last executing test programs: 15.974439048s ago: executing program 2 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x3, 0xffffffff, 0x0, r0}, &(0x7f00000002c0), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='1', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x8100, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0xe2, "5660353132d101c4237d48ed51000000000000f800"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000002060102000000000000000007000000050004000200000005000100072dceae5f000100074925cb467b2b20ac429d54a00f23790ccc43b01e8234ac0d404a0f460236acad8b236900a702c8f7a000000000000000000000000000f7a97f3615e82e07a4ccd81e43b91abaf98a504a4d274b0b17f6fa94437563778eeca03996c8e9c1bbc65157984504033572ae7587b5ccfeba2702b8c6250ff31960705ddc9145c3f1d8f53af70d61751d22e86ccb05a1"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) 14.975238804s ago: executing program 2 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x321, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14.598869971s ago: executing program 2 (id=2076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)=""/95, 0x5f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a802b8c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, r9, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4621, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x4004895) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$inet6(0xa, 0x0, 0x8000000003c) 13.475579717s ago: executing program 2 (id=2078): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 13.197171878s ago: executing program 2 (id=2080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x3, 0xffffffff, 0x0, r0}, &(0x7f00000002c0), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='1', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x8100, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0xe2, "5660353132d101c4237d48ed51000000000000f800"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) 11.524292406s ago: executing program 2 (id=2089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x9, 0x140008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r4 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup(r2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000540)={0x84, 0x7, 0x5, 0x777, "0fa65acf492c524668037855b73d1f7113d74f4d276204378d4aab4f6bb8f4ec0a1abded57d375b5690e66abb44c5f14fbef0ac646844408dd68f76394d63fc6eb4840d8414ae584bbc582b3dbe4d5ac377f4fb07f80c1ae29e980d49a70fea789237481fa282b711b94145a"}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fanotify_init(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7f, 0x0, 0x274e, 0xffffffffffffffff, 0xde, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xf}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) 4.734783941s ago: executing program 4 (id=2110): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) 4.532984884s ago: executing program 4 (id=2114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r1, 0x703}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 4.334389597s ago: executing program 4 (id=2118): timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe4, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xacef}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc3d8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6357}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x15d5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2005c0c0}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x8, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x0) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400000001040103000000000600000000474f8c28a732a172dd25c2cd8680a6647d9d04a192000000"], 0x14}}, 0x0) close(r0) eventfd(0x10805) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000000c0)=0xcb7c, 0x4) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000100)=0x81, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x8000, 0x3, 0x4, 0x4}, {0x2, 0x7, 0x9, 0x2}, {0x8, 0x1, 0xd, 0xffff48b8}, {0x8, 0x3, 0x7, 0x7}, {0x7, 0x2, 0x0, 0x4}]}, 0x10) sendto$inet(r4, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078", 0x261, 0xc000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000008c0)) sendto$inet6(r5, &(0x7f0000000180)="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", 0x16d, 0x20000014, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b8d811083d1b4601b8010000000109021b000100000000090400000101dea9000905"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f74f9b36096eff7fc6e5539b9b18098b9b4a1b2552091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x28d}}, 0x1006) timer_settime(0x0, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 3.193107977s ago: executing program 3 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}}, 0x0) 3.058627852s ago: executing program 1 (id=2124): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8}}]}}]}, 0x3c}}, 0x0) 2.967585212s ago: executing program 1 (id=2126): r0 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.899278898s ago: executing program 3 (id=2127): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e4010000000800010000000000080002"], 0x24}}, 0x0) 2.694035088s ago: executing program 1 (id=2129): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902"], &(0x7f00000027c0)={0x0, 0x0, 0xf, &(0x7f0000002480)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa4, 0x0, 0x9}]}, 0x1, [{0x0, 0x0}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c060000) 2.619346499s ago: executing program 0 (id=2130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.598691107s ago: executing program 3 (id=2131): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x2, &(0x7f0000002200)=0x0) r2 = eventfd(0x6) io_submit(r1, 0x1, &(0x7f0000003880)=[&(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000002240)="7818", 0x2, 0x7, 0x0, 0x1, r2}]) 2.468479317s ago: executing program 0 (id=2132): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000200), 0xfecc) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 2.386731074s ago: executing program 3 (id=2133): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) 2.306045147s ago: executing program 3 (id=2134): mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = fsopen(&(0x7f0000000200)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x103) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) setrlimit(0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fc020000000000000000000000000000fe8000000000000000000000000000aa0200907800000500605b29ab00001100fc010000000000000000000000000000ff0100000000000000000000000000010000000000000000053a000000000000fb36eeca6fad50b375a22a584d16ea55"], 0x0) creat(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 1.6060114s ago: executing program 4 (id=2135): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.576067042s ago: executing program 0 (id=2136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 1.413295283s ago: executing program 0 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x15) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x40, 0x3, 0xffffffff, 0x0, r0}, &(0x7f00000002c0), 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) write$6lowpan_enable(r3, &(0x7f0000000080)='1', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000740), 0x8100, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000800)={0xe2, "5660353132d101c4237d48ed51000000000000f800"}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000002060102000000000000000007000000050004000200000005000100072dceae5f000100074925cb467b2b20ac429d54a00f23790ccc43b01e8234ac0d404a0f460236acad8b236900a702c8f7a000000000000000000000000000f7a97f3615e82e07a4ccd81e43b91abaf98a504a4d274b0b17f6fa94437563778eeca03996c8e9c1bbc65157984504033572ae7587b5ccfeba2702b8c6250ff31960705ddc9145c3f1d8f53af70d61751d22e86ccb05"], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) 1.334397842s ago: executing program 4 (id=2139): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.105605863s ago: executing program 4 (id=2140): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x38, 0x87, 0x46, 0x20, 0x123, 0x1, 0x4afe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x72, 0x34, 0x0, [], [{{0x9, 0x5, 0x82, 0x0, 0x400}}]}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 661.829555ms ago: executing program 1 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xffffffffffffff20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x11}]}]}}}]}, 0x90}}, 0x0) 393.03564ms ago: executing program 1 (id=2142): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @rand_addr, 0x0, 0x4, 'fo\x00'}, 0x2c) sendmmsg$sock(r0, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) 283.966186ms ago: executing program 0 (id=2143): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 132.223037ms ago: executing program 3 (id=2144): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @empty=0xfe000000}}) 119.710144ms ago: executing program 1 (id=2145): ioperm(0x0, 0x8, 0x400) syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') chdir(&(0x7f00000002c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/43, 0x2b) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x401) listen(r4, 0x0) shutdown(r4, 0x0) 0s ago: executing program 0 (id=2146): timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe4, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xacef}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc3d8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6357}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x15d5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2005c0c0}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x8, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x0) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400000001040103000000000600000000474f8c28a732a172dd25c2cd8680a6647d9d04a192000000"], 0x14}}, 0x0) close(r0) eventfd(0x10805) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000000c0)=0xcb7c, 0x4) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000100)=0x81, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x8000, 0x3, 0x4, 0x4}, {0x2, 0x7, 0x9, 0x2}, {0x8, 0x1, 0xd, 0xffff48b8}, {0x8, 0x3, 0x7, 0x7}, {0x7, 0x2, 0x0, 0x4}]}, 0x10) sendto$inet(r4, &(0x7f0000000480)="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", 0x261, 0xc000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000008c0)) sendto$inet6(r5, &(0x7f0000000180)="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", 0x16d, 0x20000014, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b8d811083d1b4601b8010000000109021b000100000000090400000101dea9000905"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f74f9b36096eff7fc6e5539b9b18098b9b4a1b2552091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x28d}}, 0x1006) timer_settime(0x0, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) kernel console output (not intermixed with test programs): 52] Illegal XDP return value 4294967262 on prog (id 299) dev N/A, expect packet loss! [ 1011.364623][T12448] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1122'. [ 1011.391950][T12453] netlink: 'syz.3.1120': attribute type 48 has an invalid length. [ 1011.707711][ T29] audit: type=1400 audit(1725841624.360:572): avc: denied { getopt } for pid=12458 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1011.920428][T12468] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1129'. [ 1012.286650][T12471] netlink: 'syz.3.1130': attribute type 7 has an invalid length. [ 1012.294563][T12471] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1130'. [ 1012.319982][T12471] netlink: 'syz.3.1130': attribute type 3 has an invalid length. [ 1012.327937][T12471] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1130'. [ 1013.116358][ T29] audit: type=1400 audit(1725841625.790:573): avc: denied { setopt } for pid=12479 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1013.350482][ T29] audit: type=1400 audit(1725841626.030:574): avc: denied { append } for pid=12482 comm="syz.1.1135" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1014.106068][T12500] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1141'. [ 1014.424892][T12506] syzkaller0: entered promiscuous mode [ 1014.430665][T12506] syzkaller0: entered allmulticast mode [ 1014.436160][ T5314] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1014.446878][T12512] netlink: 'syz.4.1145': attribute type 16 has an invalid length. [ 1014.585257][ T5237] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1014.657422][ T5314] usb 2-1: Using ep0 maxpacket: 8 [ 1014.679110][ T5314] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1014.704902][ T5314] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1014.718836][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.772054][ T5314] usb 2-1: config 0 descriptor?? [ 1014.795626][ T5237] usb 3-1: Using ep0 maxpacket: 16 [ 1014.810275][ T5314] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1014.811896][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1014.837567][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1014.849405][ T5237] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1014.856527][ T5314] usb 2-1: Detected SIO [ 1014.867741][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.885760][ T5237] usb 3-1: config 0 descriptor?? [ 1014.936924][ T5314] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1014.945458][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1015.155499][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1015.174276][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.198456][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1015.198478][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.198493][ T9] usb 5-1: Product: syz [ 1015.198504][ T9] usb 5-1: Manufacturer: syz [ 1015.198516][ T9] usb 5-1: SerialNumber: syz [ 1015.207063][ T9] usb 5-1: config 0 descriptor?? [ 1015.212074][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1015.249003][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1015.307648][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.308128][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.336941][ T5237] hid (null): bogus close delimiter [ 1015.424530][T12511] udevd[12511]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1015.469469][ T5286] usb 5-1: USB disconnect, device number 9 [ 1015.514097][ T5237] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 1015.548406][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.549143][ T9] usb 2-1: USB disconnect, device number 7 [ 1015.581580][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.624936][ T5237] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 1015.641102][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1015.690181][ T5237] hid-generic 0003:0158:0100.0006: bogus close delimiter [ 1015.707184][ T9] ftdi_sio 2-1:0.0: device disconnected [ 1015.715663][ T5237] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed [ 1015.749787][ T5237] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 1015.801300][ T5237] usb 3-1: USB disconnect, device number 10 [ 1015.938161][T11462] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1016.148080][T11462] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.159408][T11462] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1016.170814][T11462] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1016.185142][T11462] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1016.205140][T11462] usb 4-1: Manufacturer: syz [ 1016.217634][T11462] usb 4-1: config 0 descriptor?? [ 1016.366798][ T5313] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1016.565296][ T5313] usb 5-1: Using ep0 maxpacket: 8 [ 1016.579747][ T5313] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1016.589240][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.599594][ T5313] usb 5-1: Product: syz [ 1016.608768][ T5313] usb 5-1: Manufacturer: syz [ 1016.613397][ T5313] usb 5-1: SerialNumber: syz [ 1016.632021][ T5313] usb 5-1: config 0 descriptor?? [ 1016.649315][ T5313] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1017.057886][ T5313] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1017.071499][ T5313] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 1017.094651][ T5313] usb 5-1: USB disconnect, device number 10 [ 1017.733046][T12531] tmpfs: Bad value for 'mpol' [ 1018.610853][ T9] usb 4-1: USB disconnect, device number 6 [ 1019.955279][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1019.975809][ T5237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1020.678983][ T5237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.695157][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1020.702456][ T5237] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.714706][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1020.727368][ T5237] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1020.761668][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1020.771630][ T5237] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1020.791725][T12569] syzkaller0: entered promiscuous mode [ 1020.802166][ T5237] usb 4-1: Manufacturer: syz [ 1020.806978][ T9] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1020.828240][ T5237] usb 4-1: config 0 descriptor?? [ 1020.833381][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.853195][T12569] syzkaller0: entered allmulticast mode [ 1020.860721][ T9] usb 5-1: config 0 descriptor?? [ 1021.396276][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.431346][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.509852][T12588] netlink: 'syz.0.1174': attribute type 7 has an invalid length. [ 1021.539798][T12588] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1174'. [ 1021.555863][T12588] netlink: 'syz.0.1174': attribute type 3 has an invalid length. [ 1021.563710][T12588] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1174'. [ 1022.304820][ T9] hid (null): bogus close delimiter [ 1022.349919][ T9] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 1022.380385][ T9] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 1022.393178][ T9] hid-generic 0003:0158:0100.0007: bogus close delimiter [ 1022.411760][ T9] hid-generic 0003:0158:0100.0007: item 0 0 2 10 parsing failed [ 1022.429282][ T9] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 1022.583623][T12569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.631003][T12595] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1178'. [ 1022.638130][T12569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.686096][ T5313] usb 5-1: USB disconnect, device number 11 [ 1024.050153][T11462] usb 4-1: USB disconnect, device number 7 [ 1024.088836][T12613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1024.579760][ T29] audit: type=1400 audit(1725841637.210:575): avc: denied { ioctl } for pid=12620 comm="syz.0.1186" path="socket:[51490]" dev="sockfs" ino=51490 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1025.667832][T12629] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 1025.682163][T12629] netlink: 'syz.1.1188': attribute type 1 has an invalid length. [ 1027.527577][T12649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1029.960528][T12672] netlink: 'syz.2.1204': attribute type 3 has an invalid length. [ 1029.969018][T12672] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1204'. [ 1030.934646][T12684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.532640][T12683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1033.178058][T12715] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 1033.222120][T12715] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 1033.309099][T12715] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1222'. [ 1033.406617][T12718] netlink: 'syz.2.1220': attribute type 7 has an invalid length. [ 1033.414700][T12718] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1220'. [ 1033.427430][T12718] netlink: 'syz.2.1220': attribute type 3 has an invalid length. [ 1033.436191][T12718] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1220'. [ 1034.202702][T12728] exFAT-fs (nullb0): invalid boot record signature [ 1034.244813][T12728] exFAT-fs (nullb0): failed to read boot sector [ 1034.266786][T12728] exFAT-fs (nullb0): failed to recognize exfat type [ 1034.728212][ T29] audit: type=1400 audit(1725841647.360:576): avc: denied { bind } for pid=12739 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1035.015291][ T29] audit: type=1400 audit(1725841647.660:577): avc: denied { read } for pid=12746 comm="syz.0.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1038.813399][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 1039.202530][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 1040.453273][T12826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1263'. [ 1041.730102][T12842] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1268'. [ 1041.795280][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1042.035971][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1042.046696][ T5337] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1042.110893][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.150310][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.165376][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1042.174981][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.189184][ T9] usb 1-1: config 0 descriptor?? [ 1042.198172][ T9] hub 1-1:0.0: USB hub found [ 1042.325223][ T5337] usb 3-1: Using ep0 maxpacket: 8 [ 1042.564488][ T5337] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1042.595679][ T9] hub 1-1:0.0: 1 port detected [ 1042.646533][ T5337] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1042.658790][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.679046][ T5337] usb 3-1: config 0 descriptor?? [ 1042.698925][ T5337] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1042.720161][ T5337] usb 3-1: Detected SIO [ 1042.730075][ T5337] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1042.806889][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1042.827479][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1043.315849][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1043.315984][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1043.361613][ T9] usb 1-1: USB disconnect, device number 6 [ 1043.719719][ T9] usb 3-1: USB disconnect, device number 11 [ 1043.766635][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1043.825807][T12861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 1043.826470][ T9] ftdi_sio 3-1:0.0: device disconnected [ 1043.866876][T12861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 1043.993190][T12865] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1276'. [ 1044.703033][ T29] audit: type=1400 audit(1725841657.330:578): avc: denied { setopt } for pid=12871 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1044.722719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.272008][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1046.775333][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.775469][T10362] Bluetooth: hci4: command 0x0406 tx timeout [ 1047.228949][T12902] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1047.275199][T12902] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1047.534807][T12907] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1288'. [ 1047.557364][ T29] audit: type=1400 audit(1725841660.230:579): avc: denied { map } for pid=12905 comm="syz.1.1287" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1047.693483][ T29] audit: type=1400 audit(1725841660.230:580): avc: denied { execute } for pid=12905 comm="syz.1.1287" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1047.816153][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'. [ 1047.870716][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'. [ 1048.201879][ T29] audit: type=1400 audit(1725841660.880:581): avc: denied { getopt } for pid=12919 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1048.221316][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.819510][T12934] netlink: 'syz.4.1296': attribute type 7 has an invalid length. [ 1048.830482][T12934] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1296'. [ 1051.053703][T12949] syzkaller0: entered promiscuous mode [ 1051.059727][T12949] syzkaller0: entered allmulticast mode [ 1051.082090][T12951] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 1051.365470][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1051.495177][T12958] netlink: 'syz.2.1305': attribute type 7 has an invalid length. [ 1051.502993][T12958] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1305'. [ 1051.525318][T12958] netlink: 'syz.2.1305': attribute type 3 has an invalid length. [ 1051.533232][T12958] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1305'. [ 1052.226306][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1052.248965][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1052.278543][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1052.298875][ T9] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1052.323604][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.502089][ T9] usb 5-1: config 0 descriptor?? [ 1053.145466][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.205861][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.228818][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1053.245704][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1053.263758][ T9] usb 5-1: USB disconnect, device number 12 [ 1054.943370][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.958521][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.554029][T11462] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1055.765207][T11462] usb 1-1: Using ep0 maxpacket: 16 [ 1055.776776][T11462] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1055.797889][T11462] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 1055.812703][T11462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.859242][T11462] usb 1-1: Product: syz [ 1055.873628][T11462] usb 1-1: Manufacturer: syz [ 1055.898208][T11462] usb 1-1: SerialNumber: syz [ 1056.023066][T11462] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18 [ 1056.164591][T11462] input: failed to attach handler mousedev to device input18, error: -2 [ 1056.239390][T11462] usb 1-1: USB disconnect, device number 7 [ 1057.078989][T13001] netlink: 'syz.2.1316': attribute type 7 has an invalid length. [ 1057.087224][T13001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1316'. [ 1057.101052][T13001] netlink: 'syz.2.1316': attribute type 3 has an invalid length. [ 1057.109389][T13001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1316'. [ 1058.930130][ T29] audit: type=1400 audit(1725841671.610:582): avc: denied { setopt } for pid=13014 comm="syz.1.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1061.157431][T13002] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1064.355830][ T8664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1064.366238][ T8664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1064.374104][ T8664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1064.382914][ T8664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.390625][ T8664] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1064.398118][ T8664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1065.197382][T13050] chnl_net:caif_netlink_parms(): no params data found [ 1065.497622][T13050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.512505][T13050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.519983][T13050] bridge_slave_0: entered allmulticast mode [ 1065.533617][T13050] bridge_slave_0: entered promiscuous mode [ 1065.831767][T13050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.832428][T13050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.841637][T13050] bridge_slave_1: entered allmulticast mode [ 1065.843568][T13050] bridge_slave_1: entered promiscuous mode [ 1066.160885][T13050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.183867][T13050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.616266][ T8664] Bluetooth: hci3: command tx timeout [ 1067.020956][T13050] team0: Port device team_slave_0 added [ 1067.049796][T13050] team0: Port device team_slave_1 added [ 1067.141382][T13050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.148505][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.176941][T13050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.219201][T13050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.231094][ T29] audit: type=1400 audit(1725841679.910:583): avc: denied { read } for pid=13078 comm="syz.1.1337" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1067.253960][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.305215][T13050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.347010][ T29] audit: type=1400 audit(1725841680.020:584): avc: denied { map } for pid=13078 comm="syz.1.1337" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1067.364772][T13081] /dev/nullb0: Can't open blockdev [ 1067.411669][ T29] audit: type=1400 audit(1725841680.020:585): avc: denied { execute } for pid=13078 comm="syz.1.1337" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1067.502091][T13050] hsr_slave_0: entered promiscuous mode [ 1067.529006][T13050] hsr_slave_1: entered promiscuous mode [ 1067.551127][T13050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.573732][T13050] Cannot create hsr debugfs directory [ 1067.961213][T13050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.088206][T13050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.239550][T13084] netlink: 'syz.3.1338': attribute type 3 has an invalid length. [ 1068.255340][T13084] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1338'. [ 1068.269924][T13050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.408393][T13050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.745126][ T8664] Bluetooth: hci3: command tx timeout [ 1068.813973][T13050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1068.829301][T13050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1068.847213][T13050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1068.869927][T13050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1068.917964][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1069.708037][T13050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.559074][T13050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.621380][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.628610][T13077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.750691][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.750884][T13077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.775160][ T8664] Bluetooth: hci3: command tx timeout [ 1071.116890][T13118] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1350'. [ 1071.485212][ T5286] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1071.571817][T13050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.695182][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 1071.750240][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.765248][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1071.785587][ T5286] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1071.824732][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.826089][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1071.843106][ T5286] usb 4-1: config 0 descriptor?? [ 1071.848640][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1071.860210][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1071.861499][ T5286] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1071.884493][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1071.894453][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1071.908567][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1071.997903][ T5286] usb 4-1: Detected SIO [ 1072.050595][ T5286] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1072.193614][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.379858][ T5286] usb 4-1: USB disconnect, device number 8 [ 1072.397997][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.406092][ T5286] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1072.434914][ T5286] ftdi_sio 4-1:0.0: device disconnected [ 1072.633210][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.714838][T13133] netlink: 'syz.1.1352': attribute type 21 has an invalid length. [ 1072.735292][T13133] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1352'. [ 1072.744233][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1072.744508][T13133] netlink: 'syz.1.1352': attribute type 4 has an invalid length. [ 1072.754201][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1072.770785][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1072.771160][T13133] netlink: 'syz.1.1352': attribute type 5 has an invalid length. [ 1072.784235][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1072.794651][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1072.795727][T13133] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1352'. [ 1072.802113][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1072.855351][ T5245] Bluetooth: hci3: command tx timeout [ 1073.604487][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1074.358034][ T5245] Bluetooth: hci4: command tx timeout [ 1074.859447][ T5245] Bluetooth: hci5: command tx timeout [ 1075.166002][ T35] bridge_slave_1: left allmulticast mode [ 1075.177065][ T35] bridge_slave_1: left promiscuous mode [ 1075.184392][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.217355][ T35] bridge_slave_0: left allmulticast mode [ 1075.223024][ T35] bridge_slave_0: left promiscuous mode [ 1075.459904][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.455232][ T5245] Bluetooth: hci4: command tx timeout [ 1077.015261][ T5245] Bluetooth: hci5: command tx timeout [ 1077.240950][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.257911][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.278076][ T35] bond0 (unregistering): Released all slaves [ 1077.416585][T13050] veth0_vlan: entered promiscuous mode [ 1077.420416][ T29] audit: type=1400 audit(1725841690.100:586): avc: denied { read } for pid=13182 comm="syz.1.1362" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1077.444362][T13050] veth1_vlan: entered promiscuous mode [ 1077.468194][ T29] audit: type=1400 audit(1725841690.100:587): avc: denied { open } for pid=13182 comm="syz.1.1362" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1077.492357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.756087][T13124] chnl_net:caif_netlink_parms(): no params data found [ 1078.730843][ T5245] Bluetooth: hci4: command tx timeout [ 1078.803047][ T29] audit: type=1400 audit(1725841691.480:588): avc: denied { ioctl } for pid=13205 comm="syz.3.1368" path="socket:[54585]" dev="sockfs" ino=54585 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1078.827903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.105923][ T5245] Bluetooth: hci5: command tx timeout [ 1079.303466][ T35] hsr_slave_0: left promiscuous mode [ 1079.313191][ T35] hsr_slave_1: left promiscuous mode [ 1079.346429][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1079.357332][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.378296][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.386522][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.410314][ T35] veth1_macvtap: left promiscuous mode [ 1079.416037][ T35] veth0_macvtap: left promiscuous mode [ 1079.426656][ T35] veth1_vlan: left promiscuous mode [ 1079.432118][ T35] veth0_vlan: left promiscuous mode [ 1080.775595][ T5245] Bluetooth: hci4: command tx timeout [ 1080.803343][ T29] audit: type=1400 audit(1725841693.480:589): avc: denied { getopt } for pid=13235 comm="syz.3.