accounting resumed [ 151.445914][ T5974] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 151.463579][ T5974] em28xx 3-1:0.132: board has no eeprom [ 151.534709][ T5974] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 151.550544][ T5974] em28xx 3-1:0.132: analog set to bulk mode. [ 151.578747][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 151.594878][ T974] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 151.628683][ T5974] usb 3-1: USB disconnect, device number 15 [ 151.643214][ T5974] em28xx 3-1:0.132: Disconnecting em28xx [ 151.799793][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 151.824512][ T974] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 151.840783][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.870774][ T974] usb 4-1: config 0 descriptor?? [ 151.885475][ T7303] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.921975][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 151.935852][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 151.943090][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 151.956915][ T9] usb 3-1: Decoder not found [ 151.961573][ T9] em28xx 3-1:0.132: failed to create media graph [ 151.971253][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 152.024415][ T5919] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 152.055383][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 152.065231][ T5974] em28xx 3-1:0.132: Closing input extension [ 152.075680][ T5974] em28xx 3-1:0.132: Freeing device [ 152.811289][ T5882] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 152.847077][ T5919] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 152.860172][ T5919] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 152.870872][ T5919] usb 1-1: config 16 interface 0 has no altsetting 0 [ 152.878951][ T5919] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 152.889176][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.903837][ T7311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.032161][ T7299] hsr0: entered promiscuous mode [ 153.037915][ T7299] netlink: 108 bytes leftover after parsing attributes in process `syz.3.328'. [ 153.057879][ T5882] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 153.068149][ T7298] hsr0: left promiscuous mode [ 153.073335][ T974] usbhid 4-1:0.0: can't add hid device: -71 [ 153.096291][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.105797][ T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 153.144728][ T974] usb 4-1: USB disconnect, device number 15 [ 153.153496][ T5882] usb 2-1: config 0 descriptor?? [ 153.181740][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.222262][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.453672][ T7348] netlink: 596 bytes leftover after parsing attributes in process `syz.2.338'. [ 153.750044][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.757600][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.769124][ T5919] usb 1-1: string descriptor 0 read error: -71 [ 153.813722][ T5919] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 153.959855][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.972629][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.277696][ T5919] imon 1-1:16.0: unable to initialize intf0, err -19 [ 154.284477][ T5919] imon:imon_probe: failed to initialize context! [ 154.290830][ T5919] imon 1-1:16.0: unable to register, err -19 [ 154.308985][ T5919] usb 1-1: USB disconnect, device number 16 [ 154.390928][ T30] audit: type=1400 audit(1751938879.358:472): avc: denied { create } for pid=7325 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.744638][ T30] audit: type=1400 audit(1751938879.358:473): avc: denied { write } for pid=7325 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.884917][ T7346] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.896725][ T7346] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.906481][ T7346] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.918599][ T7346] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.980281][ T7350] lo speed is unknown, defaulting to 1000 [ 154.986544][ T7350] lo speed is unknown, defaulting to 1000 [ 154.995093][ T7350] lo speed is unknown, defaulting to 1000 [ 155.005787][ T7350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.021870][ T7350] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.279913][ T7358] netlink: 'syz.4.341': attribute type 29 has an invalid length. [ 155.304416][ T7350] lo speed is unknown, defaulting to 1000 [ 155.312705][ T7350] lo speed is unknown, defaulting to 1000 [ 155.319943][ T7350] lo speed is unknown, defaulting to 1000 [ 155.714520][ T7350] lo speed is unknown, defaulting to 1000 [ 155.721232][ T7350] lo speed is unknown, defaulting to 1000 [ 155.728078][ T7350] lo speed is unknown, defaulting to 1000 [ 155.881435][ T5882] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 155.900050][ T5882] [drm:udl_init] *ERROR* Selecting channel failed [ 155.906621][ T974] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.937830][ T5882] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 155.950362][ T5882] [drm] Initialized udl on minor 2 [ 155.964050][ T7370] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 155.982321][ T30] audit: type=1400 audit(1751938881.298:474): avc: denied { ioctl } for pid=7369 comm="syz.4.344" path="socket:[13861]" dev="sockfs" ino=13861 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.998921][ T5882] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.077660][ T5882] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 156.080976][ T30] audit: type=1400 audit(1751938881.298:475): avc: denied { listen } for pid=7369 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.094501][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 156.131542][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.157718][ T30] audit: type=1400 audit(1751938881.438:476): avc: denied { create } for pid=7373 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 156.160877][ T5882] usb 2-1: USB disconnect, device number 21 [ 156.200396][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 156.213531][ T974] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 156.239483][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.293791][ T974] usb 3-1: Product: syz [ 156.304359][ T974] usb 3-1: Manufacturer: syz [ 156.349099][ T974] usb 3-1: SerialNumber: syz [ 156.879899][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.888684][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.809536][ T7400] usb usb8: usbfs: process 7400 (syz.3.353) did not claim interface 0 before use [ 157.826241][ T30] audit: type=1400 audit(1751938883.148:477): avc: denied { map } for pid=7401 comm="syz.4.352" path="pipe:[14152]" dev="pipefs" ino=14152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 158.035460][ T7407] fuse: Invalid rootmode [ 158.138514][ T974] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 158.280946][ T974] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 158.292680][ T30] audit: type=1400 audit(1751938883.148:478): avc: denied { execute } for pid=7401 comm="syz.4.352" path="pipe:[14152]" dev="pipefs" ino=14152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 158.396159][ T974] usb 3-1: USB disconnect, device number 16 [ 158.453936][ T30] audit: type=1400 audit(1751938883.398:479): avc: denied { mount } for pid=7404 comm="syz.4.354" name="/" dev="rpc_pipefs" ino=14168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 158.553409][ T30] audit: type=1400 audit(1751938883.818:480): avc: denied { setopt } for pid=7408 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.607371][ T974] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.614979][ T5996] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 159.907063][ T30] audit: type=1400 audit(1751938885.198:481): avc: denied { write } for pid=7435 comm="syz.4.362" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.909900][ T5996] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.929858][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.951354][ T5996] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.143942][ T7436] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.361'. [ 160.153111][ T7436] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.361'. [ 160.221096][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 160.229623][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.247029][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.257154][ T974] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 160.277319][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.296841][ T5996] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.312849][ T974] usb 3-1: config 0 descriptor?? [ 160.340621][ T5996] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.369987][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.395143][ T5996] usb 1-1: Product: syz [ 160.410460][ T30] audit: type=1400 audit(1751938885.728:482): avc: denied { ioctl } for pid=7446 comm="syz.4.364" path="pid:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 160.411018][ T5996] usb 1-1: Manufacturer: syz [ 160.485678][ T5996] usb 1-1: SerialNumber: syz [ 160.505942][ T5996] usb 1-1: bad CDC descriptors [ 160.568171][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.577918][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.719940][ T5882] usb 1-1: USB disconnect, device number 17 [ 160.800090][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 160.809162][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.826364][ T974] usb 3-1: USB disconnect, device number 17 [ 161.541421][ T30] audit: type=1400 audit(1751938886.858:483): avc: denied { map } for pid=7464 comm="syz.0.369" path="socket:[14252]" dev="sockfs" ino=14252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.584896][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 161.626748][ T7465] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 65280 - 0 [ 161.642918][ T30] audit: type=1400 audit(1751938886.858:484): avc: denied { read accept } for pid=7464 comm="syz.0.369" path="socket:[14252]" dev="sockfs" ino=14252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.669346][ T7465] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 65280 - 0 [ 161.680342][ T7465] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 65280 - 0 [ 161.693192][ T7465] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 65280 - 0 [ 161.702399][ T30] audit: type=1400 audit(1751938886.888:485): avc: denied { create } for pid=7464 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.726056][ T7465] geneve2: entered promiscuous mode [ 161.731301][ T7465] geneve2: entered allmulticast mode [ 162.319219][ T5882] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.380840][ T30] audit: type=1400 audit(1751938887.698:486): avc: denied { module_request } for pid=7477 comm="syz.0.374" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 162.414312][ T30] audit: type=1400 audit(1751938887.728:487): avc: denied { ioctl } for pid=7481 comm="syz.3.373" path="socket:[14835]" dev="sockfs" ino=14835 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 162.471913][ T30] audit: type=1400 audit(1751938887.728:488): avc: denied { ioctl } for pid=7481 comm="syz.3.373" path="socket:[14835]" dev="sockfs" ino=14835 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 162.518616][ T5838] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 162.544256][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 162.555647][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.565695][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 162.571661][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.586482][ T5882] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 162.604270][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 162.613257][ T5882] usb 5-1: Product: syz [ 162.619534][ T5882] usb 5-1: config 0 descriptor?? [ 162.864290][ T5996] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 162.944277][ T5919] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.039899][ T5996] usb 3-1: config 0 has an invalid interface number: 123 but max is 0 [ 163.067088][ T5996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.081695][ T5996] usb 3-1: config 0 has no interface number 0 [ 163.092598][ T5996] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 163.095600][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.102231][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.119817][ T5996] usb 3-1: Product: syz [ 163.124036][ T5996] usb 3-1: Manufacturer: syz [ 163.132364][ T5996] usb 3-1: SerialNumber: syz [ 163.135835][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 163.149840][ T5996] usb 3-1: config 0 descriptor?? [ 163.154607][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.167013][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.173866][ T5996] cdc_acm 3-1:0.123: skipping garbage [ 163.178937][ T5919] usb 4-1: Product: syz [ 163.185283][ T5919] usb 4-1: Manufacturer: syz [ 163.190192][ T5919] usb 4-1: SerialNumber: syz [ 163.231566][ T5919] usb 4-1: config 0 descriptor?? [ 163.325641][ T7492] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 163.389948][ T7492] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 163.770550][ T7490] netlink: 'syz.3.377': attribute type 12 has an invalid length. [ 163.779168][ T7490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.377'. [ 163.858029][ T7496] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 163.884599][ T7496] CIFS mount error: No usable UNC path provided in device string! [ 163.884599][ T7496] [ 163.894974][ T7496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.141294][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.150870][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.176017][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 164.196599][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 164.213857][ T5919] usb 4-1: USB disconnect, device number 16 [ 164.243521][ T5882] usb 5-1: USB disconnect, device number 12 [ 164.298095][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.602143][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 164.675312][ T30] audit: type=1400 audit(1751938889.998:489): avc: denied { watch } for pid=7500 comm="syz.3.379" path="/84/blkio.throttle.io_serviced" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.704321][ T30] audit: type=1400 audit(1751938889.998:490): avc: denied { watch_sb watch_reads } for pid=7500 comm="syz.3.379" path="/84/blkio.throttle.io_serviced" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.757716][ T7505] lo speed is unknown, defaulting to 1000 [ 164.796559][ T7505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.815939][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.856686][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 164.914592][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 164.930718][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.955534][ T10] usb 1-1: config 0 descriptor?? [ 164.987871][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 164.996253][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 164.996268][ T30] audit: type=1400 audit(1751938890.318:492): avc: denied { getopt } for pid=7511 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.022915][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 165.179957][ T7512] x_tables: duplicate underflow at hook 2 [ 165.195092][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 165.204153][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 165.214339][ T10] usb 1-1: media controller created [ 165.222557][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.301594][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 165.328803][ T30] audit: type=1400 audit(1751938890.648:493): avc: denied { name_bind } for pid=7516 comm="syz.3.384" src=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 165.362186][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 165.407343][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 165.443299][ T7523] dibusb: i2c wr: len=61 is too big! [ 165.443299][ T7523] [ 165.463237][ T30] audit: type=1400 audit(1751938890.778:494): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3005 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.512928][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 165.522300][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 165.650262][ T2145] usb 3-1: USB disconnect, device number 18 [ 165.675921][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 165.698961][ T5919] dvb-usb: error while querying for an remote control event. [ 165.924372][ T30] audit: type=1400 audit(1751938891.238:495): avc: denied { read write } for pid=7525 comm="syz.2.385" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 165.993794][ T30] audit: type=1400 audit(1751938891.238:496): avc: denied { open } for pid=7525 comm="syz.2.385" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.026428][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 166.035599][ T5919] dvb-usb: error while querying for an remote control event. [ 166.523010][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 166.528864][ T5919] dvb-usb: error while querying for an remote control event. [ 166.550531][ T30] audit: type=1400 audit(1751938891.238:497): avc: denied { ioctl } for pid=7525 comm="syz.2.385" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 166.605965][ T5838] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 166.618452][ T5838] Bluetooth: hci1: Injecting HCI hardware error event [ 166.627078][ T5846] Bluetooth: hci1: hardware error 0x00 [ 166.694515][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 166.990221][ T7542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1537 sclass=netlink_tcpdiag_socket pid=7542 comm=syz.4.388 [ 167.007877][ T7542] process 'syz.4.388' launched './file1' with NULL argv: empty string added [ 167.028369][ T7542] SELinux: failed to load policy [ 167.338786][ T5919] dvb-usb: error while querying for an remote control event. [ 167.360340][ T30] audit: type=1400 audit(1751938892.158:498): avc: denied { mount } for pid=7537 comm="syz.3.387" name="/" dev="configfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.384398][ T30] audit: type=1400 audit(1751938892.338:499): avc: denied { execute_no_trans } for pid=7535 comm="syz.4.388" path="/74/file1" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.505766][ T5974] dvb-usb: bulk message failed: -22 (1/0) [ 167.645621][ T5974] dvb-usb: error while querying for an remote control event. [ 167.663167][ T5919] usb 1-1: USB disconnect, device number 18 [ 167.746280][ T5919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 167.769991][ T30] audit: type=1400 audit(1751938893.088:500): avc: denied { append } for pid=7556 comm="syz.0.393" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 167.795697][ T5974] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 167.873781][ T30] audit: type=1400 audit(1751938893.188:501): avc: denied { watch_sb watch_reads } for pid=7558 comm="syz.3.394" path="/87" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 167.920892][ T7561] lo speed is unknown, defaulting to 1000 [ 167.944317][ T5974] usb 3-1: device descriptor read/64, error -71 [ 167.974424][ T2145] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 168.048969][ T7567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'. [ 168.062254][ T7567] syz.3.396 uses obsolete (PF_INET,SOCK_PACKET) [ 168.145653][ T2145] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.154039][ T2145] usb 5-1: config 0 has no interface number 0 [ 168.166106][ T2145] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 168.179192][ T2145] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 168.184360][ T5974] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 168.203673][ T2145] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.221237][ T2145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.265334][ T2145] usb 5-1: config 0 descriptor?? [ 168.281483][ T7554] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 168.334487][ T5974] usb 3-1: device descriptor read/64, error -71 [ 168.397411][ T2145] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 168.464730][ T5974] usb usb3-port1: attempt power cycle [ 168.552098][ T5919] usb 5-1: USB disconnect, device number 13 [ 169.224275][ T5974] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 169.264847][ T5974] usb 3-1: device descriptor read/8, error -71 [ 169.405348][ T5846] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 169.504587][ T5974] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 169.511292][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'. [ 169.525917][ T5974] usb 3-1: device descriptor read/8, error -71 [ 169.645073][ T5974] usb usb3-port1: unable to enumerate USB device [ 170.114401][ T2145] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 170.194415][ T5974] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 170.294572][ T2145] usb 1-1: Using ep0 maxpacket: 16 [ 170.302764][ T2145] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 170.312229][ T2145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.320393][ T2145] usb 1-1: Product: syz [ 170.324617][ T2145] usb 1-1: Manufacturer: syz [ 170.329201][ T2145] usb 1-1: SerialNumber: syz [ 170.335700][ T2145] usb 1-1: config 0 descriptor?? [ 170.345428][ T2145] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 170.362607][ T2145] usb 1-1: Detected FT232H [ 170.367725][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.395750][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 170.418107][ T5974] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.428125][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.438434][ T5974] usb 5-1: Product: syz [ 170.442711][ T5974] usb 5-1: Manufacturer: syz [ 170.448905][ T5974] usb 5-1: SerialNumber: syz [ 170.452374][ T7599] netlink: 'syz.1.406': attribute type 3 has an invalid length. [ 170.456017][ T5974] usb 5-1: config 0 descriptor?? [ 170.504421][ T5996] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.549476][ T2145] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 170.579305][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 170.579321][ T30] audit: type=1400 audit(1751938895.898:507): avc: denied { map } for pid=7602 comm="syz.1.408" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.609561][ T30] audit: type=1400 audit(1751938895.898:508): avc: denied { execute } for pid=7602 comm="syz.1.408" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.684556][ T5996] usb 4-1: Using ep0 maxpacket: 16 [ 170.704773][ T5996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.717308][ T5996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.721069][ T7590] netlink: 'syz.4.403': attribute type 12 has an invalid length. [ 170.727788][ T5996] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.738772][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.403'. [ 170.765045][ T5996] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.774945][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.785919][ T5996] usb 4-1: config 0 descriptor?? [ 170.837764][ T5974] usb 5-1: USB disconnect, device number 14 [ 170.894528][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 170.940451][ T7606] libceph: resolve '400' (ret=-3): failed [ 170.983381][ T2145] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.064326][ T5896] usb 3-1: device descriptor read/64, error -71 [ 171.078335][ T30] audit: type=1326 audit(1751938896.398:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7611 comm="syz.1.410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5b278e929 code=0x0 [ 171.182939][ T5974] usb 1-1: USB disconnect, device number 19 [ 171.200316][ T5974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.211840][ T5974] ftdi_sio 1-1:0.0: device disconnected [ 171.304304][ T5896] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 171.405847][ T5996] usbhid 4-1:0.0: can't add hid device: -71 [ 171.422067][ T5996] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 171.440485][ T5996] usb 4-1: USB disconnect, device number 17 [ 171.447740][ T5896] usb 3-1: device descriptor read/64, error -71 [ 171.580036][ T5896] usb usb3-port1: attempt power cycle [ 171.918669][ T30] audit: type=1400 audit(1751938897.238:510): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 171.967057][ T5896] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 172.044594][ T5996] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 172.056366][ T5896] usb 3-1: device descriptor read/8, error -71 [ 172.144958][ T7624] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 172.205687][ T5996] usb 5-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 172.246003][ T5996] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.256338][ T5996] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 