last executing test programs: 1m9.967086047s ago: executing program 4 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000008400000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000120a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 57.446903888s ago: executing program 4 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000008400000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000120a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 41.563872792s ago: executing program 4 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000008400000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000120a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 35.604125279s ago: executing program 0 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000000800", @ANYRES32=r2], 0x20}}, 0x0) 33.183594568s ago: executing program 0 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000000800", @ANYRES32=r2], 0x20}}, 0x0) 29.148326083s ago: executing program 4 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000008400000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000120a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 23.411066736s ago: executing program 0 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000000800", @ANYRES32=r2], 0x20}}, 0x0) 15.866865761s ago: executing program 4 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000008400000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000120a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.377646017s ago: executing program 0 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000000800", @ANYRES32=r2], 0x20}}, 0x0) 9.398069174s ago: executing program 0 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000000800", @ANYRES32=r2], 0x20}}, 0x0) 7.711434522s ago: executing program 1 (id=3363): setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pS \x00'}, 0x20) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x3, 0x76, &(0x7f0000000180)=""/118, 0x40f00, 0x10, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x8, 0x6}, 0x10, 0x127d2, r2, 0x0, &(0x7f0000000580)=[r3, r4, r5, r6, 0x1, r7, r8], 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="a0117783b83442436d9095524f40cc17191046c6de80dc29c5b7bb535f4f583b1864fdef9ef4e03c33697cb5e67e1fc124628d38931857b48459bfb14ba0998f1969a014c547e4fc632fbaa2618d2c351381445a9468b976409319d2750c29b39c1b1c9b2ce0ebddf43b10a2492cca9c1447395cbdb0587a9f74ff6c79afbef5d074cf7cc75bd4e95f95114de307fd172bb946f3bfa4ac92184b5ffebb18e3f99d883534df71ca8a75dbee73", @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) 7.538602401s ago: executing program 1 (id=3366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x0) 7.082101126s ago: executing program 1 (id=3367): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x8000, 0x8, 0x9, 0x6, {{0x3e, 0x4, 0x3, 0x5, 0xf8, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@generic={0x7, 0x2}, @noop, @timestamp={0x44, 0x20, 0xac, 0x0, 0x5, [0x9, 0x2, 0xa8, 0x0, 0xb, 0x1, 0x4]}, @cipso={0x86, 0x3f, 0x2, [{0x6, 0x4, "3ccf"}, {0x0, 0x6, "f5522a19"}, {0x0, 0xd, "93583b391a6c45341dc01b"}, {0x0, 0x10, "03a2b83efc5ae08f10f887837722"}, {0x1, 0x12, "3abb2db09e1b3660daa169a78b77ba1d"}]}, @noop, @timestamp_addr={0x44, 0x34, 0x77, 0x1, 0xf, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x85}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x9}]}, @noop, @cipso={0x86, 0x49, 0x0, [{0xf7af9e2ee0714d60, 0x7, "c909a32f9f"}, {0x6, 0xf, "0e52b566760ddfc69f2820a041"}, {0x5, 0x4, "bedb"}, {0x2, 0xa, "eb8cc1953722fc83"}, {0x5, 0x11, "ec012646f4ea450e46df60d65a7023"}, {0x5, 0xe, "5aa4a91d06efba45291c425a"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000840)='net/arp\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r7, @ANYBLOB="0000000008000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) 6.296575919s ago: executing program 3 (id=3372): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x10000000}) signalfd4(r0, &(0x7f0000000180), 0x8, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ntfs\x00', 0x4000, 0x0) 6.213242297s ago: executing program 4 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000008400000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000120a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.169625282s ago: executing program 3 (id=3373): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 6.130757805s ago: executing program 1 (id=3374): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) 4.1255407s ago: executing program 1 (id=3375): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0f", 0x6a}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}], 0x4}}], 0x2, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) getsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000500), &(0x7f00000006c0)=0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000002180)=[@init={0x18, 0x84, 0x0, {0x40, 0xb, 0x101, 0xff}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30, 0x40010}], 0x1, 0x240000c0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000e40)=@generic={0x2, 0x1ff, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003a0"], 0x0, 0x0}, 0x0) kcmp(0x0, 0x0, 0x1, r2, r2) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "1526d087"}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) 4.122119941s ago: executing program 3 (id=3377): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xd02) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x77f, 0xffffffff}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback, 0xc, 0x3}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c643c, &(0x7f0000000300)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77f}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x2, 0x3, 0x8, 0x4, 0xfffffffffffffff0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x97, &(0x7f0000000400)=""/151, 0x41000, 0xa, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x0, 0x4, 0x1, 0x1}, {0x4, 0x2, 0xf, 0xc}, {0x4, 0x3, 0xf, 0x5}, {0x2, 0x4, 0x4, 0x6}], 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) io_uring_enter(r6, 0x351a, 0x100, 0x0, 0x0, 0x0) 3.821930492s ago: executing program 2 (id=3379): syz_init_net_socket$rose(0xb, 0x5, 0x0) memfd_create(0x0, 0x2) syz_io_uring_setup(0x50ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000012000bbf26bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="bdc61ea5727370616e000004000280abe1f8bf2d2b84307eeb000000000000f9f11d5c6500d6"], 0x46}}, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x9}, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000e70000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000f8ca44dfaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500000015000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) 3.444546407s ago: executing program 2 (id=3380): r0 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40000, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x302}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e69", 0x5d}, {&(0x7f0000000640)="23b2f90104a12bb46066e446d5122b22734afa4b19e480b810a671cf0b13b5cf5d6aa3c7405baeccf3e823de977f15b2384682d0ae896b34fa9329c4c593eafeb298639bb75106299c6190a9c3fcc2fae121c7ed90cd48713f6d07d4adb63fc3c74920905b4fe45845239519a58479fe788440734616", 0x76}], 0x3}}], 0x2, 0x2090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000023c0)={r4, r5, 0x1, 0x0, 0x0, 0x4b, 0x6, 0x8b2, 0x7fff, 0x1, 0x0, 0x30000, 'syz0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) r7 = socket(0x10, 0x803, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, 0x0, 0x4000) 3.012771976s ago: executing program 2 (id=3381): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="61123400fff3000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.020097061s ago: executing program 2 (id=3382): r0 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x48085}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(r5, &(0x7f0000000240)='./file1\x00', 0x280) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.931068021s ago: executing program 3 (id=3383): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{}, 0x0, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}, 0x1, 0x0, 0xf4}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) shutdown(r0, 0x1) 1.082478206s ago: executing program 3 (id=3384): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x8000, 