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1081.175956][ T5245] Bluetooth: hci5: command tx timeout [ 1082.344261][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1082.464930][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1082.666478][ T29] audit: type=1400 audit(1725841695.330:590): avc: denied { ioctl } for pid=13259 comm="syz.3.1384" path="socket:[54654]" dev="sockfs" ino=54654 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1083.643544][T13264] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1385'. [ 1083.654040][T13264] 0·: renamed from hsr0 (while UP) [ 1083.714487][T13264] 0·: entered allmulticast mode [ 1083.720914][T13264] hsr_slave_0: entered allmulticast mode [ 1083.733656][T13264] hsr_slave_1: entered allmulticast mode [ 1083.747827][T13264] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1083.871978][T13134] chnl_net:caif_netlink_parms(): no params data found [ 1083.957167][T13050] veth0_macvtap: entered promiscuous mode [ 1084.098859][T13050] veth1_macvtap: entered promiscuous mode [ 1084.120960][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.259839][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.879435][T13124] bridge_slave_0: entered allmulticast mode [ 1084.897790][T13124] bridge_slave_0: entered promiscuous mode [ 1084.924890][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.948879][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.966065][T13124] bridge_slave_1: entered allmulticast mode [ 1084.974690][T13124] bridge_slave_1: entered promiscuous mode [ 1085.305865][T13285] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1085.330818][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.362168][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.733967][T13124] team0: Port device team_slave_0 added [ 1085.752127][T13134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.783912][T13134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.807729][T13134] bridge_slave_0: entered allmulticast mode [ 1085.832853][T13134] bridge_slave_0: entered promiscuous mode [ 1085.851601][T13134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.868188][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.880798][T13134] bridge_slave_1: entered allmulticast mode [ 1085.921651][T13134] bridge_slave_1: entered promiscuous mode [ 1085.960828][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.988017][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.006273][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.029494][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.050709][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.087849][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.121318][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.160166][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.201186][T13050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.263188][T13124] team0: Port device team_slave_1 added [ 1086.374981][T13314] netlink: 'syz.3.1396': attribute type 7 has an invalid length. [ 1086.383041][T13314] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1396'. [ 1086.885336][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.945844][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.998664][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.046737][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.083003][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.119458][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.130193][T13050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.140687][T13050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.162095][T13050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.234281][ T29] audit: type=1400 audit(1725841699.900:591): avc: denied { unmount } for pid=10237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1087.286627][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.304761][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.352521][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.404820][T13050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.425751][T13050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.434491][T13050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.475127][T13050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.500299][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.511807][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.542056][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.573462][T13134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.605764][T13329] XFS (nullb0): Invalid superblock magic number [ 1087.679183][T13134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.757942][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 1087.863426][T13134] team0: Port device team_slave_0 added [ 1087.886170][T13134] team0: Port device team_slave_1 added [ 1087.953202][T13124] hsr_slave_0: entered promiscuous mode [ 1087.970892][T13124] hsr_slave_1: entered promiscuous mode [ 1088.062064][T13134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.089568][T13134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.116093][T13134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.192562][T13344] netlink: 'syz.1.1406': attribute type 7 has an invalid length. [ 1088.206215][T13344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1406'. [ 1088.820795][T13134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.848422][T13134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.922445][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1088.939461][T13134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.115166][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1089.131209][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 3 [ 1089.161844][T13134] hsr_slave_0: entered promiscuous mode [ 1089.183034][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1089.196224][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1089.214508][T13134] hsr_slave_1: entered promiscuous mode [ 1089.221976][ T9] usb 4-1: Product: syz [ 1089.226710][T13134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.236560][ T9] usb 4-1: Manufacturer: syz [ 1089.241289][ T9] usb 4-1: SerialNumber: syz [ 1089.254508][T13134] Cannot create hsr debugfs directory [ 1089.276401][ T9] usb 4-1: config 0 descriptor?? [ 1089.282501][T13337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1089.623701][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.642303][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.746079][ T5285] usb 4-1: USB disconnect, device number 9 [ 1089.948290][T13370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1090.133011][T13155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.163259][T13155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.467344][T13375] cannot load conntrack support for proto=3 [ 1090.849484][T13387] netlink: 'syz.1.1417': attribute type 4 has an invalid length. [ 1090.872224][T13387] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1417'. [ 1090.992157][ T29] audit: type=1400 audit(1725841703.670:592): avc: denied { getopt } for pid=13391 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1092.472216][T13134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.521655][T13124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1092.556156][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1092.566695][T13124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1092.662055][T13134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.692750][T13124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1092.729730][T13124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1092.775148][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1092.785240][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1092.809831][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.836085][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.850777][ T9] usb 5-1: Product: syz [ 1092.863708][ T9] usb 5-1: Manufacturer: syz [ 1092.885361][ T9] usb 5-1: SerialNumber: syz [ 1092.913523][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1092.915779][T13134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.146010][T13134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.301526][ T5347] usb 5-1: USB disconnect, device number 13 [ 1093.527199][T13428] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1093.626561][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.719059][T13134] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1093.778116][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.818232][T13134] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1093.837436][T13134] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1093.950236][T13134] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1094.026769][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.033888][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.137812][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.145073][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.759572][T13124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.334408][T13134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.834559][T13134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.882106][ T29] audit: type=1400 audit(1725841708.560:593): avc: denied { nlmsg_write } for pid=13456 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1095.899477][ T2547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.910080][ T2547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.004639][ T2547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.011986][ T2547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.169676][T13467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.188471][T13134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1096.402922][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.620941][T13124] veth0_vlan: entered promiscuous mode [ 1096.691441][T13124] veth1_vlan: entered promiscuous mode [ 1097.014992][T13124] veth0_macvtap: entered promiscuous mode [ 1097.085696][T13134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.160741][T13124] veth1_macvtap: entered promiscuous mode [ 1097.308624][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 1097.417438][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.440928][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.473117][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.494142][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.540618][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.561471][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.584790][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.623530][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.642754][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.678791][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.717097][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.796921][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.842786][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.884837][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.929017][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.957140][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.984168][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.007681][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.068727][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.109403][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.175633][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.192208][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.901808][T13124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.911880][T13124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.921660][T13124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.945701][T13124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.964308][T13134] veth0_vlan: entered promiscuous mode [ 1098.995840][T13134] veth1_vlan: entered promiscuous mode [ 1099.702973][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.740863][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.849738][T13529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1099.894675][T13077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.909749][T13134] veth0_macvtap: entered promiscuous mode [ 1099.913179][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 1099.935754][T13077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.002709][T13134] veth1_macvtap: entered promiscuous mode [ 1100.150488][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.179919][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.207454][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.240559][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.268356][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.304903][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.326129][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.355399][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.399375][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.428828][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.686746][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.686771][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.693023][T13134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.702261][T13536] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1348'. [ 1100.703222][T13536] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1348'. [ 1100.703236][T13536] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1348'. [ 1100.790482][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.790508][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.790521][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.790539][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.790552][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.790570][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.790583][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.790600][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.790612][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.790629][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.790642][T13134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.790659][T13134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.792638][T13134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.084144][T13134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.084189][T13134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.084227][T13134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.084263][T13134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.583554][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.583570][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.762882][T13564] Cannot