35 [ 172.268378][ T5996] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.279780][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.378797][ T7628] netlink: 'syz.1.413': attribute type 58 has an invalid length. [ 172.416242][ T5896] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 172.425165][ T5996] usb 5-1: Product: syz [ 172.454440][ T5996] usb 5-1: Manufacturer: syz [ 172.459343][ T5996] usb 5-1: SerialNumber: syz [ 172.475398][ T5896] usb 3-1: device descriptor read/8, error -71 [ 172.521441][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 172.590828][ T5896] usb usb3-port1: unable to enumerate USB device [ 172.847842][ T5974] usb 5-1: USB disconnect, device number 15 [ 173.027048][ T7625] syz.1.413 (7625): drop_caches: 2 [ 174.325057][ T7649] 9pnet_fd: Insufficient options for proto=fd [ 174.328075][ T7644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.424621][ T5896] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 174.470658][ T7652] netlink: 'syz.4.421': attribute type 12 has an invalid length. [ 174.499725][ T7652] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.421'. [ 174.625265][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 174.641446][ T5896] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 174.665067][ T7659] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 174.672935][ T5896] usb 1-1: config 0 has no interface number 0 [ 174.683043][ T5896] usb 1-1: too many endpoints for config 0 interface 246 altsetting 31: 45, using maximum allowed: 30 [ 174.705928][ T7659] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.714052][ T7659] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.728704][ T5896] usb 1-1: config 0 interface 246 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 174.757246][ T2145] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 174.779853][ T5896] usb 1-1: config 0 interface 246 has no altsetting 0 [ 174.789200][ T5896] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 174.798629][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.802361][ T7659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.814229][ T5896] usb 1-1: Product: syz [ 174.818434][ T5896] usb 1-1: Manufacturer: syz [ 174.829285][ T5896] usb 1-1: SerialNumber: syz [ 174.853485][ T5896] usb 1-1: config 0 descriptor?? [ 174.914513][ T2145] usb 2-1: Using ep0 maxpacket: 32 [ 174.927697][ T2145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.953786][ T2145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.994411][ T2145] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 175.012652][ T2145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.026664][ T2145] usb 2-1: config 0 descriptor?? [ 175.079708][ T5896] gspca_main: sq930x-2.14.0 probing 2770:930c [ 175.106051][ T5896] gspca_sq930x: reg_r 001f failed -71 [ 175.121765][ T5896] sq930x 1-1:0.246: probe with driver sq930x failed with error -71 [ 175.144663][ T5896] usb 1-1: USB disconnect, device number 20 [ 175.344454][ T5974] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 175.514387][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 175.525368][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.536343][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.546148][ T5974] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 175.555392][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.566323][ T5974] usb 3-1: config 0 descriptor?? [ 175.659067][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.679416][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.896764][ T2145] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 175.984734][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 176.062714][ T7666] syzkaller0: entered promiscuous mode [ 176.084337][ T7666] syzkaller0: entered allmulticast mode [ 176.096716][ T2145] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 176.166514][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.190965][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.221295][ T5896] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.266592][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.285875][ T5896] usb 1-1: config 0 descriptor?? [ 176.288158][ T5974] usbhid 3-1:0.0: can't add hid device: -71 [ 176.298514][ T5974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.349122][ T5974] usb 3-1: USB disconnect, device number 27 [ 176.491850][ T30] audit: type=1400 audit(1751938901.808:511): avc: denied { create } for pid=7684 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 176.541703][ T2145] ft260 0003:0403:6030.0009: failed to retrieve status: -71 [ 176.608062][ T2145] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 176.634026][ T30] audit: type=1400 audit(1751938901.808:512): avc: denied { getopt } for pid=7684 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 176.960942][ T2145] usb 2-1: USB disconnect, device number 22 [ 177.233970][ T5996] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 177.289689][ T30] audit: type=1400 audit(1751938902.618:513): avc: denied { create } for pid=7694 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.310874][ T30] audit: type=1400 audit(1751938902.618:514): avc: denied { ioctl } for pid=7694 comm="syz.3.434" path="socket:[15965]" dev="sockfs" ino=15965 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.336605][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.349594][ T30] audit: type=1400 audit(1751938902.678:515): avc: denied { accept } for pid=7694 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 177.394390][ T5996] usb 5-1: Using ep0 maxpacket: 8 [ 177.408336][ T5996] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 177.417793][ T5996] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 177.426429][ T5996] usb 5-1: config 0 has no interface number 0 [ 177.433054][ T5996] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.444797][ T5996] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.455981][ T5996] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.469069][ T5996] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 177.478390][ T5996] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 177.486682][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 177.494451][ T5996] usb 5-1: Product: syz [ 177.498668][ T5996] usb 5-1: Manufacturer: syz [ 177.520731][ T5996] usb 5-1: config 0 descriptor?? [ 177.529177][ T7691] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.540379][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.551418][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.572069][ T5896] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 177.663656][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.673526][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.686433][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 177.695930][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.713724][ T43] usb 2-1: config 0 descriptor?? [ 177.806039][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.815511][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.831401][ T5896] usb 1-1: USB disconnect, device number 21 [ 178.133876][ T43] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 178.157065][ T5996] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input12 [ 178.325539][ T43] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 178.334429][ T43] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 178.376393][ T43] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -32 [ 178.437045][ T7703] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 178.447960][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 178.612150][ T10] usb 2-1: USB disconnect, device number 23 [ 178.625539][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.669202][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.731701][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.765305][ T7716] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 178.804533][ T5974] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 178.830769][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.895973][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.905705][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.008819][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.314303][ T5882] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 179.334284][ T5974] usb 3-1: Using ep0 maxpacket: 32 [ 179.334614][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.476288][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.493427][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x95, changing to 0x85 [ 179.588918][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 179.692413][ T5974] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.720873][ T5882] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 179.777300][ T5974] usb 3-1: config 0 has no interface number 0 [ 179.818793][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.865270][ T5974] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.969864][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.075152][ T5974] usb 3-1: Product: syz [ 180.117404][ T5974] usb 3-1: Manufacturer: syz [ 180.136318][ T5974] usb 3-1: SerialNumber: syz [ 180.151168][ T5882] usb 1-1: config 0 descriptor?? [ 180.265235][ T5882] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 180.391792][ T5974] usb 3-1: config 0 descriptor?? [ 180.712130][ T5974] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.723327][ T5974] usb 3-1: qt2_attach - failed to power on unit: -71 [ 180.730793][ T5974] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 180.747509][ T10] usb 1-1: USB disconnect, device number 22 [ 180.777697][ T5974] usb 3-1: USB disconnect, device number 28 [ 180.810762][ T5882] usb 5-1: USB disconnect, device number 16 [ 180.810784][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 181.016404][ T7721] syz.1.439 (7721): drop_caches: 2 [ 181.019387][ T7728] netlink: 256 bytes leftover after parsing attributes in process `syz.4.441'. [ 181.147971][ T7739] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 181.340755][ T30] audit: type=1400 audit(1751938906.628:516): avc: denied { bind } for pid=7742 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.627359][ T30] audit: type=1400 audit(1751938906.688:517): avc: denied { listen } for pid=7742 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.714657][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 181.912017][ T30] audit: type=1400 audit(1751938906.768:518): avc: denied { read } for pid=7742 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.971261][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 182.050376][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 182.112549][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.148409][ T43] usb 5-1: config 0 descriptor?? [ 182.161241][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 182.221532][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 182.267905][ T7757] overlayfs: failed to resolve './file0': -2 [ 182.359422][ T7759] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 182.367239][ T7759] UDF-fs: Scanning with blocksize 512 failed [ 182.376474][ T7759] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 182.384076][ T7759] UDF-fs: Scanning with blocksize 1024 failed [ 182.392825][ T7759] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 182.400578][ T7759] UDF-fs: Scanning with blocksize 2048 failed [ 182.409804][ T7759] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 182.417634][ T7759] UDF-fs: Scanning with blocksize 4096 failed [ 182.659620][ T7753] team0: Port device team_slave_0 removed [ 183.044270][ T5882] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 183.184337][ T5974] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 183.212380][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 183.223287][ T5882] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 183.243990][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.282104][ T5882] usb 2-1: config 0 descriptor?? [ 183.334354][ T30] audit: type=1400 audit(1751938908.648:519): avc: denied { mounton } for pid=7770 comm="syz.2.452" path="/88/file0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 183.394533][ T5974] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.405979][ T43] gspca_sunplus: reg_r err -110 [ 183.413258][ T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 183.413342][ T5974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.504685][ T5974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.516437][ T5974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.529463][ T5974] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.557650][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.584011][ T5974] usb 1-1: Product: syz [ 183.597138][ T30] audit: type=1400 audit(1751938908.908:520): avc: denied { setopt } for pid=7761 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.614592][ T5974] usb 1-1: Manufacturer: syz [ 183.666808][ T30] audit: type=1400 audit(1751938908.918:521): avc: denied { read } for pid=7761 comm="syz.1.