last executing test programs: 1m26.379107813s ago: executing program 1 (id=361): syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x200) (async) sysinfo(0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) (async) lsm_get_self_attr(0x69, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f0000000200)=0x7f, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) fcntl$getown(r1, 0x9) (async) r2 = memfd_secret(0x80000) syz_genetlink_get_family_id$devlink(0x0, r2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x11, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m25.813947692s ago: executing program 1 (id=362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xb76}], 0x1c) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x22, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r6}) 1m24.817083531s ago: executing program 1 (id=364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0xffffff95]}}], 0x1001a) 1m22.613872842s ago: executing program 1 (id=371): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000140), 0x8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x1, 0x2, 0x1, 0x3, 0x9}, 0x4, 0xfff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000004740)={0x7, 'vlan0\x00', {0x7}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2, 0x2, 0x1, 0xd, 0x8}, &(0x7f0000000180)=0x20) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setpgid(0x0, r3) creat(&(0x7f00000001c0)='./file0\x00', 0x102) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m22.376394662s ago: executing program 1 (id=372): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x3000000, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1m21.837560699s ago: executing program 1 (id=378): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xa8c13000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = socket$inet6_udp(0xa, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x3, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r11 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x3, 0x6, 0x448, '\x00', 0x400}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x4, 0xa, 0x2, 0x2005, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0xfff, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffb, 0x403, 0x1, 0x4, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x7f80000, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0xdc80d3f, 0xfffffffffffff8f6, 0x4, 0x7, 0x0, 0xf9800000, 0x8, 0xd, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x8, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x8, 0x201, 0x77d, 0x12e9, 0x5, 0x6, 0xa2, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x3ff, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000005, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7fdd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x5, 0x2, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) io_uring_enter(r8, 0x133d, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) 1m21.609075471s ago: executing program 32 (id=378): connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xa8c13000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r7 = socket$inet6_udp(0xa, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x3, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r11 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x3, 0x6, 0x448, '\x00', 0x400}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x4, 0xa, 0x2, 0x2005, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0xfff, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffb, 0x403, 0x1, 0x4, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x7f80000, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0xdc80d3f, 0xfffffffffffff8f6, 0x4, 0x7, 0x0, 0xf9800000, 0x8, 0xd, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x8, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x8, 0x201, 0x77d, 0x12e9, 0x5, 0x6, 0xa2, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x3ff, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000005, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7fdd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x5, 0x2, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) io_uring_enter(r8, 0x133d, 0x0, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) 8.630195379s ago: executing program 2 (id=658): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001600010a00000000"], 0x78}, 0x1, 0x0, 0x0, 0x34000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000000104010870000000000000000a00000005000100"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40010) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=02000;00,user_id=\x00'/39, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x8}}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0xff0f) 7.648881341s ago: executing program 3 (id=662): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r2]) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) prlimit64(r4, 0xe, &(0x7f0000000200)={0x9, 0xe39}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000440), 0x20a, 0x8401) r5 = syz_open_procfs(0x0, 0x0) timer_create(0x1, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 6.007125749s ago: executing program 2 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x80204705, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r4 = syz_io_uring_setup(0x891, &(0x7f0000000300)={0x0, 0xbeea, 0x0, 0x1, 0x1b1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000780)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r7, r1}}) io_uring_enter(r4, 0x47f6, 0x0, 0x60, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') read$FUSE(r9, &(0x7f0000004dc0)={0x2020}, 0x2020) 5.185723337s ago: executing program 2 (id=667): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000280)) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000fc100)={0x3, [], 0x8, "d7e210b12e2d45"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) 3.217236s ago: executing program 5 (id=669): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) fcntl$setown(r1, 0x8, r3) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x30) r4 = socket$inet(0x2, 0x800, 0x6) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xa, 0x40000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000004441f757200000de6f"], 0x48) r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, r7, &(0x7f0000000140)) 3.045591205s ago: executing program 3 (id=672): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001500add427327b472545b45602117fffffff81000e224e217f000001925aa80020007b00090001e809000000ff0000f038c71036000000ffffffffffffffffffe7ee000000000000000002000000000000000000", 0x58}], 0x1) 3.029671992s ago: executing program 2 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, ["", "", "", "", ""]}, 0x20}}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r8 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) gettid() execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18da8fa913048fd42f4002997c3e30000001000000000800"/37], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) dup3(r3, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00cf32cac80000040300000108000000e707800c00018006000600800a000008000280040019"], 0x76}, 0x1, 0x0, 0x0, 0x105}, 0x4008) 2.801969445s ago: executing program 3 (id=676): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a320000000005000400000000001400078005001500800000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) 2.767883148s ago: executing program 4 (id=677): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0xed620000) r0 = gettid() eventfd2(0x4, 0x80000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022cbd7000fddbdf25060000000c00018008000100", @ANYRES32=r7, @ANYBLOB="4404eed08068fb8c944b2a17401a55c7d166ddadc370d83abe6f747c839c3e95489ea1d5d5d2e45919324639ee13ab554148e702a5518363b5139e673084cab87f7f6878a0f9c5191e6b3c8470922891674d81305ee4c84aadee1a1096b718eb6376321e12c06496f6ecdfcd0861eab353f840213f76"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000f472000040"]) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r9, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2.719177737s ago: executing program 5 (id=678): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000f80)}, {&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e349359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369", 0x195}], 0x3}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) linkat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f00000000c0)='./file1\x00', 0x0) read$alg(r1, &(0x7f0000000040)=""/35, 0x23) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.621922339s ago: executing program 0 (id=679): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100001f00001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.55898564s ago: executing program 4 (id=680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff, 0x0, 0xff80}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xc0b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="38010000100001000000000800000000fe8000000000000000000000000000aa00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1414aa0000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2000000000000000000000010000000290d00000000000000000000004000000a000100000000ace36df12b2b6d4e587c5cd400000000004800010073686132353600"/252], 0x138}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}}, @in6={0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @loopback}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7fffffff}], 0x64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r3, 0x5a718000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 2.531327781s ago: executing program 0 (id=681): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000195c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r2, &(0x7f0000019300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0xffffffffc) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76", 0x2d, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000019340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d000000000400000005000000070000000000001205000000000000000000000d0000000000007f7260708553fdd9393894e9e0dade460e9b4b2b7a6cd031accedf20d9da03a8d92b3d5a69a80065c49a7a697ec6f1d5ff570318e10905e38cd9f17c4b280840954379793903d4625fbd7a39a0ad63b6402148111d8bbb3761c0b25e4ba0599b8b5d5c814f78755284a6658f5bc33b4d4434f97127e98542d52cede4b445859e9b389a04d8f39eaceccf878eb5d6b1217c3c96e45d6d3b50e8194c03f6a812"], 0x0, 0x46, 0x0, 0x1, 0x7}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019500)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000019280)=ANY=[@ANYBLOB="1800000000000001000000000000000002000000", @ANYRESHEX, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0xffffffffffffffa1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) r10 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000006162636465666768814fc59989edfeb07184737475567778796670313233050036"], 0x29, r10) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r10) keyctl$read(0xb, r10, &(0x7f0000002e40)=""/72, 0x4) 1.752990895s ago: executing program 5 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7, 0x0, r3}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi={0x0, 0x0, 0x0, 0x4745504d, [], [0xfffffffe]}}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x19, 0x800000, 0x8, 0x5, 0x80, 0x81}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x9, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x0, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xa, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x9, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x820, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000019500)={{'\x00', 0x2}, {0x800}, 0xb4, 0x0, 0x0, &(0x7f0000019200)='./file0\x00', &(0x7f0000019240)='./file0\x00', &(0x7f0000019280)="2b384087eae2f93c204045dea37084de5851c6c9ff8f1b32210ba1ae223702c8d281a2f42a6bad0b30689ecc27d2b9b64b09f8f54cecd984173d7150dde946595a338bebed", 0x45, 0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="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"], 0x1c1}) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind(r8, &(0x7f000000e440)=@in={0x2, 0x4e21, @broadcast}, 0x80) 1.749823645s ago: executing program 3 (id=683): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000054003d0900000000000000000700000f", @ANYRES32=r2, @ANYBLOB="200002c0", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000020000100", @ANYRES32=r2, @ANYBLOB="00030000ff"], 0x58}}, 0x0) 1.639127137s ago: executing program 3 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005fc0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xdce05}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x11, 0x3, 0x1088, 0x9c4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0xf0ffff}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x10) 1.563170261s ago: executing program 0 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) memfd_create(&(0x7f0000000140)='9p\x00', 0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) 1.417985818s ago: executing program 4 (id=686): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac000ec5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.315562378s ago: executing program 3 (id=687): syz_usb_connect(0x2, 0xfd, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x43, 0x56, 0xef, 0x10, 0x403, 0xed71, 0xd48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x1, 0xba, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x8e, 0xff, 0x1, 0x45, 0x7e, 0x6a, 0x4, [], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0x6, 0x43, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x3}, @generic={0xc9, 0x7, "1c1c6bdd2973c7bc7f394bd80ea08babea71b6a8119947115bebfe20d2bef7511c433fe2891106f75ee1e914ded8e4a0994c99e34a0e4f2e7d90ca577089dfe156d48956057126f64bb42e2b29ba601690ec843638fd0a849630271e4bc87a7a820937fc9221f1493bda35820a059069ce9cfed81f19b0eff756f8ef5556a0af45762ed31e51a71d00e5ac76e7a47fda33d016ea166d4d10cd45ac2c82bd9430108e413e2abf8fd37a08e2d31eccc7044ac7209022a5a9644293759bd24f9a95dae2b36480f81a"}]}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.165325358s ago: executing program 5 (id=688): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x80, @multicast1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) socket$kcm(0x11, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) 1.072745667s ago: executing program 2 (id=689): socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x22602, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0) 1.0021032s ago: executing program 4 (id=690): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180100180000000000000010000000030005000000000a02000000e000000200000000000000000800120000000000000000000000000006200000000000000100000000000000ff010000000000000000000000000001ff020000000000000000000000000001030006000000000002000000ffffffff0000000000000000080019"], 0xc0}}, 0x20000000) 621.241052ms ago: executing program 4 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0xa0001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x2, 0x5000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000280)={0x20, r3, 0x1, 0x0, &(0x7f0000000140)=[{}]}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00b965b3a90140ffffffff0500070084000000060004404e2200000c000280080001407f0000f2f52cb352ac52fc89af11352f6ff155fccc663c3d25450812620121b1689bdbd474657539b13ed0b3584cfcaf1a8e4e2e22694cc9870e20ff678cba9d0cf62ef575b51cd99de3d1f7f6e7b6ed932ddc7daea71626e9c2da87963b9384873cff94d9fe0502f8cba5318821386083178decd53d000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x52723a935e832f3e) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000200)={0x4, 0x0, 0x9b, 0x0, 0x0, 0x5}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000002c0)="3e0f01c5440f20c03501000000440f22c0460f01df66ba6100b00bee0f07b9770a00000f32f3440fc7fd430f01f866ba4000b800000000efb952090000b800000100ba000000000f30", 0x49}], 