find set identified by id 4 to match [ 1102.074367][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.094675][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.165351][T13595] overlayfs: overlapping lowerdir path [ 1104.362898][T13597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1104.693123][T13605] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1463'. [ 1104.725454][T13605] bridge_slave_1: left allmulticast mode [ 1104.736168][T13605] bridge_slave_1: left promiscuous mode [ 1104.752106][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.797214][T13605] bridge_slave_0: left allmulticast mode [ 1104.802891][T13605] bridge_slave_0: left promiscuous mode [ 1104.815970][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.099052][ T29] audit: type=1400 audit(1725841717.780:594): avc: denied { setattr } for pid=13610 comm="syz.4.1466" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1105.336020][T13616] ieee802154 phy0 wpan0: encryption failed: -90 [ 1105.507484][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 1105.521618][T13625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1106.959814][T13644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1109.438925][T13687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1109.981091][T13697] overlayfs: overlapping lowerdir path [ 1110.970975][ T29] audit: type=1400 audit(1725841723.640:595): avc: denied { connect } for pid=13710 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1111.168448][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'. [ 1111.225445][T13717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1111.248490][T13718] (unnamed net_device) (uninitialized): (slave sit0): Device is not bonding slave [ 1111.325326][T13718] (unnamed net_device) (uninitialized): option active_slave: invalid value (sit0) [ 1111.672738][T13732] proc: Bad value for 'gid' [ 1111.883059][T13734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.218584][T13742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.851643][ T5237] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1112.926554][ T29] audit: type=1400 audit(1725841725.600:596): avc: denied { ioctl } for pid=13764 comm="syz.2.1513" path="socket:[56254]" dev="sockfs" ino=56254 ioctlcmd=0x8991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1112.952549][T13765] bond0: (slave bond_slave_1): Releasing backup interface [ 1112.982626][T13767] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1514'. [ 1113.085437][ T5237] usb 4-1: Using ep0 maxpacket: 8 [ 1113.111910][ T5237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.138599][ T5237] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1113.158713][ T5237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.181955][ T5237] usb 4-1: Product: syz [ 1113.209611][ T5237] usb 4-1: Manufacturer: syz [ 1113.223391][ T5237] usb 4-1: SerialNumber: syz [ 1113.241144][ T5237] usb 4-1: config 0 descriptor?? [ 1113.273458][ T5237] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1113.292175][ T5237] usb 4-1: selecting invalid altsetting 1 [ 1113.486457][ T5237] gspca_stk014: init reg: 0x00 [ 1113.507658][ T5237] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 1113.720799][T11462] usb 4-1: USB disconnect, device number 10 [ 1113.956569][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 1114.051425][T13803] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1526'. [ 1114.073670][T13803] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1526'. [ 1114.089900][T13803] netlink: 69 bytes leftover after parsing attributes in process `syz.1.1526'. [ 1114.184894][T13809] netlink: 'syz.4.1527': attribute type 10 has an invalid length. [ 1114.220834][T13805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1114.221724][T13809] batman_adv: batadv0: Adding interface: veth0_vlan [ 1114.242694][T13811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1528'. [ 1114.270826][T13809] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.402725][T13809] batman_adv: batadv0: Interface activated: veth0_vlan [ 1115.453651][T13850] overlayfs: missing 'lowerdir' [ 1116.379467][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.395814][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.785127][ T29] audit: type=1400 audit(1725841729.450:597): avc: denied { name_bind } for pid=13855 comm="syz.0.1544" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1116.885462][T13857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1116.998772][T13864] xt_ipvs: protocol family 7 not supported [ 1117.322607][T13870] tmpfs: Bad value for 'mpol' [ 1117.720221][T13878] overlayfs: overlapping lowerdir path [ 1118.997650][T13889] overlayfs: missing 'lowerdir' [ 1120.233250][T13905] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1559'. [ 1120.325193][ T5286] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1120.545140][ T5286] usb 4-1: Using ep0 maxpacket: 32 [ 1120.570101][ T5286] usb 4-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=21.23 [ 1120.602961][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.645366][ T5286] usb 4-1: Product: syz [ 1120.649571][ T5286] usb 4-1: Manufacturer: syz [ 1120.676026][ T5286] usb 4-1: SerialNumber: syz [ 1120.711668][ T5286] usb 4-1: config 0 descriptor?? [ 1120.768823][ T5286] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 1120.814179][ T5286] ums-sddr55 4-1:0.0: Quirks match for vid 07c4 pid a103: 8 [ 1120.906127][T13920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1121.017266][T13923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.069496][ T5337] usb 4-1: USB disconnect, device number 11 [ 1121.285915][T13927] overlay: Unknown parameter '/' [ 1122.445129][ T29] audit: type=1400 audit(1725841735.100:598): avc: denied { getopt } for pid=13931 comm="syz.1.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1122.514060][T13935] cgroup: Need name or subsystem set [ 1122.596155][T13941] overlayfs: missing 'lowerdir' [ 1122.736090][T13945] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1577'. [ 1122.792934][ T29] audit: type=1400 audit(1725841735.470:599): avc: denied { write } for pid=13946 comm="syz.3.1579" path="socket:[57023]" dev="sockfs" ino=57023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1122.866280][ T29] audit: type=1400 audit(1725841735.550:600): avc: denied { ioctl } for pid=13947 comm="syz.1.1578" path="socket:[57606]" dev="sockfs" ino=57606 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1123.044067][T13956] overlay: Unknown parameter '/' [ 1123.103266][ T5237] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1123.618881][ T5237] usb 5-1: Using ep0 maxpacket: 8 [ 1123.958725][ T5237] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1124.014454][ T5237] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1124.034770][ T5237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.080147][ T5237] usb 5-1: config 0 descriptor?? [ 1124.128290][ T5237] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1124.152619][ T5237] usb 5-1: Detected SIO [ 1124.174027][ T5237] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1124.656896][ T5237] usb 5-1: USB disconnect, device number 14 [ 1124.712964][ T5237] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1124.739790][ T5237] ftdi_sio 5-1:0.0: device disconnected [ 1124.922900][T13992] overlay: Unknown parameter '/' [ 1126.094239][T14001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1126.498005][ T29] audit: type=1400 audit(1725841739.180:601): avc: denied { ioctl } for pid=14011 comm="syz.2.1603" path="socket:[57117]" dev="sockfs" ino=57117 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1126.651689][T14017] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1126.664252][T14017] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1126.704125][T14017] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1127.182066][T14017] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1127.440799][ T29] audit: type=1400 audit(1725841740.120:602): avc: denied { write } for pid=14020 comm="syz.1.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1127.499782][T14023] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1127.528773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1127.618403][T14023] CIFS mount error: No usable UNC path provided in device string! [ 1127.618403][T14023] [ 1127.655531][T14023] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1127.763327][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 1128.360030][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1618'. [ 1128.402285][T14044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1618'. [ 1128.434432][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 1128.443805][ T29] audit: type=1400 audit(1725841741.120:603): avc: denied { write } for pid=14045 comm="syz.0.1619" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1130.116224][T14083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1130.143462][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1130.161689][T14083] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1635'. [ 1130.235239][T14089] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1637'. [ 1130.765129][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1130.849174][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.866811][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.885893][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1130.895248][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.906872][ T9] usb 4-1: config 0 descriptor?? [ 1130.967953][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1131.435141][ T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1131.715383][ T9] logitech 0003:046D:C24F.0008: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0 [ 1131.717074][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.752842][ T9] logitech 0003:046D:C24F.0008: no inputs found [ 1131.783274][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1131.817418][ T47] usb 2-1: config 1 has no interface number 0 [ 1131.834503][ T47] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.860861][ T47] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1131.918321][ T47] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.933412][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.936936][ T5286] usb 4-1: USB disconnect, device number 12 [ 1131.953771][ T47] usb 2-1: Product: syz [ 1131.980845][ T47] usb 2-1: Manufacturer: syz [ 1131.998158][ T47] usb 2-1: SerialNumber: syz [ 1132.242145][ T29] audit: type=1400 audit(1725841744.920:604): avc: denied { create } for pid=14114 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1132.309566][ T29] audit: type=1400 audit(1725841744.930:605): avc: denied { write } for pid=14114 comm="syz.2.1647" path="socket:[57869]" dev="sockfs" ino=57869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1132.640394][ T47] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1132.663344][ T47] cdc_ncm 2-1:1.1: bind() failure [ 1132.706495][ T47] usb 2-1: USB disconnect, device number 8 [ 1133.205309][ T29] audit: type=1400 audit(1725841745.880:606): avc: denied { write } for pid=14140 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1133.322268][T14146] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1662'. [ 1133.521762][T14150] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1661'. [ 1133.604908][T14155] autofs: Bad value for 'fd' [ 1134.037322][ T5286] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1134.170586][T14167] netlink: 'syz.4.1667': attribute type 7 has an invalid length. [ 1134.179483][T14167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1667'. [ 1134.198746][T14167] netlink: 'syz.4.1667': attribute type 3 has an invalid length. [ 1134.207786][T14167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1667'. [ 1134.906576][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 1134.919479][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1134.939381][ T5286] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1134.949130][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.000454][ T5286] usb 4-1: config 0 descriptor?? [ 1135.038659][ T5286] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1135.068218][ T5286] usb 4-1: Detected SIO [ 1135.099925][ T5286] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1135.554620][ T5337] usb 4-1: USB disconnect, device number 13 [ 1135.618625][ T5337] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1135.674616][ T5337] ftdi_sio 4-1:0.0: device disconnected [ 1135.790068][T14194] netlink: 'syz.0.1681': attribute type 2 has an invalid length. [ 1135.985136][T11462] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1136.136602][ T8664] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1136.146780][ T8664] Bluetooth: hci4: Injecting HCI hardware error event [ 1136.155924][ T8664] Bluetooth: hci4: hardware error 0x00 [ 1136.178059][T14210] capability: warning: `syz.0.1688' uses 32-bit capabilities (legacy support in use) [ 1136.207214][T11462] usb 2-1: Using ep0 maxpacket: 16 [ 1136.220938][T11462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.232932][T11462] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.248681][T11462] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1136.261593][T11462] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 1136.275855][T11462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.289894][T11462] usb 2-1: config 0 descriptor?? [ 1136.611626][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 1136.874271][ T5313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1136.883403][T11462] wacom 0003:056A:0022.0009: unbalanced delimiter at end of report description [ 1136.899553][T11462] wacom 0003:056A:0022.0009: parse failed [ 1136.905571][T11462] wacom 0003:056A:0022.0009: probe with driver wacom failed with error -22 [ 1137.131412][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.208238][ T5313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.263300][ T5313] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1137.277589][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.456614][ T5313] usb 5-1: config 0 descriptor?? [ 1137.815714][T11462] usb 2-1: USB disconnect, device number 9 [ 1137.859367][T14239] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1137.887824][T14239] overlayfs: missing 'lowerdir' [ 1137.971234][ T5313] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1137.996861][ T5313] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 1138.035445][ T5313] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 1138.162038][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 1138.180224][ T5313] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 1138.209880][ T5313] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 1138.265203][ T5313] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -71 [ 1138.295265][ T8664] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1138.321119][ T5313] usb 5-1: USB disconnect, device number 15 [ 1138.413950][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1705'. [ 1138.945180][T14261] netlink: 'syz.0.1711': attribute type 2 has an invalid length. [ 1138.985135][ T5313] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1139.202372][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 1139.216928][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.243362][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.316159][ T5313] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1139.335222][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.376739][ T5313] usb 4-1: config 0 descriptor?? [ 1139.560340][T14287] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1724'. [ 1139.795387][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 1139.885206][ T5237] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1139.886212][ T5313] asus 0003:0B05:17E0.000B: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input0 [ 1139.945070][ T5313] asus 0003:0B05:17E0.000B: Asus input not registered [ 1139.967402][ T5313] asus 0003:0B05:17E0.000B: probe with driver asus failed with error -12 [ 1140.106604][ T5237] usb 1-1: Using ep0 maxpacket: 8 [ 1140.129921][ T5237] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1140.150024][ T5237] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1140.210954][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.242636][ T5237] usb 1-1: config 0 descriptor?? [ 1140.259211][ T5237] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1140.273659][ T5237] usb 