0x8, 0x9, 0x6, {{0x3e, 0x4, 0x3, 0x5, 0xf8, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@generic={0x7, 0x2}, @noop, @timestamp={0x44, 0x20, 0xac, 0x0, 0x5, [0x9, 0x2, 0xa8, 0x0, 0xb, 0x1, 0x4]}, @cipso={0x86, 0x3f, 0x2, [{0x6, 0x4, "3ccf"}, {0x0, 0x6, "f5522a19"}, {0x0, 0xd, "93583b391a6c45341dc01b"}, {0x0, 0x10, "03a2b83efc5ae08f10f887837722"}, {0x1, 0x12, "3abb2db09e1b3660daa169a78b77ba1d"}]}, @noop, @timestamp_addr={0x44, 0x34, 0x77, 0x1, 0xf, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x85}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x9}]}, @noop, @cipso={0x86, 0x49, 0x0, [{0xf7af9e2ee0714d60, 0x7, "c909a32f9f"}, {0x6, 0xf, "0e52b566760ddfc69f2820a041"}, {0x5, 0x4, "bedb"}, {0x2, 0xa, "eb8cc1953722fc83"}, {0x5, 0x11, "ec012646f4ea450e46df60d65a7023"}, {0x5, 0xe, "5aa4a91d06efba45291c425a"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000006c0)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000840)='net/arp\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r7, @ANYBLOB="0000000008000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x5}, 0x94) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) 672.251579ms ago: executing program 2 (id=3385): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) memfd_create(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x20000000ec071, 0xffffffffffffffff, 0x6b1f1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 255.455869ms ago: executing program 2 (id=3386): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) memfd_create(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc010}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000006, 0x20000000ec071, 0xffffffffffffffff, 0x6b1f1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 126.151278ms ago: executing program 3 (id=3387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) 202.893µs ago: executing program 1 (id=3388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {0x0, 0x86dd}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 0s ago: executing program 0 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000000800", @ANYRES32=r2], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 1 UID: 0 PID: 16022 Comm: syz.1.2804 Not tainted syzkaller #0 PREEMPT(full) [ 809.236580][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.236590][T16022] Call Trace: [ 809.236595][T16022] [ 809.236601][T16022] dump_stack_lvl+0x16c/0x1f0 [ 809.236623][T16022] should_fail_ex+0x512/0x640 [ 809.236655][T16022] strncpy_from_user+0x3b/0x2e0 [ 809.236678][T16022] strncpy_from_user_nofault+0x7f/0x180 [ 809.236708][T16022] bpf_bprintf_prepare+0xe90/0x13f0 [ 809.236732][T16022] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 809.236756][T16022] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 809.236778][T16022] ? __pfx_bstr_printf+0x10/0x10 [ 809.236808][T16022] ? bpf_trace_run2+0x3e1/0x590 [ 809.236827][T16022] bpf_trace_printk+0xda/0x190 [ 809.236847][T16022] ? __pfx_bpf_trace_printk+0x10/0x10 [ 809.236870][T16022] ? bpf_trace_run2+0x3e1/0x590 [ 809.236899][T16022] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 809.236915][T16022] bpf_trace_run2+0x239/0x590 [ 809.236935][T16022] ? __pfx_bpf_trace_run2+0x10/0x10 [ 809.236959][T16022] ? __lock_acquire+0xb8a/0x1c90 [ 809.236978][T16022] ? fdget_pos+0x2a2/0x370 [ 809.236995][T16022] __bpf_trace_contention_begin+0xc9/0x110 [ 809.237012][T16022] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 809.237032][T16022] ? lock_acquire+0x179/0x350 [ 809.237049][T16022] ? __pfx___might_resched+0x10/0x10 [ 809.237073][T16022] trace_contention_begin+0xc1/0x130 [ 809.237092][T16022] __mutex_lock+0x1a0/0x1060 [ 809.237109][T16022] ? fdget_pos+0x2a2/0x370 [ 809.237127][T16022] ? find_held_lock+0x2b/0x80 [ 809.237155][T16022] ? __pfx___mutex_lock+0x10/0x10 [ 809.237180][T16022] ? __fget_files+0x20e/0x3c0 [ 809.237202][T16022] ? fdget_pos+0x2a2/0x370 [ 809.237219][T16022] fdget_pos+0x2a2/0x370 [ 809.237239][T16022] ksys_read+0x71/0x250 [ 809.237254][T16022] ? __pfx_ksys_read+0x10/0x10 [ 809.237278][T16022] do_syscall_64+0xcd/0xfa0 [ 809.237295][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.237314][T16022] RIP: 0033:0x7f36ea18f749 [ 809.237328][T16022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.237343][T16022] RSP: 002b:00007f36eb0bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 809.237359][T16022] RAX: ffffffffffffffda RBX: 00007f36ea3e5fa0 RCX: 00007f36ea18f749 [ 809.237370][T16022] RDX: 0000000000002020 RSI: 0000200000000640 RDI: 0000000000000005 [ 809.237379][T16022] RBP: 00007f36eb0bc090 R08: 0000000000000000 R09: 0000000000000000 [ 809.237388][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.237398][T16022] R13: 00007f36ea3e6038 R14: 00007f36ea3e5fa0 R15: 00007fff04e70f18 [ 809.237422][T16022] [ 810.250626][T16030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2807'. [ 810.352727][T16030] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2807'. [ 810.722884][T16058] tmpfs: Bad value for 'mpol' [ 811.843523][ T6127] IPVS: stop unused estimator thread 0... [ 811.962580][ T30] audit: type=1400 audit(2000000145.320:1139): avc: denied { map } for pid=16064 comm="syz.3.2814" path="socket:[52404]" dev="sockfs" ino=52404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 812.290550][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2816'. [ 812.696144][T13069] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 812.720238][T16083] GUP no longer grows the stack in syz.2.2817 (16083): 200000004000-20000000a000 (200000002000) [ 812.731519][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.2.2817 Not tainted syzkaller #0 PREEMPT(full) [ 812.731546][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.731558][T16083] Call Trace: [ 812.731564][T16083] [ 812.731572][T16083] dump_stack_lvl+0x16c/0x1f0 [ 812.731603][T16083] gup_vma_lookup+0x1d2/0x220 [ 812.731627][T16083] __get_user_pages+0x241/0x3530 [ 812.731659][T16083] ? find_held_lock+0x2b/0x80 [ 812.731686][T16083] ? __pfx___get_user_pages+0x10/0x10 [ 812.731718][T16083] get_user_pages_remote+0x243/0xab0 [ 812.731740][T16083] ? mast_spanning_rebalance.isra.0+0x2060/0x2060 [ 812.731763][T16083] ? __pfx_get_user_pages_remote+0x10/0x10 [ 812.731789][T16083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.731819][T16083] __access_remote_vm+0x250/0xaa0 [ 812.731844][T16083] ? do_raw_spin_lock+0x12c/0x2b0 [ 812.731865][T16083] ? __pfx___access_remote_vm+0x10/0x10 [ 812.731893][T16083] proc_pid_cmdline_read+0x4de/0x8e0 [ 812.731918][T16083] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 812.731943][T16083] ? rw_verify_area+0xcf/0x6c0 [ 812.731971][T16083] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 812.731992][T16083] vfs_readv+0x5c1/0x8b0 [ 812.732025][T16083] ? __pfx_vfs_readv+0x10/0x10 [ 812.732055][T16083] ? kmem_cache_free+0x2d4/0x6c0 [ 812.732088][T16083] ? __fget_files+0x20e/0x3c0 [ 812.732114][T16083] ? do_preadv+0x1a6/0x270 [ 812.732140][T16083] do_preadv+0x1a6/0x270 [ 812.732168][T16083] ? __pfx_do_preadv+0x10/0x10 [ 812.732204][T16083] do_syscall_64+0xcd/0xfa0 [ 812.732224][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.732242][T16083] RIP: 0033:0x7f903218f749 [ 812.732257][T16083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.732274][T16083] RSP: 002b:00007f9033020038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 812.732293][T16083] RAX: ffffffffffffffda RBX: 00007f90323e5fa0 RCX: 00007f903218f749 [ 812.732304][T16083] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 812.732315][T16083] RBP: 00007f9032213f91 R08: 0000000000000000 R09: 0000000000000000 [ 812.732326][T16083] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 812.732335][T16083] R13: 00007f90323e6038 R14: 00007f90323e5fa0 R15: 00007ffff4d79108 [ 812.732361][T16083] [ 813.518865][T13069] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 813.563992][T16092] binder: 16091:16092 ioctl 400c620e 200000000100 returned -22 [ 813.576045][T13069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.623463][ T30] audit: type=1400 audit(2000000146.980:1140): avc: denied { validate_trans } for pid=16091 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 813.649902][T13069] usb 1-1: config 0 descriptor?? [ 813.883254][T13069] kaweth 1-1:0.0: Firmware present