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.673693][ T5974] cdc_wdm 1-1:1.0: skipping garbage [ 183.706587][ T5974] cdc_wdm 1-1:1.0: skipping garbage [ 183.727887][ T5974] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 183.977113][ T30] audit: type=1400 audit(1751938909.298:522): avc: denied { write } for pid=7781 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.034826][ T7785] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 184.170674][ T7785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.200488][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.273091][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.367980][ T30] audit: type=1400 audit(1751938909.688:523): avc: denied { call } for pid=7756 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 184.404576][ T974] usb 1-1: USB disconnect, device number 23 [ 184.426516][ T30] audit: type=1400 audit(1751938909.708:524): avc: denied { transfer } for pid=7756 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 184.574366][ T5974] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 184.724407][ T5974] usb 3-1: Using ep0 maxpacket: 16 [ 184.735541][ T5974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 184.755040][ T5974] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 184.774683][ T5974] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 184.788344][ T5974] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 184.800689][ T5974] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 184.812590][ T5974] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.819368][ T5974] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 184.828567][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.840633][ T5974] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 184.951475][ T7795] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 185.025044][ T974] usb 5-1: USB disconnect, device number 17 [ 185.035046][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 185.180712][ T5974] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 185.192427][ T30] audit: type=1400 audit(1751938910.498:525): avc: denied { write } for pid=7799 comm="syz.4.459" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.216337][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.242606][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 185.262635][ T5974] usb 3-1: USB disconnect, device number 29 [ 185.269588][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 185.452087][ T30] audit: type=1400 audit(1751938910.498:526): avc: denied { open } for pid=7799 comm="syz.4.459" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 185.502666][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.591464][ T10] usb 4-1: config 0 descriptor?? [ 185.603518][ T7791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 185.944908][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 185.950919][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 186.417803][ T10] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 186.442022][ T10] usb 4-1: USB disconnect, device number 18 [ 186.448318][ T5882] usb 2-1: USB disconnect, device number 24 [ 186.562351][ T7824] fido_id[7824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 186.693732][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 186.693750][ T30] audit: type=1400 audit(1751938911.988:528): avc: denied { override_creds } for pid=7825 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.914285][ T5882] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 187.076457][ T5974] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 187.088067][ T5882] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 187.124441][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 187.138986][ T5882] usb 2-1: Product: syz [ 187.150850][ T5882] usb 2-1: Manufacturer: syz [ 187.161838][ T5882] usb 2-1: SerialNumber: syz [ 187.183721][ T5882] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 187.257019][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.280720][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.310911][ T5974] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 187.342043][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.418292][ T5974] usb 3-1: config 0 descriptor?? [ 187.466236][ T5882] vp7045: USB control message 'out' went wrong. [ 187.475739][ T5882] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 187.535903][ T5882] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 187.556220][ T5882] usb 2-1: USB disconnect, device number 25 [ 187.780579][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 187.851152][ T5974] usbhid 3-1:0.0: can't add hid device: -71 [ 187.864991][ T5974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 187.889143][ T5974] usb 3-1: USB disconnect, device number 30 [ 188.248001][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 188.256043][ T5996] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.357690][ T30] audit: type=1400 audit(1751938913.678:529): avc: denied { read write } for pid=7855 comm="syz.1.472" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.384874][ T7856] loop6: detected capacity change from 0 to 524287999 [ 188.412033][ T30] audit: type=1400 audit(1751938913.698:530): avc: denied { open } for pid=7855 comm="syz.1.472" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.447069][ T7854] netlink: 'syz.0.471': attribute type 21 has an invalid length. [ 188.455305][ T7854] netlink: 156 bytes leftover after parsing attributes in process `syz.0.471'. [ 188.469687][ T7854] netlink: 'syz.0.471': attribute type 21 has an invalid length. [ 188.477654][ T7854] netlink: 156 bytes leftover after parsing attributes in process `syz.0.471'. [ 188.498018][ T7857] sg_write: process 347 (syz.1.472) changed security contexts after opening file descriptor, this is not allowed. [ 188.525073][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.549761][ T5996] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.564945][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.581040][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.614432][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 188.623607][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.631771][ T5996] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 188.648564][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.694106][ T5896] usb 4-1: config 0 descriptor?? [ 188.709332][ T5996] usb 5-1: config 0 descriptor?? [ 188.748080][ T30] audit: type=1400 audit(1751938913.698:531): avc: denied { append } for pid=7855 comm="syz.1.472" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.860760][ T30] audit: type=1400 audit(1751938913.818:532): avc: denied { watch_mount } for pid=7855 comm="syz.1.472" path="/97" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.180176][ T5996] apple 0003:05AC:027A.000D: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 189.603489][ T7849] netlink: 80 bytes leftover after parsing attributes in process `syz.4.470'. [ 189.677786][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.702675][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.717879][ T7849] bridge0: Device is already in use. [ 189.730885][ T5974] usb 5-1: USB disconnect, device number 18 [ 189.925611][ T30] audit: type=1400 audit(1751938915.238:533): avc: denied { mount } for pid=7869 comm="syz.2.476" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 189.947518][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.962901][ T7875] netlink: 868 bytes leftover after parsing attributes in process `syz.1.477'. [ 189.972390][ T30] audit: type=1400 audit(1751938915.248:534): avc: denied { unmount } for pid=7869 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 190.777196][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 190.783244][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 190.789293][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 190.795336][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 191.274274][ T30] audit: type=1326 audit(1751938916.558:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7670f8e929 code=0x7fc00000 [ 191.297467][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.310740][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 191.316858][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 191.365099][ T30] audit: type=1400 audit(1751938916.668:536): avc: denied { name_bind 0x1000000 } for pid=7883 comm="syz.0.480" path="socket:[16940]" dev="sockfs" ino=16940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 191.389518][ T30] audit: type=1400 audit(1751938916.668:537): avc: denied { watch } for pid=7883 comm="syz.0.480" path="/89/file1" dev="autofs" ino=16941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 191.411819][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.431455][ T5896] usb 4-1: USB disconnect, device number 19 [ 191.787246][ T7897] overlayfs: missing 'lowerdir' [ 191.884767][ T7898] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 193.086950][ T7883] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 193.094908][ T7915] af_packet: tpacket_rcv: packet too big, clamped from 699 to 4294967286. macoff=82 [ 193.895913][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.902360][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.052421][ T7927] netlink: 860 bytes leftover after parsing attributes in process `syz.0.490'. [ 194.104054][ T7932] binder: 7929:7932 unknown command 0 [ 194.122575][ T7932] binder: 7929:7932 ioctl c0306201 2000000001c0 returned -22 [ 194.383945][ T7935] netlink: 96 bytes leftover after parsing attributes in process `syz.4.495'. [ 194.433894][ T7945] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 194.531409][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 194.531426][ T30] audit: type=1400 audit(1751938919.848:539): avc: denied { append } for pid=7946 comm="syz.0.499" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.575866][ T7950] netlink: 'syz.1.497': attribute type 2 has an invalid length. [ 194.589446][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 194.601064][ T7950] netlink: 'syz.1.497': attribute type 2 has an invalid length. [ 194.609086][ T30] audit: type=1400 audit(1751938919.888:540): avc: denied { map } for pid=7946 comm="syz.0.499" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.633322][ T7947] netlink: 'syz.0.499': attribute type 5 has an invalid length. [ 194.646589][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.499'. [ 194.657901][ T7947] binder: 7946:7947 ioctl c0306201 200000000640 returned -22 [ 194.680262][ T30] audit: type=1400 audit(1751938919.888:541): avc: denied { execute } for pid=7946 comm="syz.0.499" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 194.717623][ T30] audit: type=1400 audit(1751938919.928:542): avc: denied { append } for pid=7952 comm="syz.2.498" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.718075][ T7947] binder: 7946:7947 ioctl c01064c1 200000000080 returned -22 [ 194.741455][ T30] audit: type=1400 audit(1751938919.968:543): avc: denied { nlmsg_read } for pid=7949 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.792861][ T7953] lo speed is unknown, defaulting to 1000 [ 194.873454][ T7960] netlink: 830 bytes leftover after parsing attributes in process `syz.3.500'. [ 194.894687][ T5974] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 194.914682][ T5882] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 194.955951][ T7967] could not allocate digest TFM handle sha256-ce [ 195.024523][ T5974] usb 2-1: device descriptor read/64, error -71 [ 195.085519][ T5882] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 195.093775][ T5882] usb 5-1: config 0 has no interface number 0 [ 195.143095][ T5882] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=e7.7b [ 195.153773][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.162359][ T5882] usb 5-1: Product: syz [ 195.168237][ T5882] usb 5-1: Manufacturer: syz [ 195.172856][ T30] audit: type=1400 audit(1751938920.488:544): avc: denied { read } for pid=7973 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.192128][ T5882] usb 5-1: SerialNumber: syz [ 195.208987][ T5882] usb 5-1: config 0 descriptor?? [ 195.228279][ T5882] ttusb_dec_send_command: command bulk message failed: error -22 [ 195.247310][ T5882] ttusb-dec 5-1:0.189: probe with driver ttusb-dec failed with error -22 [ 195.274620][ T5974] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 195.288382][ T7976] netlink: 860 bytes leftover after parsing attributes in process `syz.3.503'. [ 195.414282][ T5974] usb 2-1: device descriptor read/64, error -71 [ 195.509022][ T30] audit: type=1400 audit(1751938920.828:545): avc: denied { validate_trans } for pid=7949 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 195.525321][ T7953] overlayfs: empty lowerdir [ 195.529278][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.541690][ T5974] usb usb2-port1: attempt power cycle [ 195.576700][ T5896] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 195.745798][ T5896] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.759876][ T5896] usb 1-1: config 0 has no interface number 0 [ 195.776149][ T5896] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 195.796727][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.814256][ T5896] usb 1-1: Product: syz [ 195.818643][ T5896] usb 1-1: Manufacturer: syz [ 195.823236][ T5896] usb 1-1: SerialNumber: syz [ 195.840412][ T5896] usb 1-1: config 0 descriptor?? [ 196.068544][ T5896] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 196.114429][ T5974] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 196.138872][ T5974] usb 2-1: device descriptor read/8, error -71 [ 196.404617][ T5882] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 196.412397][ T5974] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 196.470628][ T5974] usb 2-1: device descriptor read/8, error -71 [ 196.610339][ T5974] usb usb2-port1: unable to enumerate USB device [ 196.610711][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.683496][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.740999][ T5882] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 196.795461][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.917950][ T5882] usb 4-1: config 0 descriptor?? [ 197.628395][ T5974] usb 5-1: USB disconnect, device number 19 [ 198.075131][ T5896] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.095575][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 198.107824][ T5896] usb 1-1: media controller created [ 198.127244][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.162290][ T7998] x_tables: ip_tables: osf match: only valid for protocol 6 [ 198.195935][ T5896] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 198.243078][ T5896] usb 1-1: USB disconnect, device number 24 [ 198.479205][ T30] audit: type=1400 audit(1751938923.798:546): avc: denied { read } for pid=8003 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 199.094381][ T30] audit: type=1400 audit(1751938924.398:547): avc: denied { create } for pid=8000 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 199.115098][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 199.127164][ T30] audit: type=1400 audit(1751938924.408:548): avc: denied { ioctl } for pid=8000 comm="syz.4.512" path="socket:[17268]" dev="sockfs" ino=17268 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 199.298591][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 199.304826][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.323809][ T5882] usb 4-1: USB disconnect, device number 20 [ 199.334366][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 199.428720][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.470672][ T5896] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 199.524502][ T5896] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 199.557597][ T5896] usb 1-1: Product: syz [ 199.570148][ T8019] netlink: 860 bytes leftover after parsing attributes in process `syz.2.515'. [ 199.572013][ T5896] usb 1-1: Manufacturer: syz [ 199.632638][ T5896] usb 1-1: SerialNumber: syz [ 199.650272][ T5896] usb 1-1: config 0 descriptor?? [ 199.669798][ T5896] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 199.687489][ T5919] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 199.735964][ T5896] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 199.743681][ T5896] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 199.792748][ T5896] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 199.817246][ T5896] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 199.835460][ T5896] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 199.856256][ T5896] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 199.888076][ T5896] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 199.900876][ T5896] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 199.910375][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.911381][ T5896] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 199.931546][ T5896] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 199.968261][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 199.997667][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.012693][ T5896] usb 1-1: USB disconnect, device number 25 [ 200.028969][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.037530][ T8028] dlm: non-version read from control device 2147479540 [ 200.051372][ T8029] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 200.063182][ T5896] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 200.071248][ T5919] usb 2-1: Product: syz [ 200.087869][ T5919] usb 2-1: Manufacturer: syz [ 200.092534][ T5919] usb 2-1: SerialNumber: syz [ 200.133709][ T5919] usb 2-1: config 0 descriptor?? [ 200.144348][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 200.147470][ T5896] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 200.179548][ T5896] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 200.193578][ T5896] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 200.215164][ T5896] keyspan 1-1:0.0: device disconnected [ 200.398542][ T8012] netlink: 'syz.1.513': attribute type 12 has an invalid length. [ 200.409904][ T8012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.513'. [ 200.466973][ T5919] usb 2-1: USB disconnect, device number 30 [ 200.494273][ T5974] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 200.543848][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.590134][ T8037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.597653][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 200.615538][ T8037] lo: entered allmulticast mode [ 200.622200][ T8037] tunl0: entered allmulticast mode [ 200.630082][ T8037] gre0: entered allmulticast mode [ 200.638609][ T8037] gretap0: entered allmulticast mode [ 200.660616][ T8037] erspan0: entered allmulticast mode [ 200.664263][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 200.678918][ T5974] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 200.679526][ T8037] ip_vti0: entered allmulticast mode [ 200.695148][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.708136][ T8037] ip6_vti0: entered allmulticast mode [ 200.717154][ T5974] usb 5-1: config 0 descriptor?? [ 200.727075][ T8037] sit0: entered allmulticast mode [ 200.735211][ T5974] gspca_main: sq930x-2.14.0 probing 041e:403c [ 200.745390][ T8037] ip6tnl0: entered allmulticast mode [ 200.752513][ T8037] ip6gre0: entered allmulticast mode [ 200.760748][ T8037] syz_tun: entered allmulticast mode [ 200.768676][ T8037] ip6gretap0: entered allmulticast mode [ 200.778974][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.786310][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.796895][ T8037] bridge0: entered allmulticast mode [ 200.804020][ T8037] vcan0: entered allmulticast mode [ 200.811299][ T8037] bond0: entered allmulticast mode [ 200.816791][ T8037] bond_slave_0: entered allmulticast mode [ 200.822538][ T8037] bond_slave_1: entered allmulticast mode [ 200.828394][ T8037] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 200.839976][ T8037] team0: entered allmulticast mode [ 200.845365][ T8037] team_slave_0: entered allmulticast mode [ 200.852014][ T8037] team_slave_1: entered allmulticast mode [ 200.858110][ T8037] bond1: entered allmulticast mode [ 200.867038][ T8037] dummy0: entered allmulticast mode [ 200.878703][ T8037] nlmon0: entered allmulticast mode [ 200.888207][ T8037] caif0: entered allmulticast mode [ 200.893701][ T8037] batadv0: entered allmulticast mode [ 200.908143][ T8037] vxcan0: entered allmulticast mode [ 200.915930][ T8037] vxcan1: entered allmulticast mode [ 200.928167][ T8037] veth0: entered allmulticast mode [ 200.948479][ T2145] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 200.977343][ T8037] veth1: entered allmulticast mode [ 200.988224][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 201.021180][ T8037] wg0: entered allmulticast mode [ 201.030242][ T8037] wg1: entered allmulticast mode [ 201.039647][ T8037] wg2: entered allmulticast mode [ 201.045352][ T8047] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 201.047828][ T8037] veth0_to_bridge: entered allmulticast mode [ 201.082768][ T8037] veth1_to_bridge: entered allmulticast mode [ 201.092910][ T8037] veth0_to_bond: entered allmulticast mode [ 201.102521][ T8037] veth1_to_bond: entered allmulticast mode [ 201.112013][ T8037] veth0_to_team: entered allmulticast mode [ 201.122022][ T8037] veth1_to_team: entered allmulticast mode [ 201.128499][ T2145] usb 1-1: Invalid ep0 maxpacket: 64 [ 201.137665][ T8037] veth0_to_batadv: entered allmulticast mode [ 201.146784][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.154696][ T8037] batadv_slave_0: entered allmulticast mode [ 201.166711][ T8037] veth1_to_batadv: entered allmulticast mode [ 201.174408][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.182108][ T8037] batadv_slave_1: entered allmulticast mode [ 201.189930][ T8037] xfrm0: entered allmulticast mode [ 201.197383][ T8037] veth0_to_hsr: entered allmulticast mode [ 201.205220][ T8037] hsr_slave_0: entered allmulticast mode [ 201.212326][ T8037] hsr0: entered allmulticast mode [ 201.220415][ T8037] veth1_virt_wifi: entered allmulticast mode [ 201.230547][ T8037] veth0_virt_wifi: entered allmulticast mode [ 201.238323][ T8037] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 201.246361][ T8037] veth1_vlan: entered allmulticast mode [ 201.253859][ T8037] veth0_vlan: entered allmulticast mode [ 201.266783][ T8037] vlan0: entered allmulticast mode [ 201.272003][ T8037] vlan1: entered allmulticast mode [ 201.277192][ T2145] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 201.286214][ T8037] macvlan0: entered allmulticast mode [ 201.293819][ T8037] macvlan1: entered allmulticast mode [ 201.302661][ T8037] ipvlan0: entered allmulticast mode [ 201.308212][ T8037] ipvlan1: entered allmulticast mode [ 201.314119][ T8037] veth1_macvtap: entered allmulticast mode [ 201.322003][ T8037] veth0_macvtap: entered allmulticast mode [ 201.335178][ T8037] macvtap0: entered allmulticast mode [ 201.342892][ T8037] macsec0: entered allmulticast mode [ 201.350286][ T8037] geneve0: entered allmulticast mode [ 201.358572][ T8037] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.367344][ T8037] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.376019][ T8037] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.384292][ T5882] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 201.384429][ T8037] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.400378][ T8037] geneve1: entered allmulticast mode [ 201.413533][ T8037] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 201.422283][ T8037] netdevsim netdevsim3 eth0: entered allmulticast mode [ 201.429433][ T8037] netdevsim netdevsim3 eth1: entered allmulticast mode [ 201.437895][ T2145] usb 1-1: Invalid ep0 maxpacket: 64 [ 201.440858][ T8037] netdevsim netdevsim3 eth2: entered allmulticast mode [ 201.443465][ T2145] usb usb1-port1: attempt power cycle [ 201.451048][ T8037] netdevsim netdevsim3 eth3: entered allmulticast mode [ 201.468763][ T8037] bond2: entered allmulticast mode [ 201.474097][ T8037] ip6gretap1: entered allmulticast mode [ 201.482709][ T8037] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 201.491135][ T8037] veth2: entered allmulticast mode [ 201.496497][ T8037] veth3: entered allmulticast mode [ 201.502033][ T8037] bond3: entered allmulticast mode [ 201.544638][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 201.569379][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 201.590364][ T8054] netlink: 860 bytes leftover after parsing attributes in process `syz.3.527'. [ 201.601492][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 201.617015][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.629113][ T5882] usb 2-1: Product: syz [ 201.644405][ T5882] usb 2-1: Manufacturer: syz [ 201.649225][ T5882] usb 2-1: SerialNumber: syz [ 201.659603][ T5882] usb 2-1: config 0 descriptor?? [ 201.804259][ T5896] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 201.814318][ T2145] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 201.834745][ T2145] usb 1-1: Invalid ep0 maxpacket: 64 [ 201.896219][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.526'. [ 201.927372][ T5996] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 201.931941][ T5882] usb 2-1: USB disconnect, device number 31 [ 201.954397][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 201.961255][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.972573][ T5835] udevd[5835]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 201.972574][ T2145] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 201.989233][ T5835] udevd[5835]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 201.990987][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.011485][ T5896] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 202.034318][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.046602][ T5974] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 202.057395][ T5974] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 202.057633][ T2145] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.075366][ T2145] usb usb1-port1: unable to enumerate USB device [ 202.080984][ T5974] usb 5-1: USB disconnect, device number 20 [ 202.082321][ T5896] usb 3-1: config 0 descriptor?? [ 202.096150][ T5996] usb 4-1: Using ep0 maxpacket: 32 [ 202.104143][ T5996] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 202.112742][ T5996] usb 4-1: config 0 has no interface number 0 [ 202.119394][ T5996] usb 4-1: config 0 interface 54 has no altsetting 0 [ 202.130592][ T5996] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 202.139708][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.147891][ T5996] usb 4-1: Product: syz [ 202.152055][ T5996] usb 4-1: Manufacturer: syz [ 202.156678][ T5996] usb 4-1: SerialNumber: syz [ 202.162836][ T5996] usb 4-1: config 0 descriptor?? [ 202.374761][ T5996] ums_eneub6250 4-1:0.54: USB Mass Storage device detected [ 202.420455][ T5996] usb 4-1: USB disconnect, device number 21 [ 202.541987][ T5896] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 202.805952][ T5896] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 202.967054][ T8072] FAULT_INJECTION: forcing a failure. [ 202.967054][ T8072] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.980213][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.1.533 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 202.980237][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.980249][ T8072] Call Trace: [ 202.980255][ T8072] [ 202.980262][ T8072] dump_stack_lvl+0x16c/0x1f0 [ 202.980290][ T8072] should_fail_ex+0x512/0x640 [ 202.980316][ T8072] _copy_from_user+0x2e/0xd0 [ 202.980343][ T8072] copy_msghdr_from_user+0x98/0x160 [ 202.980366][ T8072] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 202.980402][ T8072] ___sys_sendmsg+0xfe/0x1d0 [ 202.980432][ T8072] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.980453][ T8072] ? __lock_acquire+0x622/0x1c90 [ 202.980502][ T8072] __sys_sendmsg+0x16d/0x220 [ 202.980525][ T8072] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.980566][ T8072] do_syscall_64+0xcd/0x4c0 [ 202.980591][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.980608][ T8072] RIP: 0033:0x7fa5b278e929 [ 202.980623][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.980640][ T8072] RSP: 002b:00007fa5b35f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.980658][ T8072] RAX: ffffffffffffffda RBX: 00007fa5b29b6160 RCX: 00007fa5b278e929 [ 202.980669][ T8072] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 202.980679][ T8072] RBP: 00007fa5b35f9090 R08: 0000000000000000 R09: 0000000000000000 [ 202.980690][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.980700][ T8072] R13: 0000000000000000 R14: 00007fa5b29b6160 R15: 00007ffe4bf0eab8 [ 202.980723][ T8072] [ 203.658403][ T5882] usb 3-1: USB disconnect, device number 31 [ 204.433451][ T8090] netlink: 860 bytes leftover after parsing attributes in process `syz.2.539'. [ 204.524764][ T5896] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 204.624617][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 204.624633][ T30] audit: type=1400 audit(1751938929.948:550): avc: denied { accept } for pid=8096 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.653456][ T30] audit: type=1400 audit(1751938929.968:551): avc: denied { read } for pid=8096 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.704855][ T5896] usb 4-1: device descriptor read/64, error -71 [ 204.712592][ T30] audit: type=1400 audit(1751938930.028:552): avc: denied { setopt } for pid=8096 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.795905][ T8100] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 204.944420][ T5896] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 204.949576][ T8100] lo speed is unknown, defaulting to 1000 [ 205.036922][ T30] audit: type=1400 audit(1751938930.358:553): avc: denied { shutdown } for pid=8101 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.135728][ T5896] usb 4-1: device descriptor read/64, error -71 [ 205.244782][ T5896] usb usb4-port1: attempt power cycle [ 206.075849][ T5896] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 206.439662][ T5896] usb 4-1: device descriptor read/8, error -71 [ 206.561838][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 206.694425][ T5896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 206.748100][ T5896] usb 4-1: device descriptor read/8, error -71 [ 206.836251][ T5996] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 206.864504][ T8128] netlink: 860 bytes leftover after parsing attributes in process `syz.0.550'. [ 206.875010][ T5896] usb usb4-port1: unable to enumerate USB device [ 207.124283][ T5996] usb 3-1: Using ep0 maxpacket: 8 [ 207.135049][ T5996] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.146947][ T5996] usb 3-1: config 5 has an invalid descriptor of length 234, skipping remainder of the config [ 207.510212][ T8145] netlink: 256 bytes leftover after parsing attributes in process `syz.3.554'. [ 207.624465][ T5996] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 207.637136][ T5996] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=5f.dc [ 207.646447][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.684157][ T5996] usb 3-1: Product: syz [ 207.688487][ T5996] usb 3-1: Manufacturer: syz [ 207.693088][ T5996] usb 3-1: SerialNumber: syz [ 207.885300][ T30] audit: type=1400 audit(1751938933.198:554): avc: denied { ioctl } for pid=8148 comm="syz.1.555" path="socket:[18735]" dev="sockfs" ino=18735 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 207.973802][ T5996] usb 3-1: USB disconnect, device number 32 [ 208.036334][ T8154] FAULT_INJECTION: forcing a failure. [ 208.036334][ T8154] name failslab, interval 1, probability 0, space 0, times 1 [ 208.049109][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.3.556 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 208.049133][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.049143][ T8154] Call Trace: [ 208.049150][ T8154] [ 208.049157][ T8154] dump_stack_lvl+0x16c/0x1f0 [ 208.049185][ T8154] should_fail_ex+0x512/0x640 [ 208.049207][ T8154] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 208.049233][ T8154] should_failslab+0xc2/0x120 [ 208.049258][ T8154] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 208.049281][ T8154] ? __alloc_skb+0x2b2/0x380 [ 208.049302][ T8154] ? __alloc_skb+0x86/0x380 [ 208.049325][ T8154] __alloc_skb+0x2b2/0x380 [ 208.049346][ T8154] ? __pfx___alloc_skb+0x10/0x10 [ 208.049370][ T8154] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 208.049403][ T8154] netlink_alloc_large_skb+0x69/0x130 [ 208.049427][ T8154] netlink_sendmsg+0x6a1/0xdd0 [ 208.049448][ T8154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.049475][ T8154] ____sys_sendmsg+0xa95/0xc70 [ 208.049493][ T8154] ? copy_msghdr_from_user+0x10a/0x160 [ 208.049515][ T8154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.049535][ T8154] ? __lock_acquire+0xb8a/0x1c90 [ 208.049559][ T8154] ___sys_sendmsg+0x134/0x1d0 [ 208.049583][ T8154] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.049603][ T8154] ? __lock_acquire+0x622/0x1c90 [ 208.049651][ T8154] __sys_sendmsg+0x16d/0x220 [ 208.049673][ T8154] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.049713][ T8154] do_syscall_64+0xcd/0x4c0 [ 208.049739][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.049756][ T8154] RIP: 0033:0x7f7670f8e929 [ 208.049771][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.049788][ T8154] RSP: 002b:00007f7671e52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.049805][ T8154] RAX: ffffffffffffffda RBX: 00007f76711b6160 RCX: 00007f7670f8e929 [ 208.049817][ T8154] RDX: 0000000000000000 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 208.049827][ T8154] RBP: 00007f7671e52090 R08: 0000000000000000 R09: 0000000000000000 [ 208.049837][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.049847][ T8154] R13: 0000000000000000 R14: 00007f76711b6160 R15: 00007ffcb7875048 [ 208.049871][ T8154] [ 208.554287][ T5919] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 208.631084][ T30] audit: type=1400 audit(1751938933.948:555): avc: denied { create } for pid=8161 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 208.685465][ T5919] usb 5-1: device descriptor read/64, error -71 [ 208.774449][ T30] audit: type=1400 audit(1751938934.088:556): avc: denied { ioctl } for pid=8161 comm="syz.1.559" path="socket:[17794]" dev="sockfs" ino=17794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 208.934401][ T5996] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 208.984326][ T5919] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 209.094354][ T2145] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 209.106237][ T5996] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 209.115419][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 209.123518][ T30] audit: type=1400 audit(1751938934.448:557): avc: denied { getopt } for pid=8175 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 209.142949][ T5996] usb 1-1: Product: syz [ 209.147247][ T5996] usb 1-1: Manufacturer: syz [ 209.150290][ T5919] usb 5-1: device descriptor read/64, error -71 [ 209.151829][ T5996] usb 1-1: SerialNumber: syz [ 209.182875][ T5996] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 209.196871][ T8177] block nbd2: shutting down sockets [ 209.245891][ T2145] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.260192][ T2145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 209.274820][ T5919] usb usb5-port1: attempt power cycle [ 209.286205][ T2145] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.295961][ T2145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.321138][ T2145] usb 2-1: config 0 descriptor?? [ 209.341655][ T8173] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 209.351480][ T2145] hub 2-1:0.0: USB hub found [ 209.397044][ T5996] vp7045: USB control message 'out' went wrong. [ 209.404867][ T5996] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 209.415361][ T5996] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 209.433452][ T5996] usb 1-1: USB disconnect, device number 30 [ 209.554025][ T2145] hub 2-1:0.0: 2 ports detected [ 209.574280][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 209.624254][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 209.645445][ T5919] usb 5-1: device descriptor read/8, error -71 [ 209.726396][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 209.735116][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 209.743527][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.752699][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.761961][ T10] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 