1-1: Detected SIO [ 1140.287753][ T5237] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1140.294173][T11462] usb 4-1: USB disconnect, device number 14 [ 1140.757827][T14315] tmpfs: Unknown parameter './file0' [ 1140.925672][ T5313] usb 1-1: USB disconnect, device number 8 [ 1140.974291][ T5313] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1141.013401][ T5313] ftdi_sio 1-1:0.0: device disconnected [ 1141.167977][T14322] netlink: 'syz.3.1740': attribute type 4 has an invalid length. [ 1141.212638][T14324] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1739'. [ 1142.034324][T14344] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1746'. [ 1142.351202][T14352] netlink: 'syz.0.1747': attribute type 7 has an invalid length. [ 1142.360100][T14352] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1747'. [ 1142.440510][ T5313] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1142.691796][ T5313] usb 3-1: Using ep0 maxpacket: 8 [ 1143.075832][ T5313] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1143.118766][ T5313] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1143.159598][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.206663][ T5313] usb 3-1: config 0 descriptor?? [ 1143.222054][T14356] netlink: 'syz.0.1751': attribute type 5 has an invalid length. [ 1143.239951][ T5313] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1143.266610][ T5313] usb 3-1: Detected SIO [ 1143.301657][ T5313] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1143.303543][T14361] tipc: Started in network mode [ 1143.325904][T14362] binder_alloc: binder_alloc_mmap_handler: 14359 20ffc000-20ffe000 already mapped failed -16 [ 1143.332286][T14361] tipc: Node identity 36e2de01303d, cluster identity 4711 [ 1143.367963][T14361] tipc: Enabled bearer , priority 10 [ 1143.717329][ T5237] usb 3-1: USB disconnect, device number 12 [ 1143.725406][ T5337] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1143.752253][ T5237] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1143.777035][ T5237] ftdi_sio 3-1:0.0: device disconnected [ 1143.941039][ T5337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.955229][ T5337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.972533][ T5286] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1143.997100][ T5337] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1144.032311][ T5337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.070622][ T5337] usb 1-1: config 0 descriptor?? [ 1144.220483][ T5286] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1144.231241][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.284714][ T5286] usb 2-1: config 0 descriptor?? [ 1144.313965][ T5286] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1144.491985][ T9] tipc: Node number set to 115334657 [ 1144.656456][ T5337] zeroplus 0003:0C12:0030.000C: item fetching failed at offset 5/7 [ 1144.688386][ T5337] zeroplus 0003:0C12:0030.000C: parse failed [ 1144.711862][ T5337] zeroplus 0003:0C12:0030.000C: probe with driver zeroplus failed with error -22 [ 1144.931478][ T29] audit: type=1400 audit(1725841757.610:607): avc: denied { relabelfrom } for pid=14384 comm="syz.4.1762" name="NETLINK" dev="sockfs" ino=58339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1144.975759][ T5286] gp8psk: usb out operation failed. [ 1145.009686][ T5286] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1145.023013][ T29] audit: type=1400 audit(1725841757.630:608): avc: denied { relabelto } for pid=14384 comm="syz.4.1762" name="NETLINK" dev="sockfs" ino=58339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 1145.075260][ T5286] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1145.110655][ T5286] usb 2-1: USB disconnect, device number 10 [ 1145.129968][ T5313] usb 1-1: USB disconnect, device number 9 [ 1145.455388][ T5237] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 1145.927544][ T5237] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1145.939608][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1145.953745][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1145.973482][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1145.994724][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1146.006427][ T5237] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1146.023499][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1146.033739][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1146.060836][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1146.073930][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1146.087877][ T5237] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1146.097094][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1146.107547][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1146.117650][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1146.129008][ T5237] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1146.149175][ T5237] usb 3-1: string descriptor 0 read error: -22 [ 1146.162621][ T5237] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1146.174573][ T5237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.245733][ T5237] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1146.521772][ T5237] usb 3-1: USB disconnect, device number 13 [ 1146.573231][ T29] audit: type=1400 audit(1725841759.250:609): avc: denied { setopt } for pid=14404 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1146.654980][ T29] audit: type=1400 audit(1725841759.260:610): avc: denied { connect } for pid=14404 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1148.826153][T14429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1148.986228][T14431] netlink: 'syz.4.1782': attribute type 11 has an invalid length. [ 1149.189016][T14438] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1783'. [ 1149.688216][T14452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.875181][T11462] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1150.065344][ T5286] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1150.075187][T11462] usb 5-1: Using ep0 maxpacket: 16 [ 1150.087651][T11462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.113396][T11462] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1150.138525][T11462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.163449][T11462] usb 5-1: config 0 descriptor?? [ 1150.293313][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.325147][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.368716][ T5286] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1150.389729][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.411252][ T5286] usb 2-1: config 0 descriptor?? [ 1150.546607][T14476] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1150.612423][T11462] creative-sb0540 0003:041E:3100.000D: No inputs registered, leaving [ 1150.660303][T11462] creative-sb0540 0003:041E:3100.000D: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 1150.816806][ T5337] usb 5-1: USB disconnect, device number 16 [ 1150.871410][ T5286] mcp2221 0003:04D8:00DD.000E: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1151.595747][ T5286] usb 2-1: USB disconnect, device number 11 [ 1151.867883][T14491] netlink: 'syz.2.1807': attribute type 4 has an invalid length. [ 1151.880933][T14491] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1807'. [ 1152.132382][T14499] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1152.139622][T14499] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1152.275365][ T5286] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1152.522825][T14507] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1152.536348][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 1152.563129][T14507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1152.574486][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.626661][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.670660][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1152.688141][ T5286] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1152.708779][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.757352][ T5286] usb 4-1: config 0 descriptor?? [ 1153.155382][ T5237] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1153.239671][ T5286] ryos 0003:1E7D:31CE.000F: ignoring exceeding usage max [ 1153.271821][ T5286] ryos 0003:1E7D:31CE.000F: ignoring exceeding usage max [ 1153.297183][ T5286] ryos 0003:1E7D:31CE.000F: usage index exceeded [ 1153.303552][ T5286] ryos 0003:1E7D:31CE.000F: item 0 0 2 2 parsing failed [ 1153.346249][ T5286] ryos 0003:1E7D:31CE.000F: parse failed [ 1153.366151][ T5286] ryos 0003:1E7D:31CE.000F: probe with driver ryos failed with error -22 [ 1153.380482][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.436798][ T5237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.484388][ T5237] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1153.530596][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.590681][ T5237] usb 3-1: config 0 descriptor?? [ 1153.837493][ T5286] usb 4-1: USB disconnect, device number 15 [ 1154.102952][ T5237] elecom 0003:056E:011C.0010: item fetching failed at offset 1/3 [ 1154.134657][ T5237] elecom 0003:056E:011C.0010: probe with driver elecom failed with error -22 [ 1154.285165][T11462] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1154.488206][T14561] overlayfs: missing 'lowerdir' [ 1154.528973][T11462] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1154.568630][T11462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.608335][T11462] usb 2-1: config 0 descriptor?? [ 1154.664253][T11462] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1155.349597][ T29] audit: type=1400 audit(1725841768.030:611): avc: denied { setopt } for pid=14566 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1155.403799][ T5313] usb 3-1: USB disconnect, device number 14 [ 1155.486979][T11462] gp8psk: usb in 128 operation failed. [ 1155.555196][T11462] gp8psk: usb in 137 operation failed. [ 1155.602376][T11462] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1155.628348][T14571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1834'. [ 1155.644422][T11462] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1155.685686][T11462] usb 2-1: USB disconnect, device number 12 [ 1155.756256][T14577] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1837'. [ 1156.171724][T14592] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1842'. [ 1156.202883][T14592] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 1156.325249][T11462] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1157.859726][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1157.925266][T11462] usb 5-1: Using ep0 maxpacket: 32 [ 1159.225263][T11462] usb 5-1: device descriptor read/all, error -71 [ 1160.945401][T11462] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1161.147339][T11462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.171728][T11462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.187227][ T5237] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1161.194788][T11462] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1161.194863][T11462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.204148][T11462] usb 5-1: config 0 descriptor?? [ 1161.478043][ T5237] usb 4-1: Using ep0 maxpacket: 8 [ 1161.542644][ T5237] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1161.565975][ T5237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.574099][ T5237] usb 4-1: Product: syz [ 1161.615221][ T5237] usb 4-1: Manufacturer: syz [ 1161.634102][ T5237] usb 4-1: SerialNumber: syz [ 1161.645421][T14663] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1863'. [ 1161.695162][T14663] netlink: 'syz.1.1863': attribute type 1 has an invalid length. [ 1161.710612][ T5237] usb 4-1: config 0 descriptor?? [ 1161.712873][T14663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'. [ 1161.732586][T11462] cougar 0003:060B:700A.0011: item fetching failed at offset 4/5 [ 1161.733399][ T5237] gspca_main: se401-2.14.0 probing 047d:5003 [ 1161.745505][T11462] cougar 0003:060B:700A.0011: parse failed [ 1161.752894][T11462] cougar 0003:060B:700A.0011: probe with driver cougar failed with error -22 [ 1161.938778][ T5313] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1161.978594][T11462] usb 5-1: USB disconnect, device number 18 [ 1162.144202][ T5237] gspca_se401: Wrong descriptor type [ 1162.165121][ T5313] usb 3-1: Using ep0 maxpacket: 16 [ 1162.225708][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.261558][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.291673][ T5313] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1162.321951][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.347630][ T5313] usb 3-1: config 0 descriptor?? [ 1162.453005][ T5237] usb 4-1: USB disconnect, device number 16 [ 1162.799196][ T5313] logitech 0003:046D:CA03.0012: item fetching failed at offset 0/5 [ 1162.849831][ T5313] logitech 0003:046D:CA03.0012: parse failed [ 1162.874458][ T5313] logitech 0003:046D:CA03.0012: probe with driver logitech failed with error -22 [ 1163.048492][ T5337] usb 3-1: USB disconnect, device number 15 [ 1163.391983][ T5314] IPVS: starting estimator thread 0... [ 1163.505202][T14703] IPVS: using max 19 ests per chain, 45600 per kthread [ 1163.771824][ T29] audit: type=1400 audit(1725841776.450:612): avc: denied { ioctl } for pid=14710 comm="syz.4.1876" path="/dev/usbmon4" dev="devtmpfs" ino=719 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1163.837109][T14717] capability: warning: `syz.0.1878' uses deprecated v2 capabilities in a way that may be insecure [ 1163.936777][ T5337] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1164.136803][ T5286] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1164.165242][ T5337] usb 4-1: Using ep0 maxpacket: 8 [ 1164.201638][ T5337] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 1164.230938][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.256553][ T5337] usb 4-1: Product: syz [ 1164.274324][ T5337] usb 4-1: Manufacturer: syz [ 1164.279467][ T5337] usb 4-1: SerialNumber: syz [ 1164.290910][ T5337] usb 4-1: config 0 descriptor?? [ 1164.384262][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.395666][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.406864][ T5286] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1164.417136][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.431138][ T5286] usb 3-1: config 0 descriptor?? [ 1164.532850][ T5337] kaweth 4-1:0.0: Firmware present in device. [ 1164.625736][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1164.718522][ T5337] kaweth 4-1:0.0: Statistics collection: 0 [ 1164.746214][ T5337] kaweth 4-1:0.0: Multicast filter limit: 0 [ 1164.790286][ T5337] kaweth 4-1:0.0: MTU: 0 [ 1164.801497][ T5337] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1164.921954][ T5337] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 1165.015213][ T5337] usb 4-1: USB disconnect, device number 17 [ 1165.143577][ T5286] usb 3-1: USB disconnect, device number 16 [ 1165.614827][ T29] audit: type=1400 audit(1725841778.290:613): avc: denied { module_load } for pid=14759 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1165.942923][T14769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1895'. [ 1166.029958][T14772] overlayfs: conflicting options: nfs_export=on,index=off [ 1166.164632][ T29] audit: type=1326 audit(1725841778.840:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.224308][T14778] pimreg1: entered allmulticast mode [ 1166.257235][ T29] audit: type=1326 audit(1725841778.840:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.335099][ T29] audit: type=1326 audit(1725841778.920:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.409656][ T29] audit: type=1326 audit(1725841778.920:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.438311][ T29] audit: type=1326 audit(1725841778.920:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.527624][ T29] audit: type=1326 audit(1725841778.940:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.606812][ T29] audit: type=1326 audit(1725841778.940:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1166.731629][T14793] overlayfs: missing 'lowerdir' [ 1166.882065][ T29] audit: type=1326 audit(1725841778.940:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14775 comm="syz.2.