in device. [ 813.957676][ T5864] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 814.060659][T13069] kaweth 1-1:0.0: Error reading configuration (-32), no net device created [ 814.105234][T15917] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 814.135251][T15917] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 814.152628][T13069] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 814.161240][T16102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2822'. [ 814.214793][T15917] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 814.239390][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 814.244760][T13069] usb 1-1: USB disconnect, device number 49 [ 814.264420][T15917] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 814.284002][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 814.377236][ T5864] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 814.444833][ T5864] usb 4-1: config 1 has no interface number 1 [ 814.537530][ T5864] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 814.737117][T16097] [U]  [ 814.969630][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.990474][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.087371][ T5864] usb 4-1: Product: syz [ 815.091651][ T5864] usb 4-1: Manufacturer: syz [ 815.104200][ T5864] usb 4-1: SerialNumber: syz [ 817.145701][ T30] audit: type=1400 audit(2000000150.310:1141): avc: denied { create } for pid=16120 comm="syz.0.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 817.177839][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.331672][T16125] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2827'. [ 817.538048][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.545158][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.903673][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.910867][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.999614][ T5864] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 818.559108][ T5864] usb 4-1: USB disconnect, device number 71 [ 818.637390][T16141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2831'. [ 818.639809][T15912] udevd[15912]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.808217][T16143] netlink: 'syz.3.2831': attribute type 12 has an invalid length. [ 819.212843][T16151] affs: No valid root block on device nullb0 [ 819.371302][T15917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.153115][ T30] audit: type=1400 audit(2000000153.520:1142): avc: denied { mounton } for pid=16161 comm="syz.3.2835" path="/569/file0" dev="tmpfs" ino=3005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 820.295059][T16148] [U]  [ 820.852349][T16178] kvm: emulating exchange as write [ 820.861403][T15917] veth0_vlan: entered promiscuous mode [ 820.902128][T15917] veth1_vlan: entered promiscuous mode [ 821.367018][T16192] netlink: 'syz.1.2843': attribute type 1 has an invalid length. [ 821.369494][T15917] veth0_macvtap: entered promiscuous mode [ 821.473110][T15917] veth1_macvtap: entered promiscuous mode [ 821.566427][T16198] 8021q: adding VLAN 0 to HW filter on device bond5 [ 821.587710][T16198] bond4: (slave bond5): making interface the new active one [ 821.598642][T16198] bond4: (slave bond5): Enslaving as an active interface with an up link [ 821.750740][T15917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.795004][T15917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.836314][T16205] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 821.845050][T16205] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 821.853603][T16205] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 821.870253][T15917] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 821.963213][T15917] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 822.017611][T15917] wireguard: wg0: Could not create IPv4 socket [ 822.039682][T15917] wireguard: wg1: Could not create IPv4 socket [ 822.061176][T15917] wireguard: wg2: Could not create IPv4 socket [ 822.076096][ T5877] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 822.242397][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 822.259448][ T5877] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 822.274239][ T5877] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 822.283242][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 822.292447][ T5877] usb 3-1: config 1 has no interface number 0 [ 822.298797][ T5877] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 822.310356][ T5877] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 822.323375][ T5877] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 822.333192][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.347671][ T5877] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 822.549184][ T5877] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 822.876388][ T24] usb 3-1: USB disconnect, device number 50 [ 822.904623][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 822.963671][T16214] [U]  [ 823.146189][ T79] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 823.401996][ T79] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.539824][ T79] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 823.751733][ T79] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 823.753181][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.761690][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.781027][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.788884][ T79] usb 1-1: config 0 descriptor?? [ 823.793679][ T79] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 823.801659][ T79] dvb-usb: bulk message failed: -22 (3/0) [ 823.821974][ T79] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 823.833958][ T79] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 823.866816][ T79] usb 1-1: media controller created [ 823.879339][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.889270][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.901603][ T79] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.912571][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.967588][ T79] dvb-usb: bulk message failed: -22 (6/0) [ 823.988072][T16229] Failed to initialize the IGMP autojoin socket (err -2) [ 824.015682][ T79] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 824.036826][ T30] audit: type=1400 audit(2000000157.400:1143): avc: denied { setopt } for pid=16221 comm="syz.0.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 824.079757][ T79] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 824.086703][T16238] macsec1: entered promiscuous mode [ 824.106621][T16238] macsec1: entered allmulticast mode [ 824.122250][ T79] dvb-usb: schedule remote query interval to 150 msecs. [ 824.129683][ T5864] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 824.162464][ T79] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 824.205643][ T79] usb 1-1: USB disconnect, device number 50 [ 824.270969][ T79] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 824.306615][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 824.323605][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 824.359983][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 19924, setting to 1024 [ 824.379647][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 824.421308][ T5864] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 824.441937][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.452774][ T5864] usb 3-1: Product: syz [ 824.464259][ T5864] usb 3-1: Manufacturer: syz [ 824.469182][ T5864] usb 3-1: SerialNumber: syz [ 824.492987][ T5864] usb 3-1: config 0 descriptor?? [ 824.501937][T16232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 824.690964][T16246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2857'. [ 824.726314][T16232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.735138][T16232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.755152][ T5864] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 825.017421][ T5877] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 825.172746][T13069] usb 3-1: USB disconnect, device number 51 [ 825.327191][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 825.363946][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 825.384162][ T5877] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 825.422583][ T5877] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 825.447495][T16229] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 825.465365][ T5877] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.ee [ 825.476208][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.489630][T16229] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 825.496714][ T5877] usb 4-1: Product: syz [ 825.500902][ T5877] usb 4-1: Manufacturer: syz [ 825.505533][ T5877] usb 4-1: SerialNumber: syz [ 825.565907][T16229] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 825.593486][T16229] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 825.966814][ T5825] Bluetooth: hci2: command tx timeout [ 825.982263][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'. [ 826.302602][T16289] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 826.348155][T16289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 826.397858][ T30] audit: type=1400 audit(2000000159.770:1144): avc: denied { mount } for pid=16245 comm="syz.3.2857" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 826.470171][ T30] audit: type=1400 audit(2000000159.790:1145): avc: denied { setattr } for pid=16245 comm="syz.3.2857" path="pipe:[54212]" dev="pipefs" ino=54212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 826.777039][ T5864] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 826.796199][ T79] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 826.810766][T16229] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 826.838456][T16229] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 826.878393][T16229] wireguard: wg0: Could not create IPv4 socket [ 826.894290][T16229] wireguard: wg1: Could not create IPv4 socket [ 826.914421][T16229] wireguard: wg2: Could not create IPv4 socket [ 826.956639][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 826.971059][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.987458][ T5864] usb 2-1: config 1 has an invalid interface number: 27 but max is 0 [ 826.997912][ T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.016172][ T5864] usb 2-1: config 1 has no interface number 0 [ 827.022461][ T5864] usb 2-1: config 1 interface 27 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 827.036094][ T79] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 827.056219][ T5864] usb 2-1: config 1 interface 27 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 827.075101][ T79] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 827.131732][ T5864] usb 2-1: config 1 interface 27 has no altsetting 0 [ 827.168422][ T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.182667][ T5864] usb 2-1: New USB device found, idVendor=045e, idProduct=04e3, bcdDevice=7e.23 [ 827.199408][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.226547][ T79] usb 1-1: config 0 descriptor?? [ 827.236670][ T5864] usb 2-1: Product: syz [ 827.244698][ T5864] usb 2-1: Manufacturer: syz [ 827.253382][ T5864] usb 2-1: SerialNumber: syz [ 827.262272][T16298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 827.269739][T16298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 827.279209][ T5864] ipaq 2-1:1.27: PocketPC PDA converter detected [ 827.478194][ T5864] ipaq 2-1:1.27: probe with driver ipaq failed with error -71 [ 827.498089][ T5864] usb 2-1: USB disconnect, device number 73 [ 827.672120][ T79] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 827.713308][ T5864] usb 4-1: USB disconnect, device number 72 [ 828.163873][T16344] Invalid logical block size (536870912) [ 828.527485][T16351] netlink: 'syz.2.2873': attribute type 1 has an invalid length. [ 828.555008][T16351] bond0: entered promiscuous mode [ 828.560557][T16351] bond0: entered allmulticast mode [ 828.566559][T16351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.591025][T16351] erspan2: entered allmulticast mode [ 828.599610][T13069] usb 1-1: USB disconnect, device number 51 [ 828.631707][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2873'. [ 828.651327][T16351] bond0: (slave erspan2): making interface the new active one [ 828.681838][T16351] erspan2: entered promiscuous mode [ 828.733688][T16351] bond0: (slave erspan2): Enslaving as an active interface with an up link [ 829.251287][ T30] audit: type=1400 audit(2000000162.620:1146): avc: denied { write } for pid=16361 comm="syz.3.2874" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 829.537125][T16355] bond0 (unregistering): (slave erspan2): Releasing active interface [ 829.547857][T16355] erspan2: left promiscuous mode [ 829.787667][T16355] bond0 (unregistering): Released all slaves [ 829.891020][T16372] Failed to initialize the IGMP autojoin socket (err -2) [ 831.786775][T16412] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 832.311942][T16412] bond7: entered promiscuous mode [ 832.317384][T16412] 8021q: adding VLAN 0 to HW filter on device bond7 [ 832.455581][T16419] bond7: (slave bridge0): making interface the new active one [ 832.488653][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 832.506069][T16419] bridge0: entered promiscuous mode [ 832.517476][T16419] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 832.527917][T16427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2879'. [ 832.557673][T16427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2879'. [ 832.641142][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 832.651252][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 832.659827][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 832.679119][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 832.687040][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 832.744973][T16430] Failed to initialize the IGMP autojoin socket (err -2) [ 833.634077][T16457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2890'. [ 833.745346][T16460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.574153][ T30] audit: type=1400 audit(2000000167.080:1147): avc: denied { bind } for pid=16456 comm="syz.2.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 834.596416][T16460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.766314][ T5825] Bluetooth: hci2: command tx timeout [ 834.816067][ T5864] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 834.926087][ T79] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 834.966079][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 834.972862][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.981899][ T5864] usb 4-1: config 0 has no interface number 0 [ 835.037910][ T5864] usb 4-1: config 0 interface 1 has no altsetting 0 [ 835.070235][ T5864] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 835.096327][ T79] usb 2-1: Using ep0 maxpacket: 32 [ 835.105958][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.116139][ T79] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.159554][ T5864] usb 4-1: Product: syz [ 835.165757][ T79] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 835.184673][ T5864] usb 4-1: Manufacturer: syz [ 835.237608][ T5864] usb 4-1: SerialNumber: syz [ 835.244299][ T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.267825][ T5864] usb 4-1: config 0 descriptor?? [ 835.279381][ T79] usb 2-1: config 0 descriptor?? [ 835.319177][ T79] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 835.532613][T16483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2894'. [ 835.565199][ T5168] bcm5974 2-1:0.0: could not read from device [ 835.622245][ T5168] bcm5974 2-1:0.0: could not read from device [ 835.632152][ T79] usb 2-1: USB disconnect, device number 74 [ 835.657027][ T5168] bcm5974 2-1:0.0: could not read from device [ 836.072459][T16430] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 836.085251][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 836.191558][T16430] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 836.252482][T16430] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 836.339828][T16430] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 836.367544][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.379503][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.492780][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 836.510015][ T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 836.589144][T16513] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 836.597854][ T24] usb 3-1: Manufacturer: syz [ 836.626352][T16513] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 836.684228][ T24] usb 3-1: config 0 descriptor?? [ 836.778185][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 836.834496][T16516] netlink: 'syz.1.2899': attribute type 5 has an invalid length. [ 836.846259][ T5825] Bluetooth: hci2: command tx timeout [ 836.904567][T16516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2899'. [ 837.134345][ T5864] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 837.213006][ T5864] usb 4-1: USB disconnect, device number 73 [ 837.731840][ T24] uclogic 0003:256C:006D.0022: interface is invalid, ignoring [ 837.869958][T16540] syz.1.2902 (16540): drop_caches: 2 [ 838.206569][T16430] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 838.229337][T16430] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 838.268968][T16430] wireguard: wg0: Could not create IPv4 socket [ 838.281095][T16430] wireguard: wg1: Could not create IPv4 socket [ 838.289796][T16430] wireguard: wg2: Could not create IPv4 socket [ 838.970012][ T79] usb 3-1: USB disconnect, device number 52 [ 841.050814][T16603] syz.0.2913 (16603): drop_caches: 2 [ 841.347090][T16590] [U]  [ 842.735743][T16633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=16633 comm=syz.1.2915 [ 843.194004][T16640] loop8: detected capacity change from 0 to 8 [ 843.232256][T16640] Dev loop8: unable to read RDB block 8 [ 843.247379][T16640] loop8: unable to read partition table [ 843.281910][T16640] loop8: partition table beyond EOD, truncated [ 843.298474][T16640] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 843.526270][ T79] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 843.787546][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.806066][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.827900][ T79] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 843.844381][ T79] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 843.856821][ T79] usb 3-1: Manufacturer: syz [ 843.901671][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 843.921489][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 843.953029][ T79] usb 3-1: config 0 descriptor?? [ 844.019963][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.033130][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.053949][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.318557][T16649] Failed to initialize the IGMP autojoin socket (err -2) [ 845.389296][T16666] Invalid logical block size (768) [ 845.762880][ T79] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 845.936285][T13069] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 846.088958][T13069] usb 2-1: device descriptor read/64, error -71 [ 846.286417][ T5825] Bluetooth: hci2: command tx timeout [ 846.326886][T13069] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 846.516066][T13069] usb 2-1: device descriptor read/64, error -71 [ 847.606396][T13069] usb usb2-port1: attempt power cycle [ 847.638984][ T5884] usb 3-1: USB disconnect, device number 53 [ 847.814720][T16649] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 847.840845][T16649] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 847.869799][T16649] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 847.898880][T16649] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 848.006209][T13069] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 848.057379][T13069] usb 2-1: device descriptor read/8, error -71 [ 848.326096][T13069] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 848.360132][T13069] usb 2-1: device descriptor read/8, error -71 [ 848.396332][ T5825] Bluetooth: hci2: command tx timeout [ 848.487095][T13069] usb usb2-port1: unable to enumerate USB device [ 848.605354][T16694] [U]  [ 848.804190][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 849.341861][T16738] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 850.446303][ T5825] Bluetooth: hci2: command tx timeout [ 850.641141][T16649] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 850.927010][T13069] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 851.803907][T16772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.819770][T16649] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 851.848174][T16649] wireguard: wg0: Could not create IPv4 socket [ 851.895759][T16649] wireguard: wg1: Could not create IPv4 socket [ 851.924340][T16649] wireguard: wg2: Could not create IPv4 socket [ 851.975224][T13069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.986772][T13069] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.010401][T13069] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 852.029959][T13069] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 852.068088][T13069] usb 4-1: Manufacturer: syz [ 852.096098][ T5884] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 852.176382][T13069] usb 4-1: config 0 descriptor?? [ 852.444639][T16785] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 852.736949][ T5884] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 852.802297][ T5884] usb 1-1: config 0 has no interface number 0 [ 852.930505][ T5884] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 852.968072][T13069] usbhid 4-1:0.0: can't add hid device: -32 [ 852.979621][ T5884] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 852.999319][T13069] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 853.015067][ T5884] usb 1-1: config 0 interface 113 has no altsetting 0 [ 853.058449][ T5884] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 853.091923][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.124477][ T5884] usb 1-1: Product: syz [ 853.141649][ T5884] usb 1-1: Manufacturer: syz [ 853.159018][ T5884] usb 1-1: SerialNumber: syz [ 853.178788][ T5884] usb 1-1: config 0 descriptor?? [ 853.203922][ C0] usb 1-1: NFC: Urb failure (status -71) [ 853.239621][ T5884] usb 1-1: NFC: Unable to get FW version [ 853.252371][ T5884] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 853.731791][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2940'. [ 854.147412][ T5884] usb 4-1: USB disconnect, device number 74 [ 854.306491][ T30] audit: type=1400 audit(2000000187.680:1148): avc: denied { mount } for pid=16816 comm="syz.2.2942" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 854.432672][T16819] Failed to initialize the IGMP autojoin socket (err -2) [ 855.706149][ T5884] usb 1-1: USB disconnect, device number 52 [ 856.325844][ T30] audit: type=1400 audit(2000000189.690:1149): avc: denied { ioctl } for pid=16872 comm="syz.0.2948" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 856.608686][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 857.117838][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.128126][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.140231][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.155674][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.164414][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.214636][T16902] overlay: Bad value for 'workdir' [ 857.232683][T16897] Failed to initialize the IGMP autojoin socket (err -2) [ 857.494021][ T30] audit: type=1400 audit(2000000190.860:1150): avc: denied { read write } for pid=16913 comm="syz.2.2958" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 857.552718][ T30] audit: type=1400 audit(2000000190.860:1151): avc: denied { open } for pid=16913 comm="syz.2.2958" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 859.218022][ T30] audit: type=1400 audit(2000000192.590:1152): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 859.298855][ T5825] Bluetooth: hci2: command tx timeout [ 859.438078][T16897] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 859.520043][T16897] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 859.605920][T16897] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 859.688528][T16897] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 860.230631][ T5877] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 860.400994][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.436362][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.469839][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 860.544152][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 860.587346][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.613107][ T5877] usb 3-1: config 0 descriptor?? [ 860.999262][ T30] audit: type=1400 audit(2000000194.360:1153): avc: denied { create } for pid=16997 comm="syz.0.