0x1, 0x20, &(0x7f0000000340)=[@cr4={0x1, 0x40042}], 0x1) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="040000000000000000000000000000000000000a34000000090a01040000000000000000070000000900020073797a31000000000900010073797a30000000000800054000000021140000001000010000000000000000000084000a"], 0x5c}}, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) ioctl$KVM_SET_PIT2(r10, 0x4070aea0, &(0x7f0000000100)={[{0x5, 0xff, 0x6f, 0x7e, 0x2, 0x7, 0x0, 0x1, 0xe, 0x8, 0x7, 0x7, 0x1}, {0x3, 0x800, 0x3, 0x2, 0x1, 0x8, 0x81, 0x0, 0x8, 0x7, 0x5e, 0x2, 0x5c1}, {0x5aac, 0xffff, 0x0, 0x81, 0x9, 0x6, 0xf3, 0x3, 0x8, 0x6, 0x8, 0x1, 0x5}], 0x4}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x270f82, 0x0) (async) unshare(0x66000080) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000080)=0x101fd) 515.405271ms ago: executing program 2 (id=692): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1a, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x40, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001140)={0x24, &(0x7f0000001040)={0x40, 0xf, 0x5, {0x5, 0xe, "a75a33"}}, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xa29}, @rdmsr={0x32, 0x18, {0x30c}}, @wr_crn={0x46, 0x20, {0x8, 0x4}}], 0x50}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x4, 0x0, [{0xb0b, 0x0, 0xa5d2}, {0xace, 0x0, 0x6}, {0xaf3, 0x0, 0x4}, {0x242, 0x0, 0x1}]}) 357.21315ms ago: executing program 4 (id=693): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="130100004107030000fdff00000000d6fecbd402120001000000000904000000bee4f9006284e4be10368790e4e3ca04d067af7ecba7d29d3e2a7eb27a518be9cae617da61cf77d42ca4b20886d6c5deca02fb4d89eb07f4340b2ac13f3fa81dd3d54fa3d6160b64a477c40da13108e69a1cf93f68fded496158b5f879a9d6ac0cb4e057f664435c14e6f7e90abe923748e68c0f56c724a1d57d93d2e683cd05a2eeb1152753bd101cb51128b5fc522f8a5d7e28f6aae0dd1d619046aa19b0202dbc8fbfa9e03b61eb866bb3e90ede9de72c84a68d049b630dc9dbb20296e42416f4"], 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000900000000000000adb3000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014e16f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getchain={0x3c, 0x66, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0x6, 0x4}}, [{0x8, 0xb, 0xfff}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40000000) syz_usb_control_io(r0, 0x0, 0x0) r8 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30be96a44db46f2d}, 0x48884) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f00000005c0)=""/223, 0xdf}], 0x3, 0x2, 0x0) 245.800501ms ago: executing program 0 (id=694): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0xed620000) r0 = gettid() eventfd2(0x4, 0x80000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022cbd7000fddbdf25060000000c00018008000100", @ANYRES32=r7, @ANYBLOB="4404eed08068fb8c944b2a17401a55c7d166ddadc370d83abe6f747c839c3e95489ea1d5d5d2e45919324639ee13ab554148e702a5518363b5139e673084cab87f7f6878a0f9c5191e6b3c8470922891674d81305ee4c84aadee1a1096b718eb6376321e12c06496f6ecdfcd0861eab353f840213f76"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000f472000040"]) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 245.458478ms ago: executing program 5 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) 227.782403ms ago: executing program 5 (id=696): syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0xe}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100627269646765000018000280080031"], 0x48}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) sendto$inet_nvme_pdu(r8, &(0x7f0000000000)=@data_h2c={{0x6, 0xd, 0x18, 0x6, 0x80ea1}, 0x3, 0x8, 0x66b, 0x3, "143199a0"}, 0xfffffffffffffe41, 0x0, 0x0, 0x0) 122.63885ms ago: executing program 0 (id=697): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x3}, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmmsg$inet(r8, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 0 (id=698): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x202, 0x12) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x8, 0xc9}}}, 0x6) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x34325842, 0x7}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) kernel console output (not intermixed with test programs): 424, idProduct=7500, bcdDevice=69.ee [ 102.497420][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.507720][ T10] usb 4-1: Product: syz [ 102.580667][ T10] usb 4-1: Manufacturer: syz [ 102.590823][ T10] usb 4-1: SerialNumber: syz [ 102.606399][ T10] usb 4-1: config 0 descriptor?? [ 102.633656][ T10] smsc75xx v1.0.0 [ 102.642503][ T846] usb 2-1: Using ep0 maxpacket: 8 [ 102.660045][ T846] usb 2-1: descriptor type invalid, skip [ 102.666886][ T846] usb 2-1: descriptor type invalid, skip [ 102.672849][ T846] usb 2-1: descriptor type invalid, skip [ 102.690967][ T846] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 102.700961][ T846] usb 2-1: config 1 interface 0 has no altsetting 0 [ 102.712552][ T846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.721746][ T846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.729719][ T846] usb 2-1: Product: syz [ 102.750793][ T846] usb 2-1: Manufacturer: syz [ 102.760928][ T846] usb 2-1: SerialNumber: syz [ 102.786781][ T6339] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 102.991025][ T30] audit: type=1400 audit(1759859170.426:245): avc: denied { sys_module } for pid=6341 comm="syz.4.107" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.118231][ T846] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 103.647173][ T846] usb 2-1: USB disconnect, device number 3 [ 103.724590][ T846] usblp0: removed [ 103.771070][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.920678][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 103.932894][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 103.945867][ T5891] usb 5-1: can't read configurations, error -61 [ 104.002520][ T30] audit: type=1400 audit(1759859171.506:246): avc: denied { create } for pid=6356 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.092308][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.331691][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 104.346173][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.360950][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 104.374334][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 104.386591][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 104.397614][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 104.407858][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 104.420337][ T10] usb 4-1: USB disconnect, device number 4 [ 104.530901][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.545309][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 104.552943][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 104.560545][ T5891] usb 5-1: can't read configurations, error -61 [ 104.581066][ T5891] usb usb5-port1: attempt power cycle [ 104.709423][ T6366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.793784][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.963379][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.047058][ T5876] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 105.066510][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.095310][ T5876] usb 2-1: config 0 descriptor?? [ 105.321378][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.352013][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 105.360562][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 105.368174][ T5891] usb 5-1: can't read configurations, error -61 [ 105.391470][ T5944] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.561992][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 105.570476][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 105.577925][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 105.585173][ T5876] usbhid 2-1:0.0: can't add hid device: -32 [ 105.591206][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 105.682477][ T6374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.744343][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.883303][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 105.999286][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 106.014960][ T5891] usb 5-1: device descriptor read/all, error -71 [ 106.029009][ T5944] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 106.040316][ T5876] usb 2-1: USB disconnect, device number 4 [ 106.054705][ T5891] usb usb5-port1: unable to enumerate USB device [ 106.085109][ T5944] usb 4-1: config 0 has no interface number 0 [ 106.112931][ T5944] usb 4-1: config 0 interface 168 has no altsetting 0 [ 106.119907][ T5944] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 106.140917][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.154320][ T5944] usb 4-1: config 0 descriptor?? [ 106.207474][ T30] audit: type=1400 audit(1759859173.706:247): avc: denied { read } for pid=6379 comm="syz.4.118" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 106.232000][ T30] audit: type=1400 audit(1759859173.706:248): avc: denied { open } for pid=6379 comm="syz.4.118" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 106.259950][ T30] audit: type=1400 audit(1759859173.766:249): avc: denied { create } for pid=6379 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.288831][ T30] audit: type=1400 audit(1759859173.786:250): avc: denied { append } for pid=6379 comm="syz.4.118" name="renderD128" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.325018][ T6382] netlink: 56 bytes leftover after parsing attributes in process `syz.0.119'. [ 106.419227][ T30] audit: type=1400 audit(1759859173.876:251): avc: denied { create } for pid=6367 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.575855][ T30] audit: type=1400 audit(1759859174.076:252): avc: denied { ioctl } for pid=6367 comm="syz.3.114" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.656775][ T30] audit: type=1400 audit(1759859174.076:253): avc: denied { listen } for pid=6367 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.064019][ T6399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.247727][ T30] audit: type=1400 audit(1759859174.746:254): avc: denied { mounton } for pid=6390 comm="syz.2.123" path="/proc/79/task" dev="proc" ino=9944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 108.425788][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.488060][ T5891] usb 4-1: USB disconnect, device number 5 [ 108.521923][ T30] audit: type=1400 audit(1759859176.006:255): avc: denied { create } for pid=6409 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.644122][ T30] audit: type=1400 audit(1759859176.026:256): avc: denied { getopt } for pid=6409 comm="syz.0.128" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.063994][ T6422] warning: `syz.1.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.150699][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 109.286978][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 109.303842][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.315635][ T9] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.402114][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.423868][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.435510][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.450323][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 109.737353][ T9] usb 3-1: USB disconnect, device number 7 [ 109.813280][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.352395][ T6460] geneve2: entered promiscuous mode [ 111.369915][ T6460] geneve2: entered allmulticast mode [ 111.559832][ T6455] svc: failed to register nfsdv3 RPC service (errno 111). [ 112.081432][ T6455] svc: failed to register nfsaclv3 RPC service (errno 111). [ 112.319688][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 112.383001][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 112.398392][ T30] audit: type=1400 audit(1759859179.876:258): avc: denied { mounton } for pid=6468 comm="syz.4.144" path="/33/file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.648815][ T30] audit: type=1400 audit(1759859179.966:259): avc: denied { ioctl } for pid=6468 comm="syz.4.144" path="/dev/ptyqc" dev="devtmpfs" ino=130 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 112.971816][ T30] audit: type=1400 audit(1759859180.466:260): avc: denied { read write } for pid=6477 comm="syz.4.147" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.131748][ T30] audit: type=1400 audit(1759859180.466:261): avc: denied { open } for pid=6477 comm="syz.4.147" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.156202][ T30] audit: type=1400 audit(1759859180.496:262): avc: denied { node_bind } for pid=6474 comm="syz.1.146" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 113.206988][ T30] audit: type=1400 audit(1759859180.646:263): avc: denied { create } for pid=6474 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.234505][ T30] audit: type=1400 audit(1759859180.646:264): avc: denied { setopt } for pid=6474 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.269816][ T6482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.296905][ T30] audit: type=1400 audit(1759859180.796:265): avc: denied { watch } for pid=6477 comm="syz.4.147" path="/34/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.035639][ T30] audit: type=1400 audit(1759859180.796:266): avc: denied { watch_sb watch_reads } for pid=6477 comm="syz.4.147" path="/34/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.122147][ T30] audit: type=1400 audit(1759859181.616:267): avc: denied { read write } for pid=6497 comm="syz.1.150" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.217575][ T6500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.594243][ T6498] input: syz1 as /devices/virtual/input/input6 [ 115.255422][ T6523] FAULT_INJECTION: forcing a failure. [ 115.255422][ T6523] name failslab, interval 1, probability 0, space 0, times 1 [ 115.268290][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(full) [ 115.268306][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.268312][ T6523] Call Trace: [ 115.268316][ T6523] [ 115.268321][ T6523] dump_stack_lvl+0x116/0x1f0 [ 115.268337][ T6523] should_fail_ex+0x512/0x640 [ 115.268353][ T6523] should_failslab+0xc2/0x120 [ 115.268369][ T6523] kmem_cache_alloc_noprof+0x75/0x6e0 [ 115.268381][ T6523] ? __send_signal_locked+0x159/0x12c0 [ 115.268398][ T6523] ? __send_signal_locked+0x159/0x12c0 [ 115.268411][ T6523] __send_signal_locked+0x159/0x12c0 [ 115.268428][ T6523] send_sig+0xd7/0x170 [ 115.268445][ T6523] ? __pfx_send_sig+0x10/0x10 [ 115.268461][ T6523] ? __pfx_woken_wake_function+0x10/0x10 [ 115.268480][ T6523] sk_stream_error+0xb8/0x120 [ 115.268494][ T6523] tcp_sendmsg_locked+0xea7/0x42e0 [ 115.268507][ T6523] ? avc_has_perm+0x144/0x1f0 [ 115.268525][ T6523] ? __lock_acquire+0xb97/0x1ce0 [ 115.268542][ T6523] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 115.268554][ T6523] ? do_raw_spin_lock+0x12c/0x2b0 [ 115.268569][ T6523] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 115.268590][ T6523] ? __local_bh_enable_ip+0xa4/0x120 [ 115.268609][ T6523] tcp_sendmsg+0x2e/0x50 [ 115.268618][ T6523] ? __pfx_tcp_sendmsg+0x10/0x10 [ 115.268629][ T6523] inet6_sendmsg+0xb9/0x140 [ 115.268640][ T6523] ____sys_sendmsg+0x705/0xc70 [ 115.268651][ T6523] ? copy_msghdr_from_user+0x10a/0x160 [ 115.268665][ T6523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.268678][ T6523] ? __pfx__kstrtoull+0x10/0x10 [ 115.268691][ T6523] ___sys_sendmsg+0x134/0x1d0 [ 115.268706][ T6523] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.268727][ T6523] ? find_held_lock+0x2b/0x80 [ 115.268752][ T6523] __sys_sendmmsg+0x200/0x420 [ 115.268767][ T6523] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.268793][ T6523] ? __might_fault+0xe3/0x190 [ 115.268804][ T6523] ? __might_fault+0xe3/0x190 [ 115.268813][ T6523] ? __might_fault+0x13b/0x190 [ 115.268826][ T6523] __x64_sys_sendmmsg+0x9c/0x100 [ 115.268841][ T6523] do_syscall_64+0xcd/0x4e0 [ 115.268855][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.268866][ T6523] RIP: 0033:0x7f38a6b8eec9 [ 115.268875][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.268885][ T6523] RSP: 002b:00007f38a4dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 115.268895][ T6523] RAX: ffffffffffffffda RBX: 00007f38a6de6090 RCX: 00007f38a6b8eec9 [ 115.268902][ T6523] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000005 [ 115.268908][ T6523] RBP: 00007f38a4dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 115.268914][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.268920][ T6523] R13: 00007f38a6de6128 R14: 00007f38a6de6090 R15: 00007ffde7985e18 [ 115.268933][ T6523] [ 117.370683][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.397463][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 117.397477][ T30] audit: type=1400 audit(1759859184.896:277): avc: denied { bind } for pid=6545 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.763793][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 117.901000][ T10] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.918279][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 117.929325][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 117.952169][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.990796][ T10] usb 4-1: Product: syz [ 117.994961][ T10] usb 4-1: Manufacturer: syz [ 117.999526][ T10] usb 4-1: SerialNumber: syz [ 118.065315][ T6551] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.195244][ T6568] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 118.359119][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.403902][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.785713][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 118.794212][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 118.846830][ T6568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.862874][ T10] usb 4-1: USB disconnect, device number 6 [ 118.876908][ T6568] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 118.959258][ T6568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.966427][ T6568] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 119.118853][ T6568] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 119.319560][ T6588] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 119.350841][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 119.560353][ T846] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.627271][ T6598] netlink: 'syz.3.180': attribute type 21 has an invalid length. [ 119.635158][ T6598] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 119.642815][ T6598] netlink: 144 bytes leftover after parsing attributes in process `syz.3.180'. [ 119.673846][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.685088][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 119.696820][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.711485][ T9] usb 2-1: config 0 descriptor?? [ 119.718011][ T6580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.730692][ T846] usb 3-1: Using ep0 maxpacket: 16 [ 119.744004][ T846] usb 3-1: config index 0 descriptor too short (expected 2596, got 36) [ 119.753330][ T846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.764578][ T846] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 119.773811][ T846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.785647][ T846] usb 3-1: config 0 descriptor?? [ 120.137083][ T9] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 120.146058][ T9] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 120.154257][ T9] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 120.164766][ T9] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 120.174702][ T9] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 120.252710][ T846] usbhid 3-1:0.0: can't add hid device: -71 [ 120.258708][ T846] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 120.270707][ T846] usb 3-1: USB disconnect, device number 8 [ 120.321830][ T9] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 120.576347][ T9] usb 2-1: USB disconnect, device number 5 [ 120.749806][ T6611] fuse: Bad value for 'fd' [ 120.815304][ T6606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.020729][ T846] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.192902][ T6621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.064353][ T846] usb 4-1: Using ep0 maxpacket: 32 [ 122.140495][ T846] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 122.161020][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 122.170661][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 122.170686][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.170697][ T5829] Workqueue: hci0 hci_rx_work [ 122.170721][ T5829] Call Trace: [ 122.170726][ T5829] [ 122.170733][ T5829] dump_stack_lvl+0x16c/0x1f0 [ 122.170756][ T5829] sysfs_warn_dup+0x7f/0xa0 [ 122.170782][ T5829] sysfs_create_dir_ns+0x24b/0x2b0 [ 122.170807][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 122.170828][ T5829] ? find_held_lock+0x2b/0x80 [ 122.170856][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 122.170880][ T5829] kobject_add_internal+0x2c4/0x9b0 [ 122.170904][ T5829] kobject_add+0x16e/0x240 [ 122.170924][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 122.170948][ T5829] ? do_raw_spin_unlock+0x172/0x230 [ 122.170970][ T5829] ? kobject_put+0xab/0x5a0 [ 122.170997][ T5829] device_add+0x288/0x1aa0 [ 122.171016][ T5829] ? __pfx_dev_set_name+0x10/0x10 [ 122.171037][ T5829] ? __pfx_device_add+0x10/0x10 [ 122.171055][ T5829] ? mgmt_send_event_skb+0x2fb/0x460 [ 122.171080][ T5829] hci_conn_add_sysfs+0x17e/0x230 [ 122.171100][ T5829] le_conn_complete_evt+0x1260/0x2150 [ 122.171122][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 122.171137][ T5829] ? hci_event_packet+0x459/0x11c0 [ 122.171163][ T5829] hci_le_conn_complete_evt+0x23c/0x370 [ 122.171206][ T5829] hci_le_meta_evt+0x354/0x5e0 [ 122.171233][ T5829] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 122.171258][ T5829] hci_event_packet+0x685/0x11c0 [ 122.171277][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 122.171299][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 122.171319][ T5829] ? kcov_remote_start+0x3c9/0x6d0 [ 122.171340][ T5829] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.171362][ T5829] hci_rx_work+0x2c5/0x16b0 [ 122.171382][ T5829] ? rcu_is_watching+0x12/0xc0 [ 122.171410][ T5829] process_one_work+0x9cc/0x1b70 [ 122.171441][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 122.171469][ T5829] ? assign_work+0x1a0/0x250 [ 122.171490][ T5829] worker_thread+0x6c8/0xf10 [ 122.171522][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 122.171543][ T5829] kthread+0x3c5/0x780 [ 122.171563][ T5829] ? __pfx_kthread+0x10/0x10 [ 122.171584][ T5829] ? rcu_is_watching+0x12/0xc0 [ 122.171607][ T5829] ? __pfx_kthread+0x10/0x10 [ 122.171627][ T5829] ret_from_fork+0x56d/0x730 [ 122.171644][ T5829] ? __pfx_kthread+0x10/0x10 [ 122.171663][ T5829] ret_from_fork_asm+0x1a/0x30 [ 122.171696][ T5829] [ 122.171721][ T5829] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.224540][ T846] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 122.227008][ T5829] Bluetooth: hci0: failed to register connection device [ 122.255066][ T846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 122.449309][ T846] usb 4-1: config 1 has no interface number 0 [ 122.456286][ T846] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.467282][ T846] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 122.491551][ T846] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 122.501631][ T846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.517448][ T6606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.542628][ T846] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 122.566084][ T6628] tc_dump_action: action bad kind [ 123.041389][ T30] audit: type=1400 audit(1759859190.476:278): avc: denied { create } for pid=6626 comm="syz.2.193" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.339368][ T6634] netlink: 9 bytes leftover after parsing attributes in process `syz.1.192'. [ 123.339624][ T30] audit: type=1400 audit(1759859190.476:279): avc: denied { link } for pid=6626 comm="syz.2.193" name="#9" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.413531][ T6635] netlink: 5 bytes leftover after parsing attributes in process `syz.1.192'. [ 123.422354][ T846] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 123.449355][ T30] audit: type=1400 audit(1759859190.476:280): avc: denied { rename } for pid=6626 comm="syz.2.193" name="#a" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.764398][ T6634] gretap0: entered promiscuous mode [ 123.931817][ T6606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.085037][ T6606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.377705][ T30] audit: type=1400 audit(1759859191.876:281): avc: denied { read } for pid=6651 comm="syz.4.199" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.393079][ T1001] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.441820][ T10] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 124.512335][ T2938] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.522669][ T5830] Bluetooth: hci0: command tx timeout [ 124.560917][ T30] audit: type=1400 audit(1759859191.876:282): avc: denied { open } for pid=6651 comm="syz.4.199" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.588121][ T30] audit: type=1400 audit(1759859191.916:283): avc: denied { ioctl } for pid=6651 comm="syz.4.199" path="/dev/fb0" dev="devtmpfs" ino=628 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 124.637727][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.685662][ T9] usb 4-1: USB disconnect, device number 7 [ 124.694282][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 124.721242][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.670855][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 125.895695][ T6679] netlink: 96 bytes leftover after parsing attributes in process `syz.0.207'. [ 127.201059][ T30] audit: type=1400 audit(1759859194.656:284): avc: denied { write } for pid=6689 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.255934][ T48] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 127.281898][ T30] audit: type=1400 audit(1759859194.656:285): avc: denied { nlmsg_write } for pid=6689 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.418786][ T6705] tipc: Started in network mode [ 127.430795][ T6705] tipc: Node identity 1290b7c9a0ac, cluster identity 4711 [ 127.454028][ T6705] tipc: Enabled bearer , priority 0 [ 127.471286][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.507399][ T48] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 127.518526][ T6708] syzkaller0: entered promiscuous mode [ 127.537364][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.563213][ T48] usb 5-1: config 0 descriptor?? [ 127.571014][ T6708] syzkaller0: entered allmulticast mode [ 127.636796][ T6705] tipc: Resetting bearer [ 127.653062][ T6704] tipc: Resetting bearer [ 127.692099][ T6704] tipc: Disabling bearer [ 127.861557][ T48] usbhid 5-1:0.0: can't add hid device: -71 [ 127.883463][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 127.921895][ T48] usb 5-1: USB disconnect, device number 8 [ 128.149193][ T6725] misc userio: Invalid payload size [ 128.157591][ T30] audit: type=1400 audit(1759859195.636:286): avc: denied { create } for pid=6719 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.208291][ T6716] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 128.371810][ T30] audit: type=1400 audit(1759859195.646:287): avc: denied { ioctl } for pid=6719 comm="syz.4.219" path="socket:[11552]" dev="sockfs" ino=11552 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.470664][ T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.681050][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 128.697539][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.718710][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 128.745021][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 128.748612][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 128.940772][ T30] audit: type=1400 audit(1759859196.226:288): avc: denied { write } for pid=6726 comm="syz.1.220" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.999620][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 129.023612][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.106720][ T48] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 129.243053][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 129.691300][ T48] usb 4-1: Product: syz [ 129.695506][ T48] usb 4-1: Manufacturer: syz [ 129.700251][ T48] usb 4-1: SerialNumber: syz [ 129.713561][ T48] usb 4-1: config 0 descriptor?? [ 129.723932][ T30] audit: type=1400 audit(1759859197.226:289): avc: denied { ioctl } for pid=6715 comm="syz.3.218" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.954995][ T48] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 129.963640][ T48] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 129.986794][ T48] usb 4-1: USB disconnect, device number 8 [ 130.225394][ T6754] ======================================================= [ 130.225394][ T6754] WARNING: The mand mount option has been deprecated and [ 130.225394][ T6754] and is ignored by this kernel. Remove the mand [ 130.225394][ T6754] option from the mount to silence this warning. [ 130.225394][ T6754] ======================================================= [ 130.280383][ T30] audit: type=1400 audit(1759859197.726:290): avc: denied { remount } for pid=6750 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.629260][ T30] audit: type=1804 audit(1759859198.126:291): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.234" name="/newroot/32/file0" dev="tmpfs" ino=185 res=1 errno=0 [ 130.874613][ T6766] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 131.287561][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 131.317790][ T30] audit: type=1800 audit(1759859198.126:292): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.234" name="file0" dev="tmpfs" ino=185 res=0 errno=0 [ 131.342442][ T30] audit: type=1400 audit(1759859198.126:293): avc: denied { ioctl } for pid=6762 comm="syz.3.234" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11623 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.372958][ T30] audit: type=1400 audit(1759859198.386:294): avc: denied { read write } for pid=6758 comm="syz.1.232" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.398036][ T6763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6763 comm=syz.3.234 [ 131.398522][ T30] audit: type=1400 audit(1759859198.746:295): avc: denied { open } for pid=6758 comm="syz.1.232" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.568984][ T5891] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.613833][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 131.730695][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 131.737947][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.751844][ T5891] usb 2-1: config 57 has an invalid interface number: 229 but max is 0 [ 131.763909][ T5891] usb 2-1: config 57 has no interface number 0 [ 131.770096][ T5891] usb 2-1: config 57 interface 229 has no altsetting 0 [ 131.823894][ T5891] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 131.892667][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.912017][ T5891] usb 2-1: Product: syz [ 131.919148][ T6785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.001022][ T5891] usb 2-1: Manufacturer: syz [ 132.013265][ T5891] usb 2-1: SerialNumber: syz [ 132.027906][ T6795] netlink: 72 bytes leftover after parsing attributes in process `syz.4.243'. [ 132.230807][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.363961][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.370533][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.528594][ T6785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.593763][ T6785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.631220][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 132.639312][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.662674][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.690459][ T6785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.705421][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.838522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.950687][ T48] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.953279][ T9] usb 4-1: config 0 descriptor?? [ 133.080246][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 133.109110][ T48] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 133.121865][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.155853][ T1330] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.165228][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.192156][ T1330] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.208462][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.230180][ T1330] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.248851][ T1330] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.257514][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.266578][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.277704][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.285271][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.297117][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.324895][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.337449][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.356651][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.385759][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.387306][ T9] usb 4-1: USB disconnect, device number 9 [ 133.427548][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.447938][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.467494][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.476181][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.485838][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.497512][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.507662][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.521171][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.532268][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.539920][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.549060][ T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.612180][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.621020][ T5891] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 133.636658][ T5891] usb 2-1: USB disconnect, device number 6 [ 133.646216][ T48] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 133.705603][ T48] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 133.718202][ T48] usb 3-1: Product: syz [ 133.722665][ T48] usb 3-1: Manufacturer: syz [ 133.727325][ T48] usb 3-1: SerialNumber: syz [ 133.736582][ T48] usb 3-1: config 0 descriptor?? [ 133.752679][ T48] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 133.836479][ T6815] syz.1.247 uses obsolete (PF_INET,SOCK_PACKET) [ 133.975106][ T5891] usb 3-1: USB disconnect, device number 9 [ 134.060960][ T5891] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 134.450941][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 134.487556][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.505269][ T6831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.542863][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.552749][ T6831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.607162][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 134.607177][ T30] audit: type=1400 audit(1759859202.106:311): avc: denied { setopt } for pid=6834 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.740726][ T48] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 134.937662][ T48] usb 4-1: device descriptor read/64, error -71 [ 135.581032][ T48] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 135.720945][ T48] usb 4-1: device descriptor read/64, error -71 [ 135.831376][ T48] usb usb4-port1: attempt power cycle [ 135.930688][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.189131][ T30] audit: type=1400 audit(1759859203.586:312): avc: denied { setopt } for pid=6847 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.236660][ T48] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 136.252756][ T5944] usb 2-1: config 1 has an invalid interface number: 195 but max is 0 [ 136.263308][ T5944] usb 2-1: config 1 has no interface number 0 [ 136.269406][ T5944] usb 2-1: config 1 interface 195 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 136.291354][ T48] usb 4-1: device descriptor read/8, error -71 [ 136.310623][ T5944] usb 2-1: config 1 interface 195 has no altsetting 0 [ 136.329649][ T5944] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=e0.0a [ 136.758571][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.767334][ T5944] usb 2-1: Product: syz [ 136.771780][ T5944] usb 2-1: Manufacturer: syz [ 136.776370][ T5944] usb 2-1: SerialNumber: syz [ 137.781938][ T48] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 138.366772][ T48] usb 4-1: device descriptor read/8, error -71 [ 138.424353][ T6878] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 138.438052][ T6876] IPVS: stopping backup sync thread 6878 ... [ 138.504511][ T48] usb usb4-port1: unable to enumerate USB device [ 138.790725][ T5890] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.896010][ T5944] ttusbir 2-1:1.195: cannot find expected altsetting [ 139.128442][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.330761][ T5944] usb 2-1: USB disconnect, device number 7 [ 139.340692][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 139.347958][ T5890] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.464979][ T5890] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 139.503651][ T6889] blktrace: Concurrent blktraces are not allowed on loop6 [ 139.949173][ T5890] usb 5-1: string descriptor 0 read error: -71 [ 139.966787][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.085228][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.107888][ T5890] usb 5-1: can't set config #1, error -71 [ 140.122136][ T5890] usb 5-1: USB disconnect, device number 9 [ 140.422036][ T6900] syz2: rxe_newlink: already configured on vxcan1 [ 142.337973][ T30] audit: type=1400 audit(1759859209.836:313): avc: denied { create } for pid=6916 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.339905][ T30] audit: type=1400 audit(1759859209.836:314): avc: denied { setopt } for pid=6916 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.401143][ T6920] 9pnet_fd: Insufficient options for proto=fd [ 142.481455][ T5970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.208085][ T30] audit: type=1400 audit(1759859210.076:315): avc: denied { bind } for pid=6916 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.208224][ T30] audit: type=1400 audit(1759859210.076:316): avc: denied { write } for pid=6916 comm="syz.3.278" path="socket:[12577]" dev="sockfs" ino=12577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.308196][ T6919] tty tty2: ldisc open failed (-12), clearing slot 1 [ 143.573546][ T6922] kvm: pic: non byte read [ 143.578383][ T6922] kvm: pic: single mode not supported [ 143.578453][ T6922] kvm: pic: non byte read [ 143.585170][ T30] audit: type=1400 audit(1759859211.086:317): avc: denied { read } for pid=6931 comm="syz.4.282" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.592638][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.280'. [ 143.621144][ T6922] kvm: pic: non byte read [ 143.643204][ T6922] kvm: pic: non byte read [ 143.667120][ T6922] kvm: pic: non byte read [ 143.674422][ T6922] kvm: pic: non byte read [ 143.678862][ T6922] kvm: pic: non byte read [ 143.683339][ T30] audit: type=1400 audit(1759859211.116:318): avc: denied { open } for pid=6931 comm="syz.4.282" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.731006][ T5970] usb 5-1: device not accepting address 10, error -71 [ 143.741787][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 143.751170][ T6922] kvm: pic: non byte read [ 143.757558][ T6922] kvm: pic: non byte read [ 143.763126][ T6922] kvm: pic: non byte read [ 143.769683][ T6922] kvm: pic: single mode not supported [ 143.775047][ T6922] kvm: pic: single mode not supported [ 143.780849][ T6922] kvm: pic: level sensitive irq not supported [ 143.787870][ T6922] kvm: pic: single mode not supported [ 143.794075][ T6922] kvm: pic: level sensitive irq not supported [ 144.238674][ T30] audit: type=1400 audit(1759859211.406:319): avc: denied { firmware_load } for pid=6926 comm="syz.0.279" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 144.262182][ T6922] kvm: pic: single mode not supported [ 144.282773][ T6922] kvm: pic: single mode not supported [ 144.288366][ T6922] kvm: pic: single mode not supported [ 144.299738][ T30] audit: type=1400 audit(1759859211.796:320): avc: denied { create } for pid=6929 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.329348][ T6922] kvm: pic: single mode not supported [ 144.329364][ T6922] kvm: pic: level sensitive irq not supported [ 144.338284][ T6922] kvm: pic: single mode not supported [ 144.388462][ T6936] syz.0.279 (6936) used greatest stack depth: 16616 bytes left [ 144.460246][ T6947] netlink: 'syz.4.283': attribute type 2 has an invalid length. [ 144.467983][ T6947] netlink: 68 bytes leftover after parsing attributes in process `syz.4.283'. [ 144.488018][ T30] audit: type=1400 audit(1759859211.956:321): avc: denied { write } for pid=6941 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.947391][ T6959] blktrace: Concurrent blktraces are not allowed on loop6 [ 145.109602][ T30] audit: type=1400 audit(1759859212.606:322): avc: denied { remount } for pid=6960 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 145.947183][ T6973] syz2: rxe_newlink: already configured on vxcan1 [ 146.576950][ T6978] sd 0:0:1:0: device reset [ 146.640889][ T6981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.012269][ T6988] netlink: 'syz.3.296': attribute type 12 has an invalid length. [ 147.530206][ T7000] tipc: Started in network mode [ 147.548269][ T7000] tipc: Node identity , cluster identity 4711 [ 147.578239][ T7000] tipc: Failed to obtain node identity [ 147.597553][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 147.821275][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 147.821290][ T30] audit: type=1400 audit(1759859215.326:326): avc: denied { ioctl } for pid=7002 comm="syz.3.301" path="socket:[12807]" dev="sockfs" ino=12807 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.725344][ T7020] MINIX-fs: unable to read superblock [ 150.961004][ T5944] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 151.160678][ T5943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.182555][ T5944] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.193553][ T5944] usb 4-1: can't read configurations, error -61 [ 151.224944][ T7055] syzkaller1: entered promiscuous mode [ 151.310651][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 151.318357][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.332418][ T5944] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 151.347407][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.375750][ T5943] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.404910][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.429724][ T5943] usb 2-1: config 0 descriptor?? [ 151.452606][ T5943] hub 2-1:0.0: USB hub found [ 151.513381][ T5944] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.521942][ T5944] usb 4-1: can't read configurations, error -61 [ 151.552763][ T5944] usb usb4-port1: attempt power cycle [ 151.572910][ T30] audit: type=1400 audit(1759859219.046:327): avc: denied { watch watch_reads } for pid=7056 comm="syz.4.316" path="/69" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 151.682363][ T5943] hub 2-1:0.0: 1 port detected [ 152.069152][ T7065] netlink: 92 bytes leftover after parsing attributes in process `syz.2.318'. [ 152.379395][ T5944] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 152.432958][ T5944] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 152.488024][ T5944] usb 4-1: can't read configurations, error -61 [ 152.569309][ T7058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.650738][ T5944] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 152.783320][ T5943] hub 2-1:0.0: activate --> -90 [ 152.803560][ T5944] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 152.814161][ T5944] usb 4-1: can't read configurations, error -61 [ 152.822440][ T5944] usb usb4-port1: unable to enumerate USB device [ 152.995725][ T5943] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 153.044952][ T7058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.320826][ T846] usb 2-1: USB disconnect, device number 8 [ 153.374390][ T7058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.009504][ T7058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.713920][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.728545][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.756392][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.795365][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.150864][ T5944] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 155.346689][ T5830] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 155.381026][ T5970] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.388876][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 155.402530][ T7102] Bluetooth: MGMT ver 1.23 [ 155.456246][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.485212][ T5944] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 155.513620][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.548254][ T5944] usb 4-1: config 0 descriptor?? [ 155.562328][ T30] audit: type=1400 audit(1759859223.056:328): avc: denied { create } for pid=7106 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 155.621925][ T5970] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 155.653817][ T30] audit: type=1400 audit(1759859223.156:329): avc: denied { write } for pid=7106 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 155.662338][ T7114] autofs: Unknown parameter '' [ 155.690713][ T5970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 155.702635][ T5970] usb 2-1: can't read configurations, error -61 [ 155.840862][ T5970] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 156.006414][ T5970] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 156.055796][ T5944] kye 0003:0458:5011.