209.768426][ T2145] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 209.797380][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.803256][ T10] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 209.841297][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.845606][ T2145] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 209.847940][ T10] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 209.882245][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.890504][ T2145] usbhid 2-1:0.0: can't add hid device: -71 [ 209.899580][ T2145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 209.929984][ T2145] usb 2-1: USB disconnect, device number 32 [ 209.954924][ T5919] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 209.974834][ T5919] usb 5-1: device descriptor read/8, error -71 [ 210.086162][ T5919] usb usb5-port1: unable to enumerate USB device [ 210.111830][ T10] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 210.135758][ T10] usb 3-1: USB disconnect, device number 33 [ 210.146418][ T10] usblp0: removed [ 210.289808][ T8186] xt_SECMARK: invalid mode: 2 [ 210.620251][ T2145] lo speed is unknown, defaulting to 1000 [ 210.765438][ T8192] Bluetooth: MGMT ver 1.23 [ 212.902219][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.114291][ T5919] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 214.258007][ T5919] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.268722][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.282700][ T5919] usb 2-1: config 0 descriptor?? [ 214.313410][ T5919] cp210x 2-1:0.0: cp210x converter detected [ 214.384269][ T5974] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 214.428913][ T2145] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 214.841987][ T5919] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 214.849824][ T5919] cp210x 2-1:0.0: querying part number failed [ 214.869456][ T5974] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 214.883305][ T5919] usb 2-1: cp210x converter now attached to ttyUSB0 [ 214.891221][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 214.902202][ T5974] usb 3-1: Product: syz [ 214.907454][ T5974] usb 3-1: Manufacturer: syz [ 214.914269][ T5974] usb 3-1: SerialNumber: syz [ 214.917928][ T2145] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.929968][ T5974] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 214.974427][ T2145] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 215.013332][ T2145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.021578][ T2145] usb 1-1: Product: syz [ 215.025923][ T2145] usb 1-1: Manufacturer: syz [ 215.044262][ T2145] usb 1-1: SerialNumber: syz [ 215.089453][ T2145] usb 1-1: config 0 descriptor?? [ 215.102318][ T2145] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 215.108755][ T2145] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 215.225701][ T5974] vp7045: USB control message 'out' went wrong. [ 215.243882][ T5974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 215.256980][ T5974] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 215.278967][ T5974] usb 3-1: USB disconnect, device number 34 [ 215.339882][ T5882] usb 1-1: USB disconnect, device number 31 [ 216.173614][ T5974] usb 2-1: USB disconnect, device number 33 [ 216.202868][ T5974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.237428][ T5974] cp210x 2-1:0.0: device disconnected [ 216.345463][ T8235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.536994][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 216.713287][ T8249] tipc: Started in network mode [ 216.718580][ T8249] tipc: Node identity ac1414aa, cluster identity 4711 [ 216.729361][ T8249] tipc: New replicast peer: 0.0.0.0 [ 216.737308][ T8249] tipc: Enabled bearer , priority 10 [ 216.756113][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 216.804384][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 216.920184][ T8238] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 217.322127][ T43] usb 4-1: device descriptor read/64, error -71 [ 217.584292][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 217.613293][ T30] audit: type=1400 audit(1751938942.928:558): avc: denied { accept } for pid=8268 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 217.632894][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.686448][ T8280] lo speed is unknown, defaulting to 1000 [ 217.759582][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.787656][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 217.831098][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.851031][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.866274][ T5974] tipc: Node number set to 2886997162 [ 217.876978][ T43] usb 4-1: Product: syz [ 217.891315][ T43] usb 4-1: Manufacturer: syz [ 217.936475][ T43] usb 4-1: SerialNumber: syz [ 218.006607][ T43] usb 4-1: config 0 descriptor?? [ 218.266752][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x4 [ 218.365780][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x0 [ 218.408912][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x0 [ 218.433160][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x0 [ 218.464314][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x0 [ 218.477310][ T5996] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.477427][ T8254] netlink: 'syz.3.585': attribute type 12 has an invalid length. [ 218.494271][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x2 [ 218.501916][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x0 [ 218.504234][ T8254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.585'. [ 218.524337][ T2145] hid-generic 0002:0004:0009.000F: unknown main item tag 0x0 [ 218.532067][ T2145] hid-generic 0002:0004:0009.000F: item fetching failed at offset 8/17 [ 218.552843][ T2145] hid-generic 0002:0004:0009.000F: probe with driver hid-generic failed with error -22 [ 218.629261][ T30] audit: type=1400 audit(1751938943.948:559): avc: denied { remount } for pid=8304 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 218.679882][ T8305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.703673][ T43] usb 4-1: USB disconnect, device number 27 [ 218.729422][ T8305] bond0: (slave rose0): Enslaving as an active interface with an up link [ 218.744269][ T30] audit: type=1400 audit(1751938943.978:560): avc: denied { ioctl } for pid=8304 comm="syz.2.596" path="socket:[19178]" dev="sockfs" ino=19178 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.768702][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.861624][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.952801][ T8317] sch_tbf: burst 19818 is lower than device lo mtu (11337746) ! [ 219.813776][ T5996] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 220.028359][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 220.340102][ T5996] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.349456][ T30] audit: type=1400 audit(1751938945.678:561): avc: denied { map } for pid=8339 comm="syz.1.603" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.392735][ T5996] usb 1-1: config 0 has no interface number 0 [ 220.432463][ T5996] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.459444][ T30] audit: type=1400 audit(1751938945.678:562): avc: denied { execute } for pid=8339 comm="syz.1.603" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.483798][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.491946][ T5996] usb 1-1: Product: syz [ 220.496813][ T5996] usb 1-1: Manufacturer: syz [ 220.501474][ T5996] usb 1-1: SerialNumber: syz [ 220.508438][ T5996] usb 1-1: config 0 descriptor?? [ 220.517310][ T5996] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.726584][ T5996] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 220.820993][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'. [ 220.832191][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 220.935074][ T5882] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 221.109004][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 221.154523][ T5996] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.267407][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.292105][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.333608][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.343172][ T5974] usb 1-1: USB disconnect, device number 32 [ 221.361700][ T5974] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.423838][ T5882] usb 4-1: string descriptor 0 read error: -22 [ 221.450053][ T5974] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.500433][ T5882] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.562457][ T5974] quatech2 1-1:0.51: device disconnected [ 221.575399][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.680198][ T5882] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.701465][ T5882] usb 4-1: MIDIStreaming interface descriptor not found [ 221.884976][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 221.895388][ T5974] usb 4-1: USB disconnect, device number 28 [ 221.914581][ T30] audit: type=1400 audit(1751938947.228:563): avc: denied { recv } for pid=8376 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.1.66 dest=49048 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 221.973863][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 222.018186][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.384753][ T5919] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 222.588153][ T8391] vcan0: tx address claim with different name [ 222.744383][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 222.801939][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.900022][ T8407] overlayfs: failed to resolve './file1': -2 [ 222.907102][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.919530][ T5919] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 223.020797][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.533376][ T5919] hub 5-1:1.0: bad descriptor, ignoring hub [ 223.565522][ T5919] hub 5-1:1.0: probe with driver hub failed with error -5 [ 223.863054][ T8424] netlink: 772 bytes leftover after parsing attributes in process `syz.2.619'. [ 224.171910][ T8434] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 224.263879][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.279856][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.514519][ T5996] usb 5-1: USB disconnect, device number 26 [ 224.614961][ T30] audit: type=1400 audit(1751938949.849:564): avc: denied { egress } for pid=8431 comm="syz.0.621" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 224.674799][ T30] audit: type=1400 audit(1751938949.849:565): avc: denied { sendto } for pid=8431 comm="syz.0.621" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 224.912759][ T30] audit: type=1400 audit(1751938950.159:566): avc: denied { connect } for pid=8432 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.124010][ T30] audit: type=1400 audit(1751938950.389:567): avc: denied { read } for pid=8445 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.436260][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.458253][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.094293][ T5996] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 226.094293][ T5919] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 226.508889][ T5919] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 226.565777][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.594925][ T5919] usb 5-1: Product: syz [ 226.602164][ T5919] usb 5-1: Manufacturer: syz [ 226.607786][ T5919] usb 5-1: SerialNumber: syz [ 226.618274][ T5919] usb 5-1: config 0 descriptor?? [ 226.654602][ T5838] Bluetooth: hci5: urb ffff88804ccc2200 submission failed (2) [ 226.663226][ T5996] usb 2-1: device descriptor read/64, error -71 [ 226.773602][ T8472] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.631'. [ 226.826468][ T5919] usb 5-1: USB disconnect, device number 27 [ 226.854399][ T43] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 226.934376][ T5996] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 226.972799][ T30] audit: type=1400 audit(1751938952.289:568): avc: denied { ioctl } for pid=8471 comm="syz.2.631" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 226.997654][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.027611][ T43] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 227.037225][ T43] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 227.062436][ T43] usb 4-1: Product: syz [ 227.069275][ T43] usb 4-1: Manufacturer: syz [ 227.074002][ T43] usb 4-1: SerialNumber: syz [ 227.094345][ T5996] usb 2-1: device descriptor read/64, error -71 [ 227.214878][ T5996] usb usb2-port1: attempt power cycle [ 227.276875][ T43] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 227.475593][ T8477] netlink: 'syz.4.632': attribute type 10 has an invalid length. [ 227.513510][ T43] vp7045: USB control message 'out' went wrong. [ 227.555540][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 227.575476][ T5996] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 227.624470][ T43] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 227.648828][ T5996] usb 2-1: device descriptor read/8, error -71 [ 227.658436][ T43] usb 4-1: USB disconnect, device number 29 [ 227.904258][ T5996] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 227.924905][ T5996] usb 2-1: device descriptor read/8, error -71 [ 228.037006][ T5996] usb usb2-port1: unable to enumerate USB device [ 228.084670][ T5896] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 228.250169][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.269902][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.284940][ T5896] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 228.294055][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.530663][ T5896] usb 3-1: config 0 descriptor?? [ 228.685967][ T8488] netlink: 'syz.3.636': attribute type 2 has an invalid length. [ 229.011529][ T5896] hid-led 0003:1294:1320.0010: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 229.033174][ T30] audit: type=1400 audit(1751938954.329:569): avc: denied { create } for pid=8500 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 229.098629][ T5896] hid-led 0003:1294:1320.0010: Riso Kagaku Webmail Notifier initialized [ 229.191736][ T10] usb 3-1: USB disconnect, device number 35 [ 229.237182][ T7147] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 229.268201][ T7146] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 229.291550][ T7146] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 229.341432][ T30] audit: type=1400 audit(1751938954.659:570): avc: denied { append } for pid=8509 comm="syz.4.642" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.468350][ T8513] 9pnet_fd: Insufficient options for proto=fd [ 229.887565][ T10] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 230.066038][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.150050][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 230.328349][ T8528] tmpfs: Bad value for 'mpol' [ 230.332166][ T8524] mmap: syz.1.647 (8524): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 230.379289][ T30] audit: type=1400 audit(1751938955.649:571): avc: denied { mounton } for pid=8522 comm="syz.0.646" path="/syzcgroup/unified/syz0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 230.450269][ T10] usb 5-1: config 7 has an invalid interface number: 164 but max is 0 [ 230.458644][ T10] usb 5-1: config 7 has no interface number 0 [ 230.474356][ T10] usb 5-1: config 7 interface 164 altsetting 1 endpoint 0x2 has invalid maxpacket 48390, setting to 64 [ 230.552950][ T10] usb 5-1: config 7 interface 164 has no altsetting 0 [ 230.566316][ T10] usb 5-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=4c.7a [ 230.592012][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.613411][ T10] usb 5-1: Product: syz [ 230.621122][ T10] usb 5-1: Manufacturer: syz [ 230.626223][ T10] usb 5-1: SerialNumber: syz [ 230.651094][ T30] audit: type=1400 audit(1751938955.949:572): avc: denied { connect } for pid=8530 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.951638][ T10] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 230.982900][ T10] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 230.998331][ T10] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 231.014031][ T10] usb 5-1: USB disconnect, device number 28 [ 231.194266][ T30] audit: type=1400 audit(1751938956.499:573): avc: denied { map } for pid=8550 comm="syz.0.654" path="socket:[20609]" dev="sockfs" ino=20609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 232.537999][ T8568] mkiss: ax0: crc mode is auto. [ 232.702107][ T8568] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 232.702107][ T8568] program syz.3.658 not setting count and/or reply_len properly [ 232.884566][ T8577] syz.4.659: attempt to access beyond end of device [ 232.884566][ T8577] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 232.897958][ T8577] EXT4-fs (nbd4): unable to read superblock [ 233.218812][ T8576] netlink: 'syz.4.659': attribute type 29 has an invalid length. [ 233.544431][ T43] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 233.684422][ T43] usb 1-1: device descriptor read/64, error -71 [ 233.954356][ T43] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 234.129509][ T43] usb 1-1: device descriptor read/64, error -71 [ 234.256790][ T43] usb usb1-port1: attempt power cycle [ 234.749645][ T43] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 235.665921][ T30] audit: type=1400 audit(1751938960.749:574): avc: denied { bind } for pid=8593 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.722601][ T43] usb 1-1: device descriptor read/8, error -71 [ 235.843108][ T30] audit: type=1400 audit(1751938961.159:575): avc: denied { ioctl } for pid=8610 comm="syz.3.671" path="socket:[20745]" dev="sockfs" ino=20745 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.921854][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 235.933635][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 235.954665][ T5896] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 236.014294][ T43] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 236.035833][ T43] usb 1-1: device descriptor read/8, error -71 [ 236.114302][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 236.124055][ T5896] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 236.138374][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.147003][ T43] usb usb1-port1: unable to enumerate USB device [ 236.153462][ T5896] usb 3-1: Product: syz [ 236.161091][ T5896] usb 3-1: Manufacturer: syz [ 236.166701][ T5896] usb 3-1: SerialNumber: syz [ 236.184557][ T5896] usb 3-1: config 0 descriptor?? [ 236.202605][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 236.924289][ T2145] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 237.111681][ T2145] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 237.121407][ T2145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.150480][ T2145] usb 2-1: Product: syz [ 237.172433][ T2145] usb 2-1: Manufacturer: syz [ 237.208577][ T5896] gspca_sonixj: reg_w err -71 [ 237.222089][ T5896] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 237.234840][ T2145] usb 2-1: SerialNumber: syz [ 237.322815][ T5896] usb 3-1: USB disconnect, device number 36 [ 237.338134][ T2145] usb 2-1: config 0 descriptor?? [ 237.723536][ T8646] mkiss: ax0: crc mode is auto. [ 237.728747][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 237.821255][ T2145] usb 2-1: Firmware: major: 0, minor: 101, hardware type: UNKNOWN (114) [ 238.041884][ T2145] usb 2-1: failed to fetch extended address, random address set [ 238.107316][ T2145] usb 2-1: atusb_probe: initialization failed, error = -524 [ 238.158735][ T2145] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 238.204607][ T2145] usb 2-1: USB disconnect, device number 38 [ 238.434396][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 238.695977][ T8670] x_tables: ip_tables: osf match: only valid for protocol 6 [ 238.729493][ T8670] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN NOPTI [ 238.741599][ T8670] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 238.750014][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.4.682 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 238.760165][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.770217][ T8670] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 238.775780][ T8670] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 50 19 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 238.795394][ T8670] RSP: 0018:ffffc90004bbf330 EFLAGS: 00010203 [ 238.801461][ T8670] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010839000 [ 238.809429][ T8670] RDX: 000000000000005d RSI: ffffffff898ecd60 RDI: 00000000000002ec [ 238.817394][ T8670] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 238.825358][ T8670] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce88f60 [ 238.833322][ T8670] R13: 0000000000000000 R14: ffffffff8ce88f40 R15: ffff88805d90c000 [ 238.841285][ T8670] FS: 00007fc24cffa6c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 238.850195][ T8670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.856764][ T8670] CR2: 0000001b30201ff8 CR3: 0000000035d1a000 CR4: 00000000003526f0 [ 238.864726][ T8670] Call Trace: [ 238.867985][ T8670] [ 238.870903][ T8670] qdisc_tree_reduce_backlog+0x221/0x500 [ 238.876518][ T8670] sfq_init+0x88a/0x2540 [ 238.880741][ T8670] ? __pfx_sfq_init+0x10/0x10 [ 238.885394][ T8670] ? qdisc_alloc+0x94f/0xc50 [ 238.889962][ T8670] ? __pfx_sfq_init+0x10/0x10 [ 238.894634][ T8670] qdisc_create+0x457/0xfc0 [ 238.899135][ T8670] tc_modify_qdisc+0x12bb/0x2130 [ 238.904050][ T8670] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 238.909326][ T8670] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 238.914587][ T8670] rtnetlink_rcv_msg+0x3c9/0xe90 [ 238.919521][ T8670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.924966][ T8670] ? __lock_acquire+0xb8a/0x1c90 [ 238.929879][ T8670] netlink_rcv_skb+0x155/0x420 [ 238.934623][ T8670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.940070][ T8670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.945337][ T8670] ? rcu_is_watching+0x12/0xc0 [ 238.950083][ T8670] netlink_unicast+0x53a/0x7f0 [ 238.954821][ T8670] ? __pfx_netlink_unicast+0x10/0x10 [ 238.960080][ T8670] netlink_sendmsg+0x8d1/0xdd0 [ 238.964816][ T8670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.970077][ T8670] ____sys_sendmsg+0xa95/0xc70 [ 238.974816][ T8670] ? copy_msghdr_from_user+0x10a/0x160 [ 238.980269][ T8670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.985530][ T8670] ? __pfx_futex_wake_mark+0x10/0x10 [ 238.990792][ T8670] ___sys_sendmsg+0x134/0x1d0 [ 238.995447][ T8670] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.000628][ T8670] ? __lock_acquire+0x622/0x1c90 [ 239.005555][ T8670] __sys_sendmsg+0x16d/0x220 [ 239.010125][ T8670] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.015214][ T8670] ? __x64_sys_futex+0x1e0/0x4c0 [ 239.020149][ T8670] do_syscall_64+0xcd/0x4c0 [ 239.024637][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.030510][ T8670] RIP: 0033:0x7fc24c18e929 [ 239.034911][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.054495][ T8670] RSP: 002b:00007fc24cffa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.062890][ T8670] RAX: ffffffffffffffda RBX: 00007fc24c3b6160 RCX: 00007fc24c18e929 [ 239.070835][ T8670] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000c [ 239.078790][ T8670] RBP: 00007fc24c210b39 R08: 0000000000000000 R09: 0000000000000000 [ 239.086743][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.094691][ T8670] R13: 0000000000000000 R14: 00007fc24c3b6160 R15: 00007ffccfc2a808 [ 239.102643][ T8670] [ 239.105645][ T8670] Modules linked in: [ 239.109558][ T8670] ---[ end trace 0000000000000000 ]--- [ 239.114996][ T8670] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 239.120533][ T8670] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 50 19 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 239.140125][ T8670] RSP: 0018:ffffc90004bbf330 EFLAGS: 00010203 [ 239.146173][ T8670] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90010839000 [ 239.154117][ T8670] RDX: 000000000000005d RSI: ffffffff898ecd60 RDI: 00000000000002ec [ 239.162072][ T8670] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 239.170031][ T8670] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce88f60 [ 239.178000][ T8670] R13: 0000000000000000 R14: ffffffff8ce88f40 R15: ffff88805d90c000 [ 239.185957][ T8670] FS: 00007fc24cffa6c0(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 239.194882][ T8670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.201440][ T8670] CR2: 0000001b30201ff8 CR3: 0000000035d1a000 CR4: 00000000003526f0 [ 239.209410][ T8670] Kernel panic - not syncing: Fatal exception in interrupt [ 239.216772][ T8670] Kernel Offset: disabled [ 239.221074][ T8670] Rebooting in 86400 seconds..