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19d17cef9 code=0x7ffc0000 [ 1168.285639][T14806] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1168.668230][ T5337] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1168.669917][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.708080][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.722385][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.739756][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.755103][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.762879][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.808353][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.816769][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.826833][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.834848][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.842669][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.858950][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.875205][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.885657][ T5337] usb 3-1: Using ep0 maxpacket: 32 [ 1168.896976][ T5337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.901046][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.915073][ T5337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.926651][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.934458][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.936638][ T5337] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1168.943839][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1168.959318][ T5337] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 1168.978387][ T5286] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1168.991717][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.997723][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.009329][ T5337] usb 3-1: config 0 descriptor?? [ 1169.040640][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.080903][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.119900][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.134272][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.144245][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.153308][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.196794][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1169.214050][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.221240][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1169.231618][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231654][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231685][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231716][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231747][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231778][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231809][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231841][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231872][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231910][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231942][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.231973][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.232004][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.232034][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.306557][ T5286] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1169.330642][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.373919][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.402225][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.424200][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.424432][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.512983][ T5286] usb 4-1: config 0 descriptor?? [ 1169.513728][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.543844][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.573132][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.584357][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.594297][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.607548][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.626641][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.644540][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.646176][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.682153][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.695950][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.700279][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.711023][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.724855][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.742725][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.784328][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.812237][ T5337] waltop 0003:172F:0502.0015: unknown main item tag 0x0 [ 1169.814953][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.841253][ T5337] waltop 0003:172F:0502.0015: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 1169.888980][ T5337] usb 3-1: USB disconnect, device number 17 [ 1169.899370][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.927383][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.946715][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1169.966404][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.020983][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.037628][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.067677][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.093893][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.097015][ T5286] belkin 0003:1020:0006.0016: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 1170.140903][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.182789][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.259965][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.291786][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.317012][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.341592][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.352792][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.369677][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.378585][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.387301][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.398624][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.413912][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.430806][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.442128][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.475251][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.477976][ T5337] usb 4-1: USB disconnect, device number 18 [ 1170.506944][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.552896][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.577570][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.593242][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.615180][ T8664] Bluetooth: hci0: command 0x0406 tx timeout [ 1170.621344][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.645058][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.663099][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.670932][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.680666][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.689979][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.698414][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.706578][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.718909][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.726771][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.734836][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.742657][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.750759][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.758632][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.767757][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.817886][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.846400][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.866668][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.888327][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.912696][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.931539][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.941073][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.965058][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1170.977975][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.015174][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.045287][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.073527][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.083266][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.122078][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.142681][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.152600][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.160632][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.185201][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.216744][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.228894][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.237120][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.246239][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.254104][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.288581][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.324893][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.518511][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1171.785911][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 1171.803488][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 1172.412689][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.423915][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.431732][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.439540][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.447365][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.459061][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.467398][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.485960][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.493818][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.525168][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.532934][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.576883][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.598356][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.642135][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.650599][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.706793][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.714579][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.748460][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.777310][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.794240][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.803392][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.838900][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.855140][ T5285] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1172.875843][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.895181][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.902920][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.929082][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1172.985356][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.013518][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.041868][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.061216][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.081945][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 1173.094554][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.106028][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.127678][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.147709][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.168703][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.180186][ T5285] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1173.201885][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.212305][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.232269][ T5285] usb 4-1: config 0 descriptor?? [ 1173.237639][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.286469][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.311571][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.354235][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.354274][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.354307][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.418239][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.418450][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.460459][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.460731][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.460887][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.461052][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.462286][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.462704][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.462933][T11462] hid-generic 0000:54430048:0000.0014: unknown main item tag 0x0 [ 1173.529065][T11462] hid-generic 0000:54430048:0000.0014: hidraw0: HID v0.00 Device [] on ®Qµ\*îhÒ:F\Ô1áìïPÃ#N%Uör"GaG†O 1‚õßØÃHËÐmÈÞËÞ}N%,3”þÔ{€= [ 1173.729492][ T5285] logitech 0003:046D:C20E.0017: rdesc size test failed for formula gp [ 1173.730502][ T5285] logitech 0003:046D:C20E.0017: unbalanced delimiter at end of report description [ 1173.768205][ T5285] logitech 0003:046D:C20E.0017: parse failed [ 1173.768335][ T5285] logitech 0003:046D:C20E.0017: probe with driver logitech failed with error -22 [ 1174.243431][ T5285] usb 4-1: USB disconnect, device number 19 [ 1174.447804][T14898] kernel read not supported for file /eth0 (pid: 14898 comm: syz.1.1945) [ 1174.478052][ T29] audit: type=1800 audit(1725841787.150:622): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1945" name="eth0" dev="mqueue" ino=60112 res=0 errno=0 [ 1175.076537][T14903] netlink: 'syz.1.1947': attribute type 7 has an invalid length. [ 1175.084649][T14903] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1947'. [ 1175.100714][T14903] netlink: 'syz.1.1947': attribute type 3 has an invalid length. [ 1175.108806][T14903] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1947'. [ 1176.374767][T14924] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1176.395681][T14924] netlink: 'syz.0.1954': attribute type 2 has an invalid length. [ 1176.407142][T14924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1954'. [ 1176.565286][ T5237] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1176.713719][T14935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1176.885162][ T5237] usb 2-1: Using ep0 maxpacket: 32 [ 1176.938602][ T5237] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.970951][ T29] audit: type=1400 audit(1725841789.640:623): avc: denied { accept } for pid=14936 comm="syz.4.1962" path="socket:[60923]" dev="sockfs" ino=60923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1177.005193][ T5237] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.056797][T14942] netlink: 'syz.3.1961': attribute type 7 has an invalid length. [ 1177.084504][T14942] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1961'. [ 1177.098179][T14942] netlink: 'syz.3.1961': attribute type 3 has an invalid length. [ 1177.106411][T14942] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1961'. [ 1177.817172][ T5237] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1177.830759][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.837611][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.932047][ T5237] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1177.952874][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1178.002907][ T5237] usb 2-1: Product: syz [ 1178.025155][ T5237] usb 2-1: Manufacturer: syz [ 1178.029789][ T5237] usb 2-1: SerialNumber: syz [ 1178.059301][ T5237] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input21 [ 1178.095175][ T5285] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1178.299207][ T5285] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1178.330058][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.358921][ T5285] usb 4-1: Product: syz [ 1178.369337][ T5285] usb 4-1: Manufacturer: syz [ 1178.403620][ T5285] usb 4-1: SerialNumber: syz [ 1178.433427][ T5285] usb 4-1: config 0 descriptor?? [ 1178.513632][T14960] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1969'. [ 1178.526001][T14960] netlink: 'syz.2.1969': attribute type 10 has an invalid length. [ 1178.668837][ T5285] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1178.684736][ T5237] usb 2-1: USB disconnect, device number 13 [ 1178.737807][ T5237] appletouch 2-1:1.0: input: appletouch disconnected [ 1179.389547][ T5285] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1179.617230][ T5237] usb 4-1: USB disconnect, device number 20 [ 1180.204128][ T29] audit: type=1400 audit(1725841792.880:624): avc: denied { write } for pid=14975 comm="syz.2.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1180.424572][T14981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1186.116864][ T29] audit: type=1400 audit(1725841798.780:625): avc: denied { search } for pid=15000 comm="syz.2.1984" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.607347][ T29] audit: type=1400 audit(1725841799.290:626): avc: denied { bind } for pid=15009 comm="syz.2.