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 156.074638][ T5970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 156.084897][ T5970] usb 2-1: can't read configurations, error -61 [ 156.100315][ T5944] kye 0003:0458:5011.0004: hidraw0: USB HID v0.0b Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 156.112392][ T5970] usb usb2-port1: attempt power cycle [ 156.118962][ T5944] kye 0003:0458:5011.0004: tablet-enabling feature report not found [ 156.156712][ T5944] kye 0003:0458:5011.0004: tablet enabling failed [ 156.264261][ T846] usb 4-1: USB disconnect, device number 18 [ 156.450849][ T5970] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.651920][ T5970] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 156.837644][ T7152] MINIX-fs: unable to read superblock [ 157.319112][ T5970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 157.357266][ T5970] usb 2-1: can't read configurations, error -61 [ 157.710984][ T5970] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.038742][ T5970] usb 2-1: too many configurations: 176, using maximum allowed: 8 [ 158.053173][ T5970] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 158.073707][ T5970] usb 2-1: can't read configurations, error -71 [ 158.184285][ T30] audit: type=1400 audit(1759859225.606:330): avc: denied { map } for pid=7166 comm="syz.0.337" path="socket:[12996]" dev="sockfs" ino=12996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 158.264920][ T5970] usb usb2-port1: unable to enumerate USB device [ 158.614194][ T7181] netlink: 'syz.0.341': attribute type 12 has an invalid length. [ 159.891544][ T5970] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.987016][ T7200] MINIX-fs: unable to read superblock [ 160.517588][ T5970] usb 2-1: Using ep0 maxpacket: 16 [ 160.550410][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.686344][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.697023][ T5970] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 160.706272][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.721859][ T5970] usb 2-1: config 0 descriptor?? [ 160.897751][ T30] audit: type=1400 audit(1759859228.396:331): avc: denied { create } for pid=7215 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.921195][ T30] audit: type=1400 audit(1759859228.416:332): avc: denied { connect } for pid=7215 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.093147][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'. [ 161.102566][ T7222] 8021q: VLANs not supported on ip_vti0 [ 161.189692][ T7224] netlink: 'syz.2.355': attribute type 12 has an invalid length. [ 161.213024][ T5970] usbhid 2-1:0.0: can't add hid device: -71 [ 161.221691][ T5970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.252110][ T5970] usb 2-1: USB disconnect, device number 13 [ 161.491095][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.357'. [ 163.518009][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 164.868303][ T30] audit: type=1400 audit(1759859231.906:333): avc: denied { connect } for pid=7271 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 164.887865][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.913665][ T30] audit: type=1400 audit(1759859231.926:334): avc: denied { listen } for pid=7271 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 164.937408][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.662102][ T7280] netlink: 72 bytes leftover after parsing attributes in process `syz.3.370'. [ 165.705902][ T30] audit: type=1400 audit(1759859233.126:335): avc: denied { ioctl } for pid=7281 comm="syz.1.371" path="socket:[14044]" dev="sockfs" ino=14044 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.926262][ T30] audit: type=1400 audit(1759859233.206:336): avc: denied { bind } for pid=7286 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.984431][ T30] audit: type=1400 audit(1759859233.266:337): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 166.004334][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.217804][ T30] audit: type=1400 audit(1759859233.716:338): avc: denied { setopt } for pid=7297 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.291879][ T5877] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.306082][ T30] audit: type=1400 audit(1759859233.806:339): avc: denied { create } for pid=7297 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.399025][ T6902] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.441234][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 166.448021][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.467380][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.497632][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.508159][ T5877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.524869][ T6902] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.536043][ T5877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.549868][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.675244][ T6902] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.928163][ T5877] usb 3-1: usb_control_msg returned -32 [ 166.934842][ T5877] usbtmc 3-1:16.0: can't read capabilities [ 167.033120][ T6902] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.068158][ T7309] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=7309 comm=syz.3.380 [ 167.121919][ T30] audit: type=1400 audit(1759859234.626:340): avc: denied { getopt } for pid=7314 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.246506][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.279934][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 167.308158][ T7318] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.337578][ T30] audit: type=1400 audit(1759859234.836:341): avc: denied { search } for pid=5492 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.496124][ T6902] bridge_slave_1: left allmulticast mode [ 167.500894][ T30] audit: type=1400 audit(1759859234.836:342): avc: denied { search } for pid=5492 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.559818][ T6902] bridge_slave_1: left promiscuous mode [ 167.630483][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.632590][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.645205][ T30] audit: type=1400 audit(1759859234.836:343): avc: denied { search } for pid=5492 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.645250][ T30] audit: type=1400 audit(1759859234.836:344): avc: denied { read } for pid=5492 comm="dhcpcd" name="n100" dev="tmpfs" ino=3324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.682213][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.697848][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.705806][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.714749][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.724306][ T6902] bridge_slave_0: left allmulticast mode [ 167.739495][ T30] audit: type=1400 audit(1759859234.836:345): avc: denied { open } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.768270][ T6902] bridge_slave_0: left promiscuous mode [ 167.800260][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.851759][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.387'. [ 168.358982][ T6902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.382790][ T6902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.407617][ T6902] bond0 (unregistering): Released all slaves [ 168.478153][ T7326] vxcan1 speed is unknown, defaulting to 1000 [ 168.561131][ T6902] tipc: Left network mode [ 169.236064][ T846] usb 3-1: USB disconnect, device number 10 [ 169.680433][ T7326] lo speed is unknown, defaulting to 1000 [ 169.697506][ T7367] bridge0: port 1(bridge_slave_0) entered listening state [ 169.732788][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.784684][ T7372] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.800840][ T5829] Bluetooth: hci2: command tx timeout [ 170.078242][ T7372] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.090702][ T846] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 170.262947][ T846] usb 4-1: Using ep0 maxpacket: 32 [ 170.307514][ T846] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 170.350466][ T846] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 170.387137][ T846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 170.397987][ T7372] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.410858][ T846] usb 4-1: config 1 has no interface number 0 [ 170.427049][ T846] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.450236][ T846] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 170.652811][ T846] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 170.683698][ T846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.935114][ T846] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 171.181412][ T846] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 171.305184][ T6902] hsr_slave_0: left promiscuous mode [ 171.341446][ T6902] hsr_slave_1: left promiscuous mode [ 171.418289][ T6902] veth1_macvtap: left promiscuous mode [ 171.450863][ T6902] veth0_macvtap: left promiscuous mode [ 171.490730][ T6902] veth1_vlan: left promiscuous mode [ 171.549153][ T6902] veth0_vlan: left promiscuous mode [ 171.891651][ T5829] Bluetooth: hci2: command tx timeout [ 172.200696][ T5877] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.208516][ T846] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 172.353744][ T5877] usb 5-1: device descriptor read/64, error -71 [ 172.397910][ T6902] team0 (unregistering): Port device team_slave_1 removed [ 172.427273][ T6902] team0 (unregistering): Port device team_slave_0 removed [ 172.611890][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.698648][ T7372] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.750903][ T5877] usb 5-1: device descriptor read/64, error -71 [ 172.881230][ T5877] usb usb5-port1: attempt power cycle [ 173.059364][ T6376] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.149807][ T6376] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.179472][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 173.204326][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 173.204343][ T30] audit: type=1400 audit(1759859240.706:357): avc: denied { connect } for pid=7435 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.298918][ T7436] bond1 (unregistering): Released all slaves [ 173.335119][ T6376] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.350741][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 173.404314][ T5877] usb 5-1: device descriptor read/8, error -71 [ 173.455227][ T6904] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.656167][ T5943] usb 4-1: USB disconnect, device number 19 [ 173.691138][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.782344][ T5877] usb 5-1: device descriptor read/8, error -71 [ 173.802562][ T5943] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 173.850350][ T7458] comedi comedi4: bad chanlist[0]=0x00000101 chan=257 range length=2 [ 173.905771][ T5877] usb usb5-port1: unable to enumerate USB device [ 173.961236][ T5829] Bluetooth: hci2: command tx timeout [ 174.007660][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.039554][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.054998][ T7326] bridge_slave_0: entered allmulticast mode [ 174.064330][ T7326] bridge_slave_0: entered promiscuous mode [ 174.073524][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.080691][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.087968][ T7326] bridge_slave_1: entered allmulticast mode [ 174.095636][ T7326] bridge_slave_1: entered promiscuous mode [ 174.165068][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.344723][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.363164][ T7473] MINIX-fs: unable to read superblock [ 174.618547][ T7326] team0: Port device team_slave_0 added [ 174.627450][ T7326] team0: Port device team_slave_1 added [ 174.695351][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.709795][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.739244][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.756347][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.787037][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.853732][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.057976][ T7326] hsr_slave_0: entered promiscuous mode [ 175.087475][ T7326] hsr_slave_1: entered promiscuous mode [ 175.216962][ T7503] netlink: 'syz.2.418': attribute type 8 has an invalid length. [ 175.328997][ T7506] openvswitch: netlink: Missing valid actions attribute. [ 175.350218][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.364322][ T7507] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 175.373406][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 176.041002][ T5829] Bluetooth: hci2: command tx timeout [ 176.102892][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 176.550025][ T30] audit: type=1800 audit(1759859244.046:358): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.422" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 176.579943][ T7522] bond1: entered promiscuous mode [ 176.629723][ T7523] binder: 7521:7523 ioctl 4018620d 0 returned -22 [ 176.877966][ T7326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.962891][ T7326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.018566][ T7326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.176809][ T7539] hub 8-0:1.0: USB hub found [ 177.191752][ T7539] hub 8-0:1.0: 1 port detected [ 177.325854][ T7326] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.445238][ T7326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.497917][ T7326] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.585398][ T7541] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.685058][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.692220][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.841595][ T7541] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.011389][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.018515][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.177004][ T7541] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.402566][ T7541] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.560982][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 178.659352][ T6376] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.704929][ T6376] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.724324][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 178.753244][ T6902] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.775080][ T24] usb 3-1: config 192 has an invalid interface number: 197 but max is 2 [ 178.784442][ T6902] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.790869][ T24] usb 3-1: config 192 contains an unexpected descriptor of type 0x2, skipping [ 178.817144][ T24] usb 3-1: config 192 has an invalid interface number: 79 but max is 2 [ 178.828791][ T24] usb 3-1: config 192 has an invalid descriptor of length 241, skipping remainder of the config [ 178.839619][ T24] usb 3-1: config 192 has 2 interfaces, different from the descriptor's value: 3 [ 178.859703][ T24] usb 3-1: config 192 has no interface number 0 [ 178.865396][ T7326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.866776][ T24] usb 3-1: config 192 has no interface number 1 [ 178.881175][ T24] usb 3-1: config 192 interface 197 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 178.893961][ T24] usb 3-1: config 192 interface 197 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 178.906163][ T24] usb 3-1: config 192 interface 197 altsetting 4 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 178.918311][ T24] usb 3-1: config 192 interface 197 altsetting 4 endpoint 0xC has an invalid bInterval 0, changing to 4 [ 178.933101][ T24] usb 3-1: config 192 interface 197 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 178.950725][ T24] usb 3-1: config 192 interface 197 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 178.970936][ T24] usb 3-1: config 192 interface 79 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 178.991046][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 178.998440][ T24] usb 3-1: config 192 interface 197 has no altsetting 0 [ 179.008637][ T24] usb 3-1: config 192 interface 79 has no altsetting 0 [ 179.030361][ T24] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=1c.fa [ 179.039923][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.059824][ T24] usb 3-1: Product: І [ 179.064333][ T24] usb 3-1: Manufacturer: 䂛ꏝ雝ⱄ㎬ᐶ鹔ઢ舀쭾沰팘ﳜ讍潇Ố႟峇⸿ᇄ鏓﷚㡏썖磾୺ﻈ먼덛＞ᅕ䯃簀ᗏ斑㊱琣셍㖳W㤑쿬悧ㇼ衜统ↈ盐擤큨좌癚긃㐣备롦绘楕젠阍㊿ﭷꄙ媨䭑么㥄ⱉ쨓ގ㼽ං㹡臡皰켽 [ 179.118395][ T24] usb 3-1: SerialNumber: G [ 179.143740][ T7553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.190664][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 179.209596][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 179.229231][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.247550][ T9] usb 5-1: Product: syz [ 179.256058][ T9] usb 5-1: Manufacturer: syz [ 179.271172][ T7326] veth0_vlan: entered promiscuous mode [ 179.273261][ T9] usb 5-1: SerialNumber: syz [ 179.285768][ T7326] veth1_vlan: entered promiscuous mode [ 179.349241][ T7326] veth0_macvtap: entered promiscuous mode [ 179.378560][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.389104][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.399243][ T30] audit: type=1400 audit(1759859246.876:359): avc: denied { setattr } for pid=7552 comm="syz.2.427" name="NETLINK" dev="sockfs" ino=15872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.439699][ T7326] veth1_macvtap: entered promiscuous mode [ 179.470999][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.498733][ T9] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 179.508250][ T7326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.543522][ T1001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.553213][ T1001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.559616][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 179.581852][ T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 179.621712][ T1001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.653177][ T1001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.708669][ T10] usb 5-1: USB disconnect, device number 16 [ 179.725206][ T7572] netlink: 'syz.0.430': attribute type 12 has an invalid length. [ 179.740282][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 179.774816][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.790014][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.813840][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 179.839169][ T10] visor 5-1:1.0: device disconnected [ 179.854748][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.864928][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.924296][ T30] audit: type=1400 audit(1759859247.426:360): avc: denied { mounton } for pid=7326 comm="syz-executor" path="/root/syzkaller.4k85TB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 179.994816][ T24] usbhid 3-1:192.197: couldn't find an input interrupt endpoint [ 180.024976][ T30] audit: type=1400 audit(1759859247.456:361): avc: denied { mount } for pid=7326 comm="syz-executor" name="/" dev="gadgetfs" ino=7802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 180.102009][ T24] usb 3-1: USB disconnect, device number 11 [ 180.811354][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 180.894598][ T7581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.918364][ T7585] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 181.049586][ T6904] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.103867][ T7589] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 181.170943][ T1001] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.238816][ T7593] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 181.337754][ T7598] netlink: 'syz.5.438': attribute type 32 has an invalid length. [ 181.352824][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.438'. [ 181.509636][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 181.529920][ T7598] bond1: Setting coupled_control to off (0) [ 181.540386][ T7602] netlink: 'syz.5.438': attribute type 13 has an invalid length. [ 181.548245][ T7602] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.438'. [ 181.863576][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 181.929357][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 181.985518][ T10] usb 3-1: config 0 has no interface number 0 [ 182.059761][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 182.152303][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 182.274063][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.282783][ T10] usb 3-1: Product: syz [ 182.286955][ T10] usb 3-1: Manufacturer: syz [ 182.291834][ T10] usb 3-1: SerialNumber: syz [ 182.298967][ T10] usb 3-1: config 0 descriptor?? [ 182.306758][ T10] smsc75xx v1.0.0 [ 182.502005][ T7612] loop2: detected capacity change from 0 to 7 [ 182.537732][ T7612] Dev loop2: unable to read RDB block 7 [ 182.584220][ T7612] loop2: unable to read partition table [ 182.841013][ T7612] loop2: partition table beyond EOD, truncated [ 182.937411][ T7612] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 183.378823][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 183.417791][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 183.711527][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 183.747308][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 183.760647][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 183.771587][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 183.786087][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 183.804427][ T10] usb 3-1: USB disconnect, device number 12 [ 184.109741][ T30] audit: type=1400 audit(1759859251.606:362): avc: denied { create } for pid=7629 comm="syz.5.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 184.782540][ T30] audit: type=1400 audit(1759859251.866:363): avc: denied { write } for pid=7629 comm="syz.5.446" path="socket:[16613]" dev="sockfs" ino=16613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 185.187277][ T7646] blktrace: Concurrent blktraces are not allowed on loop6 [ 185.641115][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 185.711616][ T30] audit: type=1400 audit(1759859253.216:364): avc: denied { connect } for pid=7649 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.736399][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 185.738839][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 185.742545][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 185.748945][ T30] audit: type=1400 audit(1759859253.236:365): avc: denied { write } for pid=7649 comm="syz.5.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.936334][ T30] audit: type=1400 audit(1759859253.436:366): avc: denied { append } for pid=7651 comm="syz.4.452" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.044307][ T30] audit: type=1400 audit(1759859253.476:367): avc: denied { ioctl } for pid=7651 comm="syz.4.452" path="socket:[16259]" dev="sockfs" ino=16259 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.403869][ T30] audit: type=1400 audit(1759859253.876:368): avc: denied { map } for pid=7653 comm="syz.5.453" path="socket:[16657]" dev="sockfs" ino=16657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.454498][ T30] audit: type=1400 audit(1759859253.876:369): avc: denied { read } for pid=7653 comm="syz.5.453" path="socket:[16657]" dev="sockfs" ino=16657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.630931][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 187.080801][ T10] usb 6-1: Invalid ep0 maxpacket: 9 [ 187.210756][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 187.390850][ T10] usb 6-1: Invalid ep0 maxpacket: 9 [ 187.492643][ T10] usb usb6-port1: attempt power cycle [ 187.850726][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 187.871699][ T10] usb 6-1: Invalid ep0 maxpacket: 9 [ 188.198030][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 188.386372][ T10] usb 6-1: Invalid ep0 maxpacket: 9 [ 188.426925][ T10] usb usb6-port1: unable to enumerate USB device [ 188.962502][ T7718] blktrace: Concurrent blktraces are not allowed on loop6 [ 189.620314][ T7722] syz2: rxe_newlink: already configured on vxcan1 [ 190.712720][ T30] audit: type=1400 audit(1759859258.196:370): avc: denied { create } for pid=7708 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.737131][ T7719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.465'. [ 190.780517][ T30] audit: type=1400 audit(1759859258.206:371): avc: denied { setopt } for pid=7708 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.827543][ T7730] netlink: 56 bytes leftover after parsing attributes in process `syz.3.468'. [ 191.380749][ T48] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 191.550651][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 191.604725][ T48] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 191.746553][ T30] audit: type=1400 audit(1759859259.216:372): avc: denied { connect } for pid=7747 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 191.980083][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.013081][ T48] usb 4-1: Product: syz [ 192.070865][ T48] usb 4-1: Manufacturer: syz [ 192.075490][ T48] usb 4-1: SerialNumber: syz [ 192.356953][ T48] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 192.376091][ T48] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 192.385973][ T48] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 192.400174][ T48] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 192.426299][ T48] usb 4-1: USB disconnect, device number 20 [ 192.458746][ T48] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 192.538415][ T48] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 192.572866][ T48] visor 4-1:1.0: device disconnected [ 192.700788][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 192.804310][ T30] audit: type=1400 audit(1759859260.286:373): avc: denied { name_bind } for pid=7772 comm="syz.5.478" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 193.366861][ T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.440681][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 193.451358][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 193.459464][ T10] usb 5-1: config 0 has no interface number 0 [ 193.493868][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.515080][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 193.552245][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.570780][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.570786][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 193.570805][ T10] usb 5-1: Product: syz [ 193.604478][ T48] usb 6-1: config 1 has an invalid interface number: 7 but max is 2 [ 193.625869][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.663549][ T48] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 193.671812][ T10] usb 5-1: Manufacturer: syz [ 193.677119][ T10] usb 5-1: SerialNumber: syz [ 193.784592][ T48] usb 6-1: config 1 has no interface number 3 [ 193.795667][ T10] usb 5-1: config 0 descriptor?? [ 193.802732][ T48] usb 6-1: config 1 interface 7 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.802776][ T48] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.802800][ T48] usb 6-1: config 1 interface 7 has no altsetting 0 [ 193.817020][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271853][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.282618][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.297913][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.308648][ T48] usb 6-1: Product: syz [ 194.313204][ T48] usb 6-1: Manufacturer: syz [ 194.317859][ T48] usb 6-1: SerialNumber: syz [ 194.408834][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 194.456477][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 194.638162][ T48] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 194.676820][ T48] usb 6-1: failed to enable PITCH for EP 0x82 [ 194.683051][ T30] audit: type=1400 audit(1759859262.166:374): avc: denied { append } for pid=7784 comm="syz.3.481" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.860648][ T48] usb 6-1: USB disconnect, device number 6 [ 194.873310][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 194.892002][ T5944] kernel read not supported for file /dsp (pid: 5944 comm: kworker/1:6) [ 194.898498][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input10 [ 197.144311][ T5877] usb 5-1: USB disconnect, device number 17 [ 197.606488][ T5877] appletouch 5-1:0.85: input: appletouch disconnected [ 199.241785][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.498'. [ 199.590970][ T7865] binder: BINDER_SET_CONTEXT_MGR already set [ 200.052892][ T7865] binder: 7856:7865 ioctl 4018620d 200000000040 returned -16 [ 200.370763][ T5970] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 200.679069][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 200.721283][ T5970] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.729757][ T5970] usb 5-1: config 0 has no interface number 0 [ 200.740729][ T5970] usb 5-1: config 0 interface 184 has no altsetting 0 [ 200.766032][ T7874] vxcan1 speed is unknown, defaulting to 1000 [ 200.874765][ T7874] lo speed is unknown, defaulting to 1000 [ 201.021332][ T5970] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 201.030395][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.038488][ T5970] usb 5-1: Product: syz [ 201.048525][ T5970] usb 5-1: Manufacturer: syz [ 201.067499][ T5970] usb 5-1: SerialNumber: syz [ 201.116261][ T30] audit: type=1400 audit(1759859268.616:375): avc: denied { read } for pid=7883 comm="syz.2.507" path="socket:[17190]" dev="sockfs" ino=17190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 201.143781][ T5970] usb 5-1: config 0 descriptor?? [ 201.169211][ T5970] smsc75xx v1.0.0 [ 202.924654][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 202.949276][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 203.162310][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 203.289764][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 203.373037][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 203.400205][ T5970] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 203.425402][ T5970] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 203.562956][ T5970] usb 5-1: USB disconnect, device number 18 [ 204.394650][ T30] audit: type=1400 audit(1759859271.896:376): avc: denied { ioctl } for pid=7926 comm="syz.4.518" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.330812][ T48] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 205.382502][ T30] audit: type=1400 audit(1759859272.886:377): avc: denied { read } for pid=7934 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.441875][ T7936] vxcan1 speed is unknown, defaulting to 1000 [ 205.518761][ T48] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 205.660638][ T48] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 205.861373][ T48] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 205.910743][ T48] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 205.920469][ T48] usb 6-1: config 0 interface 0 has no altsetting 0 [ 205.936337][ T48] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 205.965764][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.264053][ T48] usb 6-1: Product: syz [ 206.855598][ T7944] openvswitch: netlink: Missing key (keys=40, expected=100) [ 206.863191][ T48] usb 6-1: Manufacturer: syz [ 206.887251][ T48] usb 6-1: SerialNumber: syz [ 206.912283][ T7939] vxcan1 speed is unknown, defaulting to 1000 [ 206.930851][ T7936] lo speed is unknown, defaulting to 1000 [ 206.941991][ T48] usb 6-1: config 0 descriptor?? [ 206.958200][ T7949] veth0: entered promiscuous mode [ 206.981101][ T7948] veth0: left promiscuous mode [ 207.092201][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 207.232772][ T7939] lo speed is unknown, defaulting to 1000 [ 207.358698][ T24] usb 6-1: USB disconnect, device number 7 [ 207.632118][ T7962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7962 comm=syz.3.529 [ 210.052159][ T7977] vxcan1 speed is unknown, defaulting to 1000 [ 210.132127][ T7977] lo speed is unknown, defaulting to 1000 [ 210.172044][ T7985] netlink: 'syz.4.536': attribute type 12 has an invalid length. [ 212.275763][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.326663][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.508091][ T5944] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.792234][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 212.812552][ T5944] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 212.821831][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.858171][ T5944] usb 3-1: config 0 descriptor?? [ 213.131922][ T5944] gspca_main: sq930x-2.14.0 probing 041e:403c [ 214.262473][ T5944] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 