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 861.225539][T16897] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 861.266971][ T30] audit: type=1400 audit(2000000194.640:1154): avc: denied { sys_admin } for pid=16997 comm="syz.0.2975" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 861.268447][ T5877] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 861.317479][T16897] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 861.390831][ T5825] Bluetooth: hci2: command tx timeout [ 861.399748][T16897] wireguard: wg0: Could not create IPv4 socket [ 861.421317][T16897] wireguard: wg1: Could not create IPv4 socket [ 861.475500][T16897] wireguard: wg2: Could not create IPv4 socket [ 861.936249][ T5864] usb 3-1: USB disconnect, device number 54 [ 862.833935][ T30] audit: type=1400 audit(2000000196.200:1155): avc: denied { bind } for pid=17021 comm="syz.3.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 863.441776][T17032] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 863.665713][T17032] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 864.930271][T17064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.471027][T17073] binder: 17068:17073 unknown command 0 [ 865.476786][T17073] binder: 17068:17073 ioctl c0306201 200000000080 returned -22 [ 865.508546][T17073] binder: BINDER_SET_CONTEXT_MGR already set [ 865.514913][T17073] binder: 17068:17073 ioctl 4018620d 200000000040 returned -16 [ 865.533565][T17073] binder: 17068:17073 ioctl c0306201 2000000003c0 returned -14 [ 865.920332][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 865.945486][T17088] netlink: 'syz.3.2994': attribute type 2 has an invalid length. [ 865.955528][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 867.187322][T17112] tmpfs: Unknown parameter 'quotaÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 867.226088][T13069] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 867.544423][ T30] audit: type=1400 audit(2000000200.830:1156): avc: denied { read } for pid=17110 comm="syz.3.2999" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 867.893121][T17117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 867.899314][T17117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 867.905372][T17117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 867.963769][T13069] usb 2-1: unable to get BOS descriptor or descriptor too short [ 867.983150][T13069] usb 2-1: not running at top speed; connect to a high speed hub [ 868.035230][T13069] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.069758][T13069] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.102016][T13069] usb 2-1: string descriptor 0 read error: -22 [ 868.119269][T13069] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 868.148719][T13069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.198799][T13069] usb 2-1: 0:2 : does not exist [ 869.734574][T11751] Bluetooth: hci0: command 0x0c1a tx timeout [ 869.745104][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.755095][T13069] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 869.879427][T13069] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 869.886415][T17147] : entered promiscuous mode [ 869.898607][T13069] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 869.986163][T11751] Bluetooth: hci4: command 0x0c1a tx timeout [ 869.992203][T11751] Bluetooth: hci1: command 0x0c1a tx timeout [ 870.035289][T13069] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 870.106396][T13069] usb 2-1: USB disconnect, device number 79 [ 870.260706][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.270524][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.278959][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.286696][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.293955][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.315317][T17151] Failed to initialize the IGMP autojoin socket (err -2) [ 871.136980][T17169] binder_alloc: binder_alloc_mmap_handler: 17168 200000ffa000-200000ffd000 already mapped failed -16 [ 871.179262][T17170] binder_alloc: 17168: binder_alloc_buf, no vma [ 871.273662][T17169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3006'. [ 871.293156][T17177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3006'. [ 871.530054][ T30] audit: type=1400 audit(2000000204.850:1157): avc: denied { lock } for pid=17180 comm="syz.0.3008" path="socket:[58286]" dev="sockfs" ino=58286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 872.056056][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 872.082224][T17151] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 872.199167][T17151] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 872.275285][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 872.301483][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.320738][T17151] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 872.363428][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.366313][ T5825] Bluetooth: hci2: command tx timeout [ 872.383896][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 872.409462][T17151] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 872.486600][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.534652][ T24] usb 2-1: config 0 descriptor?? [ 872.585320][ T24] hub 2-1:0.0: USB hub found [ 872.780113][ T24] hub 2-1:0.0: 1 port detected [ 873.045390][T17217] fuse: Bad value for 'fd' [ 873.052605][T17217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.061499][T17217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.080293][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'. [ 873.237634][ T24] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 873.266148][ T24] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 873.311580][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 873.327159][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 873.376212][ T24] usb 2-1: USB disconnect, device number 80 [ 874.229487][T17151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 874.411771][T17151] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 874.472242][ T5825] Bluetooth: hci2: command tx timeout [ 874.911313][T17151] wireguard: wg0: Could not create IPv4 socket [ 874.947866][T17151] wireguard: wg1: Could not create IPv4 socket [ 874.981704][T17151] wireguard: wg2: Could not create IPv4 socket [ 878.366071][T17149] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 878.374794][T17296] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 878.406846][T17296] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 878.536861][T17149] usb 1-1: Using ep0 maxpacket: 32 [ 878.547237][T17149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.566122][T17149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.715898][T17149] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 878.725409][T17149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.741907][ T30] audit: type=1400 audit(2000000212.110:1158): avc: denied { ioctl } for pid=17301 comm="syz.3.3026" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 878.747168][T17149] usb 1-1: config 0 descriptor?? [ 878.798281][T17149] hub 1-1:0.0: USB hub found [ 879.045428][T17149] hub 1-1:0.0: 1 port detected [ 879.241689][ T30] audit: type=1400 audit(2000000212.610:1159): avc: denied { bind } for pid=17313 comm="syz.2.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 879.248945][T17291] fuse: Bad value for 'fd' [ 879.367832][T17291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.396398][T17291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.411333][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3024'. [ 879.449440][T17149] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 879.456925][T17149] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 879.485037][T17149] usbhid 1-1:0.0: can't add hid device: -71 [ 879.501387][T17149] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 879.589950][T17329] netlink: 'syz.2.3028': attribute type 10 has an invalid length. [ 879.852240][T17149] usb 1-1: USB disconnect, device number 53 [ 882.942555][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 882.955453][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 882.964997][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 882.973717][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 882.981490][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.122163][T17403] Failed to initialize the IGMP autojoin socket (err -2) [ 883.236235][ T79] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 883.413978][ T79] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.478350][ T79] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.518936][ T79] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 883.567486][ T79] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.608801][ T79] usb 2-1: config 0 descriptor?? [ 884.048173][ T79] steelseries 0003:1038:1410.0025: item fetching failed at offset 6/7 [ 884.090717][ T79] steelseries 0003:1038:1410.0025: parse failed [ 884.144884][ T79] steelseries 0003:1038:1410.0025: probe with driver steelseries failed with error -22 [ 884.251754][ T79] usb 2-1: USB disconnect, device number 81 [ 884.696260][T17190] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 884.760749][T17403] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 884.781213][T17403] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 884.801230][T17403] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 884.822576][T17403] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 884.956060][T17190] usb 1-1: Using ep0 maxpacket: 32 [ 884.963107][T17190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.984440][T17190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.061996][T17453] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3043'. [ 885.440155][T11751] Bluetooth: hci2: command tx timeout [ 885.440271][T17190] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 885.455041][T17190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.466206][T17190] usb 1-1: config 0 descriptor?? [ 885.481607][T17190] hub 1-1:0.0: USB hub found [ 885.888327][ T30] audit: type=1400 audit(2000000219.200:1160): avc: denied { setopt } for pid=17457 comm="syz.3.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 886.239619][T17190] hub 1-1:0.0: 1 port detected [ 886.270158][T17435] fuse: Bad value for 'fd' [ 886.301045][T17435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3041'. [ 886.312249][T17190] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 886.319790][T17190] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 886.353161][T17190] usbhid 1-1:0.0: can't add hid device: -71 [ 886.364667][T17190] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 886.385545][T17473] affs: No valid root block on device nullb0 [ 886.407342][T17190] usb 1-1: USB disconnect, device number 54 [ 886.697822][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 887.053605][T17497] binder: 17494:17497 unknown command 0 [ 887.059435][T17497] binder: 17494:17497 ioctl c0306201 200000000080 returned -22 [ 887.083538][T17497] binder: 17494:17497 ioctl c0306201 2000000003c0 returned -14 [ 887.489284][T11751] Bluetooth: hci2: command tx timeout [ 887.653613][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 887.906484][T17403] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 887.994883][T17403] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 888.073607][T17403] wireguard: wg0: Could not create IPv4 socket [ 888.108458][T17403] wireguard: wg1: Could not create IPv4 socket [ 888.154053][T17403] wireguard: wg2: Could not create IPv4 socket [ 888.204230][T17528] affs: No valid root block on device nullb0 [ 890.246067][ T30] audit: type=1400 audit(2000000223.450:1161): avc: denied { mount } for pid=17554 comm="syz.3.3065" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 890.443915][T17568] tmpfs: Bad value for 'mpol' [ 891.026948][T17149] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 891.039064][T17584] affs: No valid root block on device nullb0 [ 891.235898][T17588] binder: 17586:17588 unknown command 0 [ 891.241661][T17588] binder: 17586:17588 ioctl c0306201 200000000080 returned -22 [ 891.262941][T17588] binder: BINDER_SET_CONTEXT_MGR already set [ 891.269200][T17588] binder: 17586:17588 ioctl 4018620d 200000000040 returned -16 [ 891.281921][T17588] binder: 17586:17588 ioctl c0306201 2000000003c0 returned -14 [ 891.456557][T17149] usb 4-1: too many configurations: 238, using maximum allowed: 8 [ 891.489912][T17149] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 891.589311][T17149] usb 4-1: can't read configurations, error -22 [ 891.846280][T17149] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 892.266538][T17149] usb 4-1: too many configurations: 238, using maximum allowed: 8 [ 892.287668][T17149] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 892.316030][T17149] usb 4-1: can't read configurations, error -22 [ 892.331911][T17149] usb usb4-port1: attempt power cycle [ 892.688294][T17149] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 892.729918][T17149] usb 4-1: too many configurations: 238, using maximum allowed: 8 [ 892.756530][T17149] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 892.777916][T17149] usb 4-1: can't read configurations, error -22 [ 892.966144][T17149] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 893.032495][T17149] usb 4-1: too many configurations: 238, using maximum allowed: 8 [ 893.369913][T17149] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 893.395350][T17149] usb 4-1: can't read configurations, error -22 [ 893.412496][T17149] usb usb4-port1: unable to enumerate USB device [ 893.820154][T17662] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 894.256780][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 894.273897][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 894.282283][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 894.290301][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 894.300068][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 894.356803][T17669] Failed to initialize the IGMP autojoin socket (err -2) [ 894.401116][T17675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.385361][ T5825] Bluetooth: hci2: command tx timeout [ 896.640548][T17696] netlink: 'syz.1.3086': attribute type 27 has an invalid length. [ 896.744140][T17696] ip6erspan0: left promiscuous mode [ 896.766310][T17696] bridge0: left promiscuous mode [ 896.771450][T17696] macsec2: left promiscuous mode [ 896.787321][T17699] lo: entered promiscuous mode [ 896.792254][T17699] tunl0: entered promiscuous mode [ 896.799941][T17699] gre0: entered promiscuous mode [ 896.805024][T17699] gretap0: entered promiscuous mode [ 896.810459][T17699] erspan0: entered promiscuous mode [ 896.815778][T17699] ip_vti0: entered promiscuous mode [ 896.821168][T17699] ip6_vti0: entered promiscuous mode [ 896.826605][T17699] sit0: entered promiscuous mode [ 896.831659][T17699] ip6tnl0: entered promiscuous mode [ 896.837024][T17699] ip6gre0: entered promiscuous mode [ 896.842349][T17699] syz_tun: entered promiscuous mode [ 896.847868][T17699] ip6gretap0: entered promiscuous mode [ 896.853437][T17699] bridge0: entered promiscuous mode [ 896.858845][T17699] vcan0: entered promiscuous mode [ 896.864012][T17699] bond0: entered promiscuous mode [ 896.870584][T17699] bond_slave_0: entered promiscuous mode [ 896.876431][T17699] bond_slave_1: entered promiscuous mode [ 896.882232][T17699] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 896.889448][T17699] dummy0: entered promiscuous mode [ 896.895392][T17699] nlmon0: entered promiscuous mode [ 896.901397][T17699] caif0: entered promiscuous mode [ 896.906728][T17699] batadv0: entered promiscuous mode [ 896.912055][T17699] vxcan0: entered promiscuous mode [ 896.917316][T17699] vxcan1: entered promiscuous mode [ 896.922552][T17699] veth0: entered promiscuous mode [ 896.927752][T17699] veth1: entered promiscuous mode [ 896.932899][T17699] wg0: entered promiscuous mode [ 896.938003][T17699] wg1: entered promiscuous mode [ 896.942974][T17699] veth0_to_bridge: entered promiscuous mode [ 896.949149][T17699] veth1_to_bridge: entered promiscuous mode [ 896.955249][T17699] veth0_to_bond: entered promiscuous mode [ 896.961244][T17699] veth1_to_bond: entered promiscuous mode [ 896.967251][T17699] veth0_to_team: entered promiscuous mode [ 896.973092][T17699] team_slave_0: entered promiscuous