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1187.015754][ T5337] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1191.142028][ T8664] Bluetooth: hci3: command 0x0406 tx timeout [ 1191.219045][ T5285] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1193.492340][ T5337] usb 2-1: unable to read config index 0 descriptor/all [ 1193.519312][ T5337] usb 2-1: can't read configurations, error -71 [ 1193.690561][ T29] audit: type=1400 audit(1725841806.370:627): avc: denied { setopt } for pid=15047 comm="syz.2.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1194.086282][T15062] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1195.346532][ T5245] Bluetooth: hci5: command 0x0406 tx timeout [ 1195.422694][T15079] netlink: 'syz.3.2011': attribute type 4 has an invalid length. [ 1195.840216][T15087] netlink: 'syz.1.2015': attribute type 7 has an invalid length. [ 1195.848499][T15087] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1195.862157][T15087] netlink: 'syz.1.2015': attribute type 3 has an invalid length. [ 1195.870378][T15087] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2015'. [ 1196.703692][T15089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1197.407841][T15111] netlink: 'syz.2.2024': attribute type 7 has an invalid length. [ 1197.417926][T15111] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2024'. [ 1197.430776][T15111] netlink: 'syz.2.2024': attribute type 3 has an invalid length. [ 1197.438754][T15111] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2024'. [ 1198.144269][T15113] netlink: 'syz.4.2026': attribute type 1 has an invalid length. [ 1198.565229][T15123] netlink: 'syz.2.2028': attribute type 7 has an invalid length. [ 1198.585065][T15123] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2028'. [ 1198.605100][T15123] netlink: 'syz.2.2028': attribute type 3 has an invalid length. [ 1198.613071][T15123] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2028'. [ 1199.426516][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1199.486334][T15131] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 1200.943476][T15145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1200.999316][ T29] audit: type=1400 audit(1725841813.680:628): avc: denied { ioctl } for pid=15147 comm="syz.3.2037" path="socket:[61349]" dev="sockfs" ino=61349 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1202.005456][ T5285] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1202.222286][ T5285] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1202.256697][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.273616][ T5285] usb 2-1: Product: syz [ 1202.294875][ T5285] usb 2-1: Manufacturer: syz [ 1202.398890][T15158] netlink: 'syz.3.2040': attribute type 7 has an invalid length. [ 1202.406731][T15158] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2040'. [ 1202.417966][T15158] netlink: 'syz.3.2040': attribute type 3 has an invalid length. [ 1202.425781][T15158] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2040'. [ 1202.541543][ T5285] usb 2-1: SerialNumber: syz [ 1202.608112][ T5285] usb 2-1: config 0 descriptor?? [ 1203.182286][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1203.447148][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1203.476111][ T5285] usb 2-1: USB disconnect, device number 16 [ 1203.524583][ T47] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1203.604728][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.672091][ T47] usb 1-1: Product: syz [ 1203.714130][ T47] usb 1-1: Manufacturer: syz [ 1203.753227][ T47] usb 1-1: SerialNumber: syz [ 1204.090312][ T47] usb 1-1: config 0 descriptor?? [ 1204.278389][T15197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.280222][T15201] netlink: 'syz.4.2053': attribute type 19 has an invalid length. [ 1204.358217][ T47] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1204.387465][ T47] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1204.436935][ T47] usb 1-1: USB disconnect, device number 10 [ 1205.987235][T15222] netlink: 'syz.3.2061': attribute type 7 has an invalid length. [ 1205.997157][T15222] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2061'. [ 1206.011940][T15222] netlink: 'syz.3.2061': attribute type 3 has an invalid length. [ 1206.025536][T15222] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2061'. [ 1207.929208][ T29] audit: type=1400 audit(1725841820.610:629): avc: denied { shutdown } for pid=15247 comm="syz.0.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1207.975503][ T5337] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1207.983365][T15249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1208.075094][T15224] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1208.257641][T15224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.268555][T15224] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1208.590402][T15224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.590562][ T5337] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1208.621715][T15224] usb 5-1: config 0 descriptor?? [ 1208.659321][ T5337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.679210][ T5337] usb 2-1: Product: syz [ 1208.684200][ T5337] usb 2-1: Manufacturer: syz [ 1208.691901][ T5337] usb 2-1: SerialNumber: syz [ 1208.724557][ T5337] usb 2-1: config 0 descriptor?? [ 1209.060512][ T47] usb 5-1: USB disconnect, device number 20 [ 1209.455925][ T5337] usb 2-1: USB disconnect, device number 17 [ 1209.564568][T15265] netlink: 'syz.2.2076': attribute type 7 has an invalid length. [ 1209.573922][T15265] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2076'. [ 1209.589650][T15265] netlink: 'syz.2.2076': attribute type 3 has an invalid length. [ 1209.597701][T15265] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2076'. [ 1211.974018][T15282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1212.366296][ T29] audit: type=1400 audit(1725841825.040:630): avc: denied { getopt } for pid=15295 comm="syz.1.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1214.031995][ T29] audit: type=1400 audit(1725841826.710:631): avc: denied { ioctl } for pid=15317 comm="syz.0.2095" path="socket:[61856]" dev="sockfs" ino=61856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1214.139781][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.931022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.803989][T15333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1217.084412][T15338] netlink: 'syz.4.2101': attribute type 5 has an invalid length. [ 1219.141266][ T29] audit: type=1400 audit(1725841831.820:632): avc: denied { listen } for pid=15359 comm="syz.4.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1219.165358][T15362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1219.196240][T15365] batadv0: entered allmulticast mode [ 1219.350946][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 1219.374486][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.383552][T15372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.404809][T15373] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2116'. [ 1219.419280][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.433472][T15373] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1219.446698][T15372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.608352][T15377] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2118'. [ 1219.824825][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1220.307923][T15381] IPVS: persistence engine module ip_vs_pe_À not found [ 1220.548944][ T5285] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1220.698157][T15393] gtp0: entered promiscuous mode [ 1220.712142][T15393] gtp0: entered allmulticast mode [ 1220.755398][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 1220.763852][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1220.800659][ T5285] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1220.819990][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.851603][ T5285] usb 5-1: config 0 descriptor?? [ 1220.875866][ T5285] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1220.910601][ T5285] usb 5-1: Detected SIO [ 1220.920610][ T5285] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1220.997849][T15404] netlink: 'syz.0.2128': attribute type 12 has an invalid length. [ 1221.025102][T15404] netlink: 'syz.0.2128': attribute type 11 has an invalid length. [ 1221.043203][T15404] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.2128'. [ 1221.285399][ T5237] usb 5-1: USB disconnect, device number 21 [ 1221.317465][ T5237] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1221.338786][ T5237] ftdi_sio 5-1:0.0: device disconnected [ 1221.409671][ T29] audit: type=1400 audit(1725841834.090:633): avc: denied { create } for pid=15416 comm="syz.3.2133" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 1221.435231][T15224] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 1221.731656][T15224] usb 2-1: config 0 has no interfaces? [ 1221.734809][T15224] usb 2-1: string descriptor 0 read error: -22 [ 1221.735082][T15224] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.735118][T15224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.031108][T15224] usb 2-1: config 0 descriptor?? [ 1222.400491][ T5237] usb 2-1: USB disconnect, device number 18 [ 1222.719425][T15433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1222.969722][ T29] audit: type=1400 audit(1725841835.650:634): avc: denied { mounton } for pid=15436 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1223.038853][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1223.052500][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1223.066938][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1223.078266][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1223.092513][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1223.100567][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1223.265138][ T5237] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1223.306015][T15439] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2141'. [ 1223.486596][ T5237] usb 5-1: Using ep0 maxpacket: 32 [ 1223.493958][ T9] IPVS: starting estimator thread 0... [ 1223.518034][T15441] IPVS: fo: FWM 4 0x00000004 - no destination available [ 1223.543056][ T5237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1223.568806][ T5237] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1223.585230][ T5237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.613112][ T5237] usb 5-1: Product: syz [ 1223.617992][ T5237] usb 5-1: Manufacturer: syz [ 1223.623351][ T5237] usb 5-1: SerialNumber: syz [ 1223.638698][T15442] IPVS: using max 18 ests per chain, 43200 per kthread [ 1223.641224][ T5237] usb 5-1: config 0 descriptor?? [ 1223.853933][T15454] overlayfs: failed to resolve './file0': -2 [ 1223.909626][ T30] INFO: task syz.2.1324:13022 blocked for more than 143 seconds. [ 1223.946462][T15455] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2146'. [ 1224.061873][ T30] Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1224.255345][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1224.506135][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1224.548320][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1224.725010][ T30] task:syz.2.1324 state:D stack:27312 pid:13022 tgid:13021 ppid:11499 flags:0x00004002 [ 1224.877744][ T30] Call Trace: [ 1224.881075][ T30] [ 1224.955053][ T30] __schedule+0xe37/0x5490 [ 1224.959537][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1225.006994][ T5237] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1225.017951][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1225.033202][ T5237] usb 5-1: USB disconnect, device number 22 [ 1225.039295][ T9] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1225.043832][ T30] ? __pfx___schedule+0x10/0x10 [ 1225.054520][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.066009][ T9] usb 1-1: config 0 descriptor?? [ 1225.092731][ T30] ? schedule+0x298/0x350 [ 1225.105109][ T30] ? __pfx_lock_release+0x10/0x10 [ 1225.110196][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1225.125232][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1225.130754][ T30] schedule+0xe7/0x350 [ 1225.134855][ T30] schedule_preempt_disabled+0x13/0x30 [ 1225.145049][ T30] __mutex_lock+0x5b8/0x9c0 [ 1225.154682][ T30] ? remove_inode_hugepages+0x30a/0xeb0 [ 1225.161784][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1225.166966][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1225.172986][ T30] ? mark_held_locks+0x9f/0xe0 [ 1225.175734][ T5245] Bluetooth: hci6: command tx timeout [ 1225.178039][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1225.188924][ T30] ? remove_inode_hugepages+0x30a/0xeb0 [ 1225.198090][ T30] remove_inode_hugepages+0x30a/0xeb0 [ 1225.203516][ T30] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1225.211362][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1225.216713][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1225.222201][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1225.227803][ T30] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 1225.233647][ T30] hugetlbfs_evict_inode+0x22/0x70 [ 1225.238826][ T30] evict+0x398/0x8c0 [ 1225.242737][ T30] ? __pfx_evict+0x10/0x10 [ 1225.248604][ T30] ? __pfx_lock_release+0x10/0x10 [ 1225.253671][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1225.259502][ T30] iput.part.0+0x5a8/0x7f0 [ 1225.263940][ T30] iput+0x5c/0x80 [ 1225.269154][ T30] dentry_unlink_inode+0x29c/0x480 [ 1225.274298][ T30] __dentry_kill+0x1d0/0x600 [ 1225.278941][ T30] dput.part.0+0x4b1/0x9b0 [ 1225.283394][ T30] dput+0x1f/0x30 [ 1225.287130][ T30] __fput+0x54e/0xbb0 [ 1225.291167][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1225.300730][ T30] task_work_run+0x14e/0x250 [ 1225.305502][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1225.310653][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1225.316373][ T30] do_exit+0xaa3/0x2bb0 [ 1225.320626][ T30] ? get_signal+0x8f2/0x2770 [ 1225.328624][ T30] ? __pfx_do_exit+0x10/0x10 [ 1225.333348][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1225.338486][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1225.343898][ T30] do_group_exit+0xd3/0x2a0 [ 1225.348696][ T30] get_signal+0x25fb/0x2770 [ 1225.353242][ T30] ? __pfx_get_signal+0x10/0x10 [ 1225.358255][ T30] ? task_work_add+0x1d6/0x370 [ 1225.363055][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 1225.369991][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1225.376544][ T30] ? ksys_read+0x1ab/0x260 [ 1225.381064][ T30] ? __pfx_ksys_read+0x10/0x10 [ 1225.385960][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 1225.391719][ T30] do_syscall_64+0xda/0x250 [ 1225.399231][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.405195][ T30] RIP: 0033:0x7f1e89d7cef9 [ 1225.409639][ T30] RSP: 002b:00007f1e8ab6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1225.418124][ T30] RAX: 0000000000018ff8 RBX: 00007f1e89f35f80 RCX: 00007f1e89d7cef9 [ 1225.427673][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000004 [ 1225.435722][ T30] RBP: 00007f1e89def046 R08: 0000000000000000 R09: 0000000000000000 [ 1225.443715][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.451730][ T30] R13: 0000000000000000 R14: 00007f1e89f35f80 R15: 00007ffd4dea90c8 [ 1225.460094][ T30] [ 1225.463152][ T30] INFO: task syz.0.1327:13030 blocked for more than 144 seconds. [ 1225.470983][ T30] Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1225.479825][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1225.490083][ T30] task:syz.0.1327 state:D stack:28352 pid:13030 tgid:13029 ppid:11575 flags:0x00004006 [ 1225.503705][ T30] Call Trace: [ 1225.507112][ T30] [ 1225.510072][ T30] __schedule+0xe37/0x5490 [ 1225.514526][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1225.519785][ T30] ? __pfx___schedule+0x10/0x10 [ 1225.524647][ T30] ? schedule+0x298/0x350 [ 1225.529248][ T30] ? __pfx_lock_release+0x10/0x10 [ 1225.534299][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1225.539403][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1225.545030][ T30] schedule+0xe7/0x350 [ 1225.549145][ T30] schedule_preempt_disabled+0x13/0x30 [ 1225.554659][ T30] __mutex_lock+0x5b8/0x9c0 [ 1225.559230][ T30] ? hugetlb_wp+0x1e16/0x2980 [ 1225.563938][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1225.569089][ T30] ? hugetlb_wp+0x1e16/0x2980 [ 1225.573798][ T30] hugetlb_wp+0x1e16/0x2980 [ 1225.578463][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1225.583344][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1225.590204][ T30] ? __filemap_get_folio+0x2a1/0xae0 [ 1225.596454][ T30] hugetlb_fault+0x1f64/0x27f0 [ 1225.605281][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1225.610455][ T30] ? find_vma+0xc0/0x140 [ 1225.614724][ T30] ? __pfx_find_vma+0x10/0x10 [ 1225.619591][ T30] handle_mm_fault+0x956/0xa60 [ 1225.624439][ T30] ? __pkru_allows_pkey+0x21/0xb0 [ 1225.629731][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 1225.634889][ T30] exc_page_fault+0x5c/0xc0 [ 1225.639491][ T30] asm_exc_page_fault+0x26/0x30 [ 1225.644366][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 1225.650270][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1225.679211][ T30] RSP: 0018:ffffc9000fa9fc48 EFLAGS: 00050246 [ 1225.685809][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 1225.693857][ T30] RDX: fffff52001f53f98 RSI: ffffc9000fa9fcb8 RDI: 000000002001f2b0 [ 1225.707752][ T30] RBP: 000000002001f2b0 R08: 0000000000000000 R09: fffff52001f53f97 [ 1225.718157][ T30] R10: ffffc9000fa9fcbf R11: 0000000000000000 R12: ffffc9000fa9fcb8 [ 1225.726186][ T30] R13: 000000002001f2b8 R14: 0000000000000000 R15: 0000000020019680 [ 1225.734205][ T30] _copy_to_user+0xac/0xc0 [ 1225.739801][ T30] msr_read+0x155/0x250 [ 1225.743996][ T30] ? __pfx_msr_read+0x10/0x10 [ 1225.748729][ T30] ? security_file_permission+0x98/0xc0 [ 1225.754307][ T30] ? __pfx_msr_read+0x10/0x10 [ 1225.759009][ T30] vfs_read+0x1d4/0xbd0 [ 1225.763191][ T30] ? __pfx_vfs_read+0x10/0x10 [ 1225.767912][ T30] ? do_futex+0x123/0x350 [ 1225.772262][ T30] ? __fget_files+0x256/0x400 [ 1225.778406][ T30] ? __fget_light+0x173/0x210 [ 1225.783122][ T30] ksys_read+0x12f/0x260 [ 1225.787402][ T30] ? __pfx_ksys_read+0x10/0x10 [ 1225.792199][ T30] do_syscall_64+0xcd/0x250 [ 1225.796745][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.802661][ T30] RIP: 0033:0x7fee9257cef9 [ 1225.810283][ T30] RSP: 002b:00007fee932dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1225.818959][ T30] RAX: ffffffffffffffda RBX: 00007fee92735f80 RCX: 00007fee9257cef9 [ 1225.827392][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000004 [ 1225.837892][ T30] RBP: 00007fee925ef046 R08: 0000000000000000 R09: 0000000000000000 [ 1225.846049][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.854045][ T30] R13: 0000000000000000 R14: 00007fee92735f80 R15: 00007ffd4deaa0e8 [ 1225.862052][ T30] [ 1225.865160][ T30] INFO: task syz.0.1327:13033 blocked for more than 145 seconds. [ 1225.872889][ T30] Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1225.934995][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1225.943699][ T30] task:syz.0.1327 state:D stack:26880 pid:13033 tgid:13029 ppid:11575 flags:0x00004004 [ 1226.026074][ T30] Call Trace: [ 1226.029401][ T30] [ 1226.032357][ T30] __schedule+0xe37/0x5490 [ 1226.074008][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1226.097806][ T30] ? mark_lock+0x1/0xc60 [ 1226.102123][ T30] ? __pfx___schedule+0x10/0x10 [ 1226.144864][ T30] ? schedule+0x298/0x350 [ 1226.155283][ T30] ? __pfx_lock_release+0x10/0x10 [ 1226.160378][ T30] schedule+0xe7/0x350 [ 1226.164478][ T30] io_schedule+0xbf/0x130 [ 1226.216789][ T30] folio_wait_bit_common+0x3d8/0x9b0 [ 1226.222152][ T30] ? folio_wait_bit_common+0x13c/0x9b0 [ 1226.253780][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1226.265007][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1226.270608][ T30] ? __pfx___might_resched+0x10/0x10 [ 1226.285010][ T30] ? __vma_reservation_common+0x270/0x740 [ 1226.290797][ T30] __filemap_get_folio+0x6ab/0xae0 [ 1226.327510][ T30] ? huge_pte_alloc+0x22e/0x3a0 [ 1226.332413][ T30] hugetlb_fault+0x1605/0x27f0 [ 1226.356552][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1226.361728][ T30] ? find_vma+0xc0/0x140 [ 1226.384998][ T30] ? __pfx_find_vma+0x10/0x10 [ 1226.389744][ T30] handle_mm_fault+0x956/0xa60 [ 1226.394535][ T30] ? __pkru_allows_pkey+0x21/0xb0 [ 1226.437987][ T30] do_user_addr_fault+0x7a3/0x13f0 [ 1226.443178][ T30] exc_page_fault+0x5c/0xc0 [ 1226.455017][ T30] asm_exc_page_fault+0x26/0x30 [ 1226.459921][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 1226.474996][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1226.539703][ T30] RSP: 0018:ffffc9000f8e7c08 EFLAGS: 00050202 [ 1226.555207][ T30] RAX: 00000000000000aa RBX: 0000000000000018 RCX: 0000000000000018 [ 1226.563217][ T30] RDX: fffff52001f1cfad RSI: ffffc9000f8e7d50 RDI: 0000000020000600 [ 1226.583783][ T30] RBP: 0000000020000600 R08: 0000000000000000 R09: fffff52001f1cfac [ 1226.594150][ T30] R10: ffffc9000f8e7d67 R11: 0000000000000000 R12: ffffc9000f8e7d50 [ 1226.609214][ T30] R13: 0000000020000618 R14: 0000000000000000 R15: ffff88807ca0c000 [ 1226.629113][ T30] _copy_to_user+0xac/0xc0 [ 1226.633578][ T30] userfaultfd_ioctl+0x2035/0x5f20 [ 1226.644982][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.650926][ T30] ? do_vfs_ioctl+0x515/0x1ad0 [ 1226.659425][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1226.664937][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1226.689459][ T30] ? selinux_file_ioctl+0x180/0x270 [ 1226.694695][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 1226.699877][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1226.720948][ T30] ? __x64_sys_ioctl+0x193/0x220 [ 1226.732838][ T30] __x64_sys_ioctl+0x193/0x220 [ 1226.744102][ T30] do_syscall_64+0xcd/0x250 [ 1226.748786][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.754708][ T30] RIP: 0033:0x7fee9257cef9 [ 1226.759614][ T30] RSP: 002b:00007fee932bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.768162][ T30] RAX: ffffffffffffffda RBX: 00007fee92736058 RCX: 00007fee9257cef9 [ 1226.779408][ T30] RDX: 0000000020000600 RSI: 00000000c018aa3f RDI: 0000000000000007 [ 1226.787489][ T30] RBP: 00007fee925ef046 R08: 0000000000000000 R09: 0000000000000000 [ 1226.795557][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.803550][ T30] R13: 0000000000000000 R14: 00007fee92736058 R15: 00007ffd4deaa0e8 [ 1226.811582][ T30] [ 1226.814651][ T30] [ 1226.814651][ T30] Showing all locks held in the system: [ 1226.854190][ T30] 5 locks held by kworker/0:1/9: [ 1226.859358][ T30] #0: ffff88801e6b2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1226.870429][ T30] #1: ffffc900000e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1226.881771][ T30] #2: ffff8880291a9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 1226.893471][ T30] #3: ffff888025d1d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x7f/0x4b0 [ 1226.902838][ T30] #4: ffff8880242a4a68 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x5fd/0x1c50 [ 1226.920448][ T30] 2 locks held by kworker/u8:1/12: [ 1226.925677][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1226.951047][ T30] #1: ffff8880b8828a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 1226.975658][ T30] 1 lock held by khungtaskd/30: [ 1226.980534][ T30] #0: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1226.990752][ T30] 3 locks held by kworker/u8:7/1108: [ 1227.004994][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1227.024315][ T30] #1: ffffc9000462fd80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1227.045032][ T30] #2: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1227.054194][ T30] 2 locks held by getty/4979: [ 1227.067669][ T30] #0: ffff888030bcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1227.083816][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1227.095972][ T30] 2 locks held by kworker/0:3/5237: [ 1227.101193][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1227.114736][ T30] #1: ffffc90003927d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1227.124515][ T30] 4 locks held by kworker/u8:13/8355: [ 1227.129927][ T30] 2 locks held by syz-executor/10237: [ 1227.139771][ T30] #0: ffffffff8fa35ba8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x230 [ 1227.148860][ T30] #1: ffffffff8ddc5778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 1227.158958][ T30] 3 locks held by syz-executor/11545: [ 1227.164325][ T30] #0: ffff88807d890d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1227.173952][ T30] #1: ffff88807d890078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1227.185636][ T30] #2: ffffffff8fc9ca68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1227.195742][ T30] 1 lock held by syz.2.1324/13022: [ 1227.200871][ T30] #0: ffff888020eaa068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: remove_inode_hugepages+0x30a/0xeb0 [ 1227.212417][ T30] 2 locks held by syz.0.1327/13030: [ 1227.219025][ T30] #0: ffff8880293ca798 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 1227.232741][ T30] #1: ffff888020eaa068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x1e16/0x2980 [ 1227.245952][ T30] 3 locks held by syz.0.1327/13033: [ 1227.251162][ T30] #0: ffff8880293ca798 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x3a9/0x6a0 [ 1227.255753][ T5245] Bluetooth: hci6: command tx timeout [ 1227.261272][ T30] #1: ffff888020eaa068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x313/0x27f0 [ 1227.277527][ T30] #2: ffff888033f460e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_vma_lock_read+0x105/0x140 [ 1227.288141][ T30] 2 locks held by syz.2.2089/15294: [ 1227.293350][ T30] #0: ffff88806a5f0ec8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x1e2/0x8f0 [ 1227.304714][ T30] #1: ffff888020eaa068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x313/0x27f0 [ 1227.315594][ T30] 3 locks held by syz.4.2140/15434: [ 1227.320786][ T30] #0: ffff8880286b0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1227.332660][ T30] #1: ffff8880286b0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1227.345865][ T30] #2: ffffffff8fc9ca68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1227.356488][ T30] 3 locks held by syz-executor/15436: [ 1227.361926][ T30] #0: ffff888079830d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1227.371683][ T30] #1: ffff888079830078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1227.381659][ T30] #2: ffffffff8fc9ca68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1227.391808][ T30] 3 locks held by syz.0.2146/15455: [ 1227.397047][ T30] #0: ffff888054f34d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1227.408112][ T30] #1: ffff888054f34078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1227.417851][ T30] #2: ffffffff8ddc5778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1227.430112][ T30] [ 1227.432514][ T30] ============================================= [ 1227.432514][ T30] [ 1227.490618][ T30] NMI backtrace for cpu 1 [ 1227.494991][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1227.505513][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1227.515576][ T30] Call Trace: [ 1227.518854][ T30] [ 1227.521782][ T30] dump_stack_lvl+0x116/0x1f0 [ 1227.526463][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1227.531413][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1227.537403][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1227.543394][ T30] watchdog+0xf0c/0x1240 [ 1227.547649][ T30] ? __pfx_watchdog+0x10/0x10 [ 1227.552338][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1227.557547][ T30] ? __kthread_parkme+0x148/0x220 [ 1227.562576][ T30] ? __pfx_watchdog+0x10/0x10 [ 1227.567260][ T30] kthread+0x2c1/0x3a0 [ 1227.571328][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1227.576531][ T30] ? __pfx_kthread+0x10/0x10 [ 1227.581122][ T30] ret_from_fork+0x45/0x80 [ 1227.585552][ T30] ? __pfx_kthread+0x10/0x10 [ 1227.590142][ T30] ret_from_fork_asm+0x1a/0x30 [ 1227.594930][ T30] [ 1227.600302][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1227.607221][ C0] NMI backtrace for cpu 0 [ 1227.607243][ C0] CPU: 0 UID: 0 PID: 5286 Comm: kworker/0:5 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1227.607269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1227.607283][ C0] Workqueue: events nsim_dev_trap_report_work [ 1227.607312][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 1227.607346][ C0] Code: 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 <83> f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 [ 1227.607366][ C0] RSP: 0018:ffffc9000403f640 EFLAGS: 00000246 [ 1227.607383][ C0] RAX: 0000000000000000 RBX: ffffc9000403f768 RCX: ffffffff813cf689 [ 1227.607398][ C0] RDX: ffff888031421e00 RSI: ffffffff813ceca2 RDI: ffffc9000403f768 [ 1227.607413][ C0] RBP: ffffc9000403f800 R08: 0000000000000001 R09: 0000000000000004 [ 1227.607427][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc9000403f770 [ 1227.607441][ C0] R13: ffffc9000403f808 R14: ffffffff90a3bd8c R15: 0000000000000002 [ 1227.607455][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1227.607477][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1227.607493][ C0] CR2: 00007ffc59174f28 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 1227.607508][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 1227.607520][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1227.607535][ C0] Call Trace: [ 1227.607542][ C0] [ 1227.607551][ C0] ? show_regs+0x8c/0xa0 [ 1227.607580][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1227.607610][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1227.607637][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1227.607658][ C0] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 1227.607688][ C0] ? default_do_nmi+0x6a/0x160 [ 1227.607711][ C0] ? exc_nmi+0x170/0x1e0 [ 1227.607733][ C0] ? end_repeat_nmi+0xf/0x53 [ 1227.607759][ C0] ? unwind_next_frame+0x789/0x23a0 [ 1227.607780][ C0] ? stack_access_ok+0x22/0x270 [ 1227.607801][ C0] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 1227.607830][ C0] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 1227.607862][ C0] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 1227.607892][ C0] [ 1227.607899][ C0] [ 1227.607905][ C0] stack_access_ok+0x22/0x270 [ 1227.607929][ C0] unwind_next_frame+0xd9b/0x23a0 [ 1227.607951][ C0] ? arch_stack_walk+0xb2/0x170 [ 1227.607977][ C0] __unwind_start+0x5aa/0x880 [ 1227.607999][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1227.608026][ C0] arch_stack_walk+0xb2/0x170 [ 1227.608052][ C0] ? arch_stack_walk+0xb2/0x170 [ 1227.608076][ C0] stack_trace_save+0x95/0xd0 [ 1227.608101][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1227.608127][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1227.608161][ C0] kasan_save_stack+0x33/0x60 [ 1227.608217][ C0] kasan_save_track+0x14/0x30 [ 1227.608245][ C0] __kasan_slab_alloc+0x89/0x90 [ 1227.608275][ C0] kmem_cache_alloc_node_noprof+0x153/0x310 [ 1227.608305][ C0] ? __alloc_skb+0x2b1/0x380 [ 1227.608335][ C0] __alloc_skb+0x2b1/0x380 [ 1227.608362][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1227.608387][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1227.608409][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1227.608435][ C0] nsim_dev_trap_report_work+0x2a4/0xc80 [ 1227.608468][ C0] process_one_work+0x9c5/0x1b40 [ 1227.608504][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1227.608527][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1227.608562][ C0] ? assign_work+0x1a0/0x250 [ 1227.608590][ C0] worker_thread+0x6c8/0xed0 [ 1227.608627][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1227.608656][ C0] kthread+0x2c1/0x3a0 [ 1227.608678][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1227.608703][ C0] ? __pfx_kthread+0x10/0x10 [ 1227.608726][ C0] ret_from_fork+0x45/0x80 [ 1227.608754][ C0] ? __pfx_kthread+0x10/0x10 [ 1227.608777][ C0] ret_from_fork_asm+0x1a/0x30 [ 1227.608812][ C0] [ 1227.645097][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1227.645116][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1227.645144][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1227.645163][ T30] Call Trace: [ 1227.645172][ T30] [ 1227.645182][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1227.645213][ T30] panic+0x6dc/0x7c0 [ 1227.645245][ T30] ? __pfx_panic+0x10/0x10 [ 1227.645275][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1227.645304][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1227.645335][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1227.645362][ T30] ? watchdog+0xd76/0x1240 [ 1227.645384][ T30] ? watchdog+0xd69/0x1240 [ 1227.645411][ T30] watchdog+0xd87/0x1240 [ 1227.645440][ T30] ? __pfx_watchdog+0x10/0x10 [ 1227.645462][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1227.645494][ T30] ? __kthread_parkme+0x148/0x220 [ 1227.645523][ T30] ? __pfx_watchdog+0x10/0x10 [ 1227.645546][ T30] kthread+0x2c1/0x3a0 [ 1227.645570][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1227.645598][ T30] ? __pfx_kthread+0x10/0x10 [ 1227.645626][ T30] ret_from_fork+0x45/0x80 [ 1227.645657][ T30] ? __pfx_kthread+0x10/0x10 [ 1227.645683][ T30] ret_from_fork_asm+0x1a/0x30 [ 1227.645729][ T30] [ 1227.646377][ T30] Kernel Offset: disabled [ 1228.124159][ T30] Rebooting in 86400 seconds..