214.275405][ T5944] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 215.510711][ T30] audit: type=1400 audit(1759859282.996:378): avc: denied { create } for pid=8056 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 215.546178][ T48] usb 3-1: USB disconnect, device number 13 [ 215.641491][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.5.565'. [ 215.752591][ T846] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 215.767670][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.566'. [ 216.008459][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.015923][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.029142][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.038036][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.082013][ T846] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 216.090214][ T846] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.120212][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.135101][ T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.175936][ T846] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.201010][ T846] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.210184][ T846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.220444][ T8074] fuse: Bad value for 'user_id' [ 216.226864][ T8074] fuse: Bad value for 'user_id' [ 216.241221][ T846] usb 5-1: config 0 descriptor?? [ 216.259456][ T8059] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.589495][ T8079] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.887971][ T846] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 216.939374][ T846] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 217.059563][ T8079] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.193250][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.214694][ T5877] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 217.258552][ T846] usb 5-1: USB disconnect, device number 19 [ 217.288249][ T8097] capability: warning: `syz.0.574' uses deprecated v2 capabilities in a way that may be insecure [ 217.306847][ T8079] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.371389][ T30] audit: type=1326 audit(1759859284.876:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.2.575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38a6b8eec9 code=0x0 [ 217.395019][ T5944] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 217.410832][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 217.419100][ T5877] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 217.430648][ T5877] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 217.439375][ T5877] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 217.449065][ T5877] usb 6-1: config 1 has no interface number 0 [ 217.455530][ T5877] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.469332][ T5877] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 217.502963][ T5877] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 217.520609][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.551477][ T8079] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.568333][ T5877] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 217.601502][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 217.608717][ T5944] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 217.617446][ T5944] usb 4-1: config 0 has no interface number 0 [ 217.623972][ T5944] usb 4-1: too many endpoints for config 0 interface 27 altsetting 7: 200, using maximum allowed: 30 [ 217.783944][ T5944] usb 4-1: config 0 interface 27 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 200 [ 217.798161][ T5944] usb 4-1: config 0 interface 27 has no altsetting 0 [ 217.804977][ T5944] usb 4-1: New USB device found, idVendor=dfee, idProduct=0001, bcdDevice= 0.00 [ 217.814316][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.827146][ T5944] usb 4-1: config 0 descriptor?? [ 217.838881][ T5877] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 217.894703][ T6376] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.914882][ T6376] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.001410][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.034313][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.184146][ T5944] usb 4-1: string descriptor 0 read error: -71 [ 218.201402][ T5944] usb 4-1: USB disconnect, device number 21 [ 218.493294][ T5877] usb 6-1: USB disconnect, device number 8 [ 218.499828][ T5877] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 219.179175][ T30] audit: type=1400 audit(1759859286.676:380): avc: denied { getopt } for pid=8123 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.219448][ T8124] sp0: Synchronizing with TNC [ 219.509361][ T8124] [U] ` [ 220.624242][ T8153] netlink: 'syz.2.586': attribute type 12 has an invalid length. [ 221.101592][ T8161] netlink: 'syz.5.589': attribute type 12 has an invalid length. [ 222.802902][ T8173] binder: 8170:8173 ioctl 4018620d 0 returned -22 [ 222.810372][ T30] audit: type=1800 audit(1759859290.306:381): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.594" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 223.425007][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 224.987505][ T8190] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 224.995270][ T8190] netlink: 224 bytes leftover after parsing attributes in process `syz.5.597'. [ 225.710717][ T5944] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 225.874223][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.901149][ T5944] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 225.914784][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.957780][ T5944] usb 6-1: config 0 descriptor?? [ 226.122975][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 226.402491][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 226.428412][ T9] usb 5-1: config 0 has no interface number 0 [ 226.438087][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 226.448514][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 226.460426][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.562915][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 226.733255][ T9] usb 5-1: Product: syz [ 226.738282][ T9] usb 5-1: Manufacturer: syz [ 226.743706][ T9] usb 5-1: SerialNumber: syz [ 226.851959][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 226.862366][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 226.872849][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 226.884312][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 226.905182][ T30] audit: type=1400 audit(1759859294.196:382): avc: denied { write } for pid=8183 comm="syz.5.597" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.957695][ T9] usb 5-1: config 0 descriptor?? [ 227.002281][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 227.011337][ T5944] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 227.028432][ T5944] redragon 0003:0C45:760B.0006: hidraw0: USB HID vff.fc Device [HID 0c45:760b] on usb-dummy_hcd.5-1/input0 [ 227.307637][ T8216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 227.370493][ T8221] netlink: 'syz.3.605': attribute type 4 has an invalid length. [ 227.665280][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.807362][ T48] usb 6-1: USB disconnect, device number 9 [ 227.829278][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.843688][ T8222] netlink: 'syz.2.607': attribute type 12 has an invalid length. [ 228.457054][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 228.480877][ T9] usb 5-1: USB disconnect, device number 20 [ 229.354576][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 229.694949][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 230.000596][ T8260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.008174][ T8260] IPv6: NLM_F_CREATE should be set when creating new route [ 230.040626][ T30] audit: type=1400 audit(1759859297.276:383): avc: denied { create } for pid=8254 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.228813][ T8271] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 230.250077][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.257214][ T8271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.272763][ T8271] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 230.290357][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 230.301050][ T8271] bridge_slave_1: left allmulticast mode [ 230.307839][ T8271] bridge_slave_1: left promiscuous mode [ 230.315536][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.324187][ T8271] bridge_slave_0: left allmulticast mode [ 230.329837][ T8271] bridge_slave_0: left promiscuous mode [ 230.335692][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.357293][ T8271] bond0: (slave bridge0): Releasing backup interface [ 230.460838][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.581531][ T5944] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 230.630673][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 230.638840][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 230.648083][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.657681][ T9] usb 4-1: config 0 descriptor?? [ 230.750690][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 230.757506][ T5944] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 230.766080][ T5944] usb 3-1: config 179 has no interface number 0 [ 230.779676][ T5944] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 230.790970][ T5944] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 230.803388][ T5944] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.817645][ T5944] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 230.829648][ T5944] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.843615][ T5944] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 230.853917][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.873772][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.875409][ T8272] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.902196][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.927437][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 231.911139][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.923021][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 231.954528][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 231.980873][ T9] usb 4-1: USB disconnect, device number 22 [ 231.998600][ T8283] overlayfs: missing 'lowerdir' [ 232.103528][ T8286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.626'. [ 232.112963][ T8286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.626'. [ 232.904658][ T48] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 232.999090][ T8271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=8271 comm=syz.2.621 [ 233.042380][ T9] usb 3-1: USB disconnect, device number 14 [ 233.042389][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 233.042429][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 233.704313][ T8309] netlink: 'syz.4.632': attribute type 12 has an invalid length. [ 234.266047][ T48] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 234.315478][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.634'. [ 234.344709][ T30] audit: type=1400 audit(1759859301.836:384): avc: denied { ioctl } for pid=8319 comm="syz.0.636" path="socket:[19757]" dev="sockfs" ino=19757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.496618][ T8328] sctp: [Deprecated]: syz.3.639 (pid 8328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.496618][ T8328] Use struct sctp_sack_info instead [ 234.521114][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 234.544152][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 234.660863][ T48] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 234.669926][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.679198][ T48] usb 6-1: Product: syz [ 234.684516][ T48] usb 6-1: Manufacturer: syz [ 234.690670][ T48] usb 6-1: SerialNumber: syz [ 234.732162][ T48] usb 6-1: config 0 descriptor?? [ 234.802650][ T8333] FAULT_INJECTION: forcing a failure. [ 234.802650][ T8333] name failslab, interval 1, probability 0, space 0, times 0 [ 234.815872][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.3.640 Not tainted syzkaller #0 PREEMPT(full) [ 234.815898][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.815907][ T8333] Call Trace: [ 234.815913][ T8333] [ 234.815919][ T8333] dump_stack_lvl+0x16c/0x1f0 [ 234.815945][ T8333] should_fail_ex+0x512/0x640 [ 234.815966][ T8333] ? __kmalloc_noprof+0xca/0x880 [ 234.815994][ T8333] should_failslab+0xc2/0x120 [ 234.816016][ T8333] __kmalloc_noprof+0xdd/0x880 [ 234.816037][ T8333] ? lockdep_init_map_type+0x5c/0x280 [ 234.816052][ T8333] ? comedi_alloc_devpriv+0x22/0x60 [ 234.816067][ T8333] ? comedi_alloc_devpriv+0x22/0x60 [ 234.816077][ T8333] comedi_alloc_devpriv+0x22/0x60 [ 234.816088][ T8333] dt2801_attach+0x28d/0xea0 [ 234.816102][ T8333] ? __pfx_dt2801_attach+0x10/0x10 [ 234.816119][ T8333] ? strcmp+0x3e/0xb0 [ 234.816142][ T8333] comedi_device_attach+0x3b0/0x900 [ 234.816166][ T8333] do_devconfig_ioctl+0x1b1/0x710 [ 234.816185][ T8333] ? __mutex_lock+0x1c5/0x1060 [ 234.816198][ T8333] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 234.816225][ T8333] comedi_unlocked_ioctl+0x165d/0x2f00 [ 234.816249][ T8333] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 234.816280][ T8333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.816307][ T8333] ? do_vfs_ioctl+0x128/0x14f0 [ 234.816330][ T8333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.816347][ T8333] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 234.816367][ T8333] ? hook_file_ioctl_common+0x145/0x410 [ 234.816388][ T8333] ? selinux_file_ioctl+0x180/0x270 [ 234.816414][ T8333] ? selinux_file_ioctl+0xb4/0x270 [ 234.816435][ T8333] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 234.816460][ T8333] __x64_sys_ioctl+0x18e/0x210 [ 234.816481][ T8333] do_syscall_64+0xcd/0x4e0 [ 234.816494][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.816505][ T8333] RIP: 0033:0x7f09af38eec9 [ 234.816515][ T8333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.816525][ T8333] RSP: 002b:00007f09b01d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.816540][ T8333] RAX: ffffffffffffffda RBX: 00007f09af5e6090 RCX: 00007f09af38eec9 [ 234.816551][ T8333] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006 [ 234.816561][ T8333] RBP: 00007f09b01d3090 R08: 0000000000000000 R09: 0000000000000000 [ 234.816570][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.816579][ T8333] R13: 00007f09af5e6128 R14: 00007f09af5e6090 R15: 00007fff1e41f708 [ 234.816602][ T8333] [ 235.342362][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880556f6800: rx timeout, send abort [ 235.352228][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880556f4800: rx timeout, send abort [ 235.360640][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880556f6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.375853][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880556f4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.443919][ T30] audit: type=1400 audit(1759859302.946:385): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 235.466005][ T30] audit: type=1400 audit(1759859302.946:386): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.551198][ T30] audit: type=1400 audit(1759859302.946:387): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.591903][ T30] audit: type=1400 audit(1759859302.946:388): avc: denied { add_name } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.614058][ T30] audit: type=1400 audit(1759859302.946:389): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.704144][ T8345] pimreg: entered allmulticast mode [ 235.712081][ T30] audit: type=1400 audit(1759859302.946:390): avc: denied { append open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 