mode [ 896.979004][T17699] veth1_to_team: entered promiscuous mode [ 896.984852][T17699] team_slave_1: entered promiscuous mode [ 896.990664][T17699] veth0_to_batadv: entered promiscuous mode [ 896.996734][T17699] batadv_slave_0: entered promiscuous mode [ 897.002725][T17699] veth1_to_batadv: entered promiscuous mode [ 897.009055][T17699] xfrm0: entered promiscuous mode [ 897.014213][T17699] veth0_to_hsr: entered promiscuous mode [ 897.020143][T17699] veth1_to_hsr: entered promiscuous mode [ 897.026169][T17699] hsr0: entered promiscuous mode [ 897.031243][T17699] veth1_virt_wifi: entered promiscuous mode [ 897.037326][T17699] veth0_virt_wifi: entered promiscuous mode [ 897.043388][T17699] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 897.051082][T17699] vlan0: entered promiscuous mode [ 897.056417][T17699] vlan1: entered promiscuous mode [ 897.061717][T17699] macvlan0: entered promiscuous mode [ 897.067217][T17699] macvlan1: entered promiscuous mode [ 897.072632][T17699] ipvlan0: entered promiscuous mode [ 897.077978][T17699] ipvlan1: entered promiscuous mode [ 897.083496][T17699] macvtap0: entered promiscuous mode [ 897.088952][T17699] macsec0: entered promiscuous mode [ 897.094227][T17699] geneve0: entered promiscuous mode [ 897.099542][T17699] geneve1: entered promiscuous mode [ 897.104839][T17699] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 897.111999][T17699] macvlan2: entered promiscuous mode [ 897.117481][T17699] bridge1: entered promiscuous mode [ 897.122856][T17699] bond1: entered promiscuous mode [ 897.127898][T17699] bridge2: entered promiscuous mode [ 897.133376][T17699] netdevsim netdevsim1 eth0: entered promiscuous mode [ 897.140291][T17699] netdevsim netdevsim1 eth1: entered promiscuous mode [ 897.147220][T17699] netdevsim netdevsim1 eth2: entered promiscuous mode [ 897.154080][T17699] netdevsim netdevsim1 eth3: entered promiscuous mode [ 897.161012][T17699] veth2: entered promiscuous mode [ 897.166192][T17699] veth3: entered promiscuous mode [ 897.171310][T17699] geneve2: entered promiscuous mode [ 897.176641][T17699] geneve3: entered promiscuous mode [ 897.181931][T17699] bond2: entered promiscuous mode [ 897.187061][T17699] veth4: entered promiscuous mode [ 897.192195][T17699] veth5: entered promiscuous mode [ 897.197362][T17699] bond3: entered promiscuous mode [ 897.202463][T17699] macsec1: entered promiscuous mode [ 897.207781][T17699] erspan0.1: entered promiscuous mode [ 897.213339][T17699] ip6erspan0: entered promiscuous mode [ 897.218907][T17699] macsec2: entered promiscuous mode [ 897.224179][T17699] bond4: entered promiscuous mode [ 897.229314][T17699] bond5: entered promiscuous mode [ 897.234588][T17699] vxlan0: entered promiscuous mode [ 897.239897][T17699] ieee802154 phy1 wpan1: entered promiscuous mode [ 897.587218][ T30] audit: type=1400 audit(2000000230.940:1162): avc: denied { getopt } for pid=17712 comm="syz.2.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 897.986112][T13069] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 897.993844][T17718] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 898.005775][T17669] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 898.033270][T17718] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 898.049173][T17718] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 898.107921][T17669] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 898.124002][T17669] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 898.144997][T17669] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 898.190135][T13069] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 898.215284][T13069] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 898.240674][T13069] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 898.264919][T13069] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 898.289001][T13069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.309403][T13069] usb 3-1: Product: syz [ 898.318805][T13069] usb 3-1: Manufacturer: syz [ 898.329660][T13069] usb 3-1: SerialNumber: syz [ 898.343912][T13069] usb 3-1: config 0 descriptor?? [ 898.357453][T17714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 898.377074][T17714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 898.395873][T13069] usb 3-1: ucan: probing device on interface #0 [ 898.446147][ T5825] Bluetooth: hci2: command tx timeout [ 898.668643][T13069] usb 3-1: ucan: device protocol version 45315 is not supported [ 898.685671][T17739] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 898.692663][T13069] usb 3-1: ucan: probe failed; try to update the device firmware [ 898.915671][T17669] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 898.939007][T17669] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 898.958124][T17669] wireguard: wg0: Could not create IPv4 socket [ 898.968418][T17669] wireguard: wg1: Could not create IPv4 socket [ 898.978758][T17669] wireguard: wg2: Could not create IPv4 socket [ 899.026069][T13069] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 899.187970][T13069] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 899.204363][T13069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 899.215738][T13069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 899.225913][T13069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 899.239467][T13069] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.250285][T13069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.263712][T13069] usb 1-1: config 0 descriptor?? [ 899.697352][T13069] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 899.978378][T17190] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 900.153736][T17190] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 900.743993][ T30] audit: type=1400 audit(2000000233.590:1163): avc: denied { create } for pid=17795 comm="syz.3.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 900.747726][T17190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 900.778058][T17190] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 900.787280][T17190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.795534][T17190] usb 2-1: Product: syz [ 900.800262][T17190] usb 2-1: Manufacturer: syz [ 900.806026][T17190] usb 2-1: SerialNumber: syz [ 900.814289][T17190] usb 2-1: config 0 descriptor?? [ 900.828274][T17190] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 900.924542][T17190] usb 3-1: USB disconnect, device number 55 [ 901.701214][T17781] 9pnet_fd: Insufficient options for proto=fd [ 901.792295][T17818] bond6: option ad_actor_sys_prio: invalid value (0) [ 901.833916][T17818] bond6: option ad_actor_sys_prio: allowed values 1 - 65535 [ 901.847103][ T1207] usb 1-1: USB disconnect, device number 55 [ 901.892382][T17810] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3095'. [ 901.923804][T17818] bond6 (unregistering): Released all slaves [ 902.094672][ T5884] usb 2-1: USB disconnect, device number 82 [ 902.576077][ T5884] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 902.826063][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 902.835337][ T5884] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 902.849955][ T5884] usb 3-1: config 0 has no interface number 0 [ 902.865921][ T5884] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 902.960728][T17854] PKCS7: Unknown OID: [4] 0.0 [ 902.965608][T17854] PKCS7: Only support pkcs7_signedData type [ 902.975339][T17854] trusted_key: encrypted_key: insufficient parameters specified [ 903.336152][ T5884] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 903.347867][ T5884] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 903.396551][ T5884] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 903.430978][ T5884] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 903.465932][ T5884] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 903.493090][ T5884] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 903.516197][ T5884] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 903.527433][ T5884] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 903.542886][ T5884] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 903.552600][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.560799][ T5884] usb 3-1: Product: syz [ 903.565910][ T5884] usb 3-1: Manufacturer: syz [ 903.659917][ T5884] usb