236.224284][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.417180][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 236.739602][ T9] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 236.772664][ T9] usb 3-1: config 0 has no interface number 0 [ 236.805450][ T30] audit: type=1400 audit(1759859302.946:391): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 236.834834][ T9] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 236.847195][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.862112][ T9] usb 3-1: Product: syz [ 236.890639][ T9] usb 3-1: Manufacturer: syz [ 236.906704][ T9] usb 3-1: SerialNumber: syz [ 236.925524][ T9] usb 3-1: config 0 descriptor?? [ 237.139168][ T30] audit: type=1400 audit(1759859304.636:392): avc: denied { accept } for pid=8338 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 237.478709][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 237.497282][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'. [ 237.515099][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 237.540625][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 237.552430][ T30] audit: type=1400 audit(1759859305.036:393): avc: denied { write } for pid=8358 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.687124][ T48] usb 6-1: USB disconnect, device number 10 [ 237.719271][ T8367] bond0: entered promiscuous mode [ 237.724410][ T8367] bond_slave_0: entered promiscuous mode [ 237.730135][ T8367] bond_slave_1: entered promiscuous mode [ 237.736740][ T8367] dummy0: entered promiscuous mode [ 237.742749][ T8367] hsr1: entered promiscuous mode [ 237.747683][ T8367] hsr1: entered allmulticast mode [ 237.752702][ T8367] bond0: entered allmulticast mode [ 237.758386][ T8367] bond_slave_0: entered allmulticast mode [ 237.764114][ T8367] bond_slave_1: entered allmulticast mode [ 237.769814][ T8367] dummy0: entered allmulticast mode [ 237.784596][ T30] audit: type=1400 audit(1759859305.286:394): avc: denied { create } for pid=8365 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.024750][ T8384] netlink: 96 bytes leftover after parsing attributes in process `syz.3.656'. [ 239.107086][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 239.545838][ T24] usb 3-1: USB disconnect, device number 15 [ 240.796099][ T5833] vxcan1 speed is unknown, defaulting to 1000 [ 240.802332][ T1330] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.882722][ T8406] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 241.317300][ T1330] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.328560][ T5833] syz2: Port: 1 Link DOWN [ 241.331079][ T1330] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.345018][ T1330] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.712314][ T8415] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 241.792494][ T5876] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.870726][ T5905] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 242.111552][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 242.152925][ T5876] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 242.163579][ T5876] usb 4-1: config 0 has no interface number 0 [ 242.170652][ T5904] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.192815][ T5876] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 242.194210][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 242.194222][ T30] audit: type=1400 audit(1759859309.696:400): avc: denied { setopt } for pid=8419 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.202242][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 242.233231][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.241338][ T5876] usb 4-1: Product: syz [ 242.245972][ T5876] usb 4-1: Manufacturer: syz [ 242.250889][ T5876] usb 4-1: SerialNumber: syz [ 242.269842][ T8421] syz2: rxe_newlink: already configured on vxcan1 [ 242.340210][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.573895][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 242.594147][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short [ 242.610737][ T5905] usb 5-1: config 57 has an invalid interface number: 229 but max is 0 [ 242.626624][ T5904] usb 6-1: config 57 has an invalid interface number: 229 but max is 0 [ 242.801588][ T5876] usb 4-1: config 0 descriptor?? [ 242.882738][ T5905] usb 5-1: config 57 has no interface number 0 [ 242.889630][ T5904] usb 6-1: config 57 has no interface number 0 [ 242.899318][ T5905] usb 5-1: config 57 interface 229 has no altsetting 0 [ 242.906556][ T5904] usb 6-1: config 57 interface 229 has no altsetting 0 [ 242.914572][ T5876] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 242.928047][ T5905] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 242.937535][ T5904] usb 6-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 242.948359][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.956619][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.964803][ T5905] usb 5-1: Product: syz [ 242.969015][ T5904] usb 6-1: Product: syz [ 242.973459][ T5905] usb 5-1: Manufacturer: syz [ 242.979002][ T5904] usb 6-1: Manufacturer: syz [ 242.983719][ T5905] usb 5-1: SerialNumber: syz [ 242.988390][ T5904] usb 6-1: SerialNumber: syz [ 243.868307][ T5876] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 243.949935][ T5876] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 244.403437][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 244.412093][ T5876] usb 4-1: USB disconnect, device number 23 [ 244.420106][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 244.433124][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 244.444804][ T5876] quatech2 4-1:0.51: device disconnected [ 244.884965][ T5905] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 244.953358][ T5904] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 244.962526][ T5905] videodev: could not get a free minor [ 244.967994][ T5905] gspca_main: video_register_device err -23 [ 244.976051][ T5904] usb 6-1: USB disconnect, device number 11 [ 244.987712][ T5905] jeilinj 5-1:57.229: probe with driver jeilinj failed with error -23 [ 245.029776][ T5905] usb 5-1: USB disconnect, device number 21 [ 245.153455][ T30] audit: type=1400 audit(1759859312.646:401): avc: denied { getopt } for pid=8431 comm="syz.5.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.309984][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.674'. [ 245.427369][ T30] audit: type=1400 audit(1759859312.926:402): avc: denied { write } for pid=8454 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.463671][ T8455] 9pnet: Could not find request transport: fd [ 245.614043][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'. [ 245.713920][ T8478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.896809][ T8477] netlink: 72 bytes leftover after parsing attributes in process `syz.4.680'. [ 246.461480][ T8472] nbd4: detected capacity change from 0 to 63 [ 246.469996][ T8477] block nbd4: NBD_DISCONNECT [ 246.477615][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 246.501791][ T8477] block nbd4: Disconnected due to user request. [ 246.546018][ T8477] block nbd4: shutting down sockets [ 246.573163][ T8484] input: syz1 as /devices/virtual/input/input13 [ 246.612243][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.621392][ C0] buffer_io_error: 6 callbacks suppressed [ 246.621406][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 246.634915][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.643992][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 246.651845][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.660905][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 246.668700][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.677765][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 246.685634][ T5994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.724559][ T5994] Buffer I/O error on dev nbd4, logical block 0, async page read [ 246.732776][ T5994] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.742037][ T5994] Buffer I/O error on dev nbd4, logical block 1, async page read [ 246.750046][ T5994] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.759666][ T5994] Buffer I/O error on dev nbd4, logical block 2, async page read [ 246.768937][ T5994] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.778242][ T5994] Buffer I/O error on dev nbd4, logical block 3, async page read [ 246.786444][ T5994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.797598][ T5994] Buffer I/O error on dev nbd4, logical block 0, async page read [ 246.827889][ T5994] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.839943][ T8495] netlink: 96 bytes leftover after parsing attributes in process `syz.4.686'. [ 246.852221][ T5994] Buffer I/O error on dev nbd4, logical block 1, async page read [ 246.918009][ T8496] netlink: 'syz.0.685': attribute type 4 has an invalid length. [ 246.947255][ T5994] ldm_validate_partition_table(): Disk read failed. [ 246.986708][ T5994] Dev nbd4: unable to read RDB block 0 [ 247.127852][ T5994] nbd4: unable to read partition table [ 247.278613][ T8407] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 247.435206][ T5994] ldm_validate_partition_table(): Disk read failed. [ 247.459126][ T5994] Dev nbd4: unable to read RDB block 0 [ 247.469917][ T5994] nbd4: unable to read partition table [ 247.601767][ T8407] usb 4-1: not running at top speed; connect to a high speed hub [ 247.612287][ T8407] usb 4-1: config 186 has an invalid interface number: 142 but max is 0 [ 247.624036][ T30] audit: type=1400 audit(1759859315.126:403): avc: denied { connect } for pid=8505 comm="syz.5.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 247.631100][ T8407] usb 4-1: config 186 has no interface number 0 [ 247.703078][ T8407] usb 4-1: config 186 interface 142 has no altsetting 0 [ 247.725760][ T8407] usb 4-1: New USB device found, idVendor=0403, idProduct=ed71, bcdDevice= d.48 [ 247.735233][ T8407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.753052][ T8407] usb 4-1: Product: syz [ 247.757402][ T8407] usb 4-1: Manufacturer: syz [ 247.778685][ T8407] usb 4-1: SerialNumber: syz [ 247.980731][ T5891] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 248.003214][ T8407] ftdi_sio 4-1:186.142: FTDI USB Serial Device converter detected [ 248.014378][ T8407] ftdi_sio ttyUSB0: unknown device type: 0xd48 [ 248.026910][ T8407] usb 4-1: USB disconnect, device number 24 [ 248.035748][ T8407] ftdi_sio 4-1:186.142: device disconnected [ 248.071938][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 248.080871][ T5905] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 248.084438][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 248.100237][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 248.132163][ T5891] usb 3-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 248.143619][ T5891] usb 3-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.157832][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.164569][ T5891] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 248.174275][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.204369][ T5891] usb 3-1: config 0 descriptor?? [ 248.289382][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.696'. [ 248.340690][ T5905] usb 5-1: device descriptor read/64, error -71 [ 248.505829][ T52] ------------[ cut here ]------------ [ 248.511958][ T52] WARNING: CPU: 0 PID: 52 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 248.522034][ T52] Modules linked in: [ 248.526083][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 248.535391][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.545580][ T52] Workqueue: hci0 hci_conn_timeout [ 248.550720][ T52] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 248.556355][ T52] Code: 00 e8 ba 7b 68 f7 4c 89 f1 4c 89 e2 48 c7 c6 40 ae b7 8c 48 c7 c7 30 90 5b 90 e8 21 ec 81 fa e9 4d ff ff ff e8 97 7b 68 f7 90 <0f> 0b 90 e8 8e 7b 68 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 248.576047][ T52] RSP: 0018:ffffc90000bd7c30 EFLAGS: 00010293 [ 248.582140][ T52] RAX: 0000000000000000 RBX: ffff888030d58948 RCX: ffffffff8a5346ef [ 248.590103][ T52] RDX: ffff88801b784900 RSI: ffffffff8a534799 RDI: 0000000000000005 [ 248.598080][ T52] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 248.606080][ T52] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888030d58000 [ 248.614548][ T52] R13: 0000000000000000 R14: ffffffff90602054 R15: ffffc90000bd7d10 [ 248.622914][ T52] FS: 0000000000000000(0000) GS:ffff888124e61000(0000) knlGS:0000000000000000 [ 248.631877][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.638456][ T52] CR2: 00007f1c43f72b60 CR3: 000000003a9ae000 CR4: 00000000003526f0 [ 248.646612][ T52] Call Trace: [ 248.649890][ T52] [ 248.652833][ T52] process_one_work+0x9cc/0x1b70 [ 248.657784][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 248.662751][ T52] ? __pfx_process_one_work+0x10/0x10 [ 248.668139][ T52] ? assign_work+0x1a0/0x250 [ 248.672768][ T52] worker_thread+0x6c8/0xf10 [ 248.677359][ T52] ? __pfx_worker_thread+0x10/0x10 [ 248.682482][ T52] kthread+0x3c5/0x780 [ 248.686540][ T52] ? __pfx_kthread+0x10/0x10 [ 248.691132][ T52] ? rcu_is_watching+0x12/0xc0 [ 248.695877][ T52] ? __pfx_kthread+0x10/0x10 [ 248.700450][ T52] ret_from_fork+0x56d/0x730 [ 248.705058][ T52] ? __pfx_kthread+0x10/0x10 [ 248.709645][ T52] ret_from_fork_asm+0x1a/0x30 [ 248.714751][ T52] [ 248.717782][ T52] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.725047][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 248.734304][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.744351][ T52] Workqueue: hci0 hci_conn_timeout [ 248.749448][ T52] Call Trace: [ 248.752706][ T52] [ 248.755622][ T52] dump_stack_lvl+0x3d/0x1f0 [ 248.760200][ T52] vpanic+0x640/0x6f0 [ 248.764164][ T52] ? hci_conn_timeout+0x11a/0x210 [ 248.769200][ T52] panic+0xca/0xd0 [ 248.772902][ T52] ? __pfx_panic+0x10/0x10 [ 248.777307][ T52] ? check_panic_on_warn+0x1f/0xb0 [ 248.782399][ T52] check_panic_on_warn+0xab/0xb0 [ 248.787320][ T52] __warn+0xf6/0x3c0 [ 248.791200][ T52] ? hci_conn_timeout+0x11a/0x210 [ 248.796216][ T52] report_bug+0x3c3/0x580 [ 248.800526][ T52] ? hci_conn_timeout+0x11a/0x210 [ 248.805538][ T52] handle_bug+0x184/0x210 [ 248.809852][ T52] exc_invalid_op+0x17/0x50 [ 248.814341][ T52] asm_exc_invalid_op+0x1a/0x20 [ 248.819171][ T52] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 248.824793][ T52] Code: 00 e8 ba 7b 68 f7 4c 89 f1 4c 89 e2 48 c7 c6 40 ae b7 8c 48 c7 c7 30 90 5b 90 e8 21 ec 81 fa e9 4d ff ff ff e8 97 7b 68 f7 90 <0f> 0b 90 e8 8e 7b 68 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 248.844386][ T52] RSP: 0018:ffffc90000bd7c30 EFLAGS: 00010293 [ 248.850437][ T52] RAX: 0000000000000000 RBX: ffff888030d58948 RCX: ffffffff8a5346ef [ 248.858388][ T52] RDX: ffff88801b784900 RSI: ffffffff8a534799 RDI: 0000000000000005 [ 248.866340][ T52] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 248.874291][ T52] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888030d58000 [ 248.882242][ T52] R13: 0000000000000000 R14: ffffffff90602054 R15: ffffc90000bd7d10 [ 248.890207][ T52] ? hci_conn_timeout+0x6f/0x210 [ 248.895134][ T52] ? hci_conn_timeout+0x119/0x210 [ 248.900149][ T52] process_one_work+0x9cc/0x1b70 [ 248.905080][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 248.909999][ T52] ? __pfx_process_one_work+0x10/0x10 [ 248.915380][ T52] ? assign_work+0x1a0/0x250 [ 248.919956][ T52] worker_thread+0x6c8/0xf10 [ 248.924542][ T52] ? __pfx_worker_thread+0x10/0x10 [ 248.929637][ T52] kthread+0x3c5/0x780 [ 248.933689][ T52] ? __pfx_kthread+0x10/0x10 [ 248.938262][ T52] ? rcu_is_watching+0x12/0xc0 [ 248.943013][ T52] ? __pfx_kthread+0x10/0x10 [ 248.947588][ T52] ret_from_fork+0x56d/0x730 [ 248.952160][ T52] ? __pfx_kthread+0x10/0x10 [ 248.956754][ T52] ret_from_fork_asm+0x1a/0x30 [ 248.961513][ T52] [ 248.964706][ T52] Kernel Offset: disabled [ 248.969002][ T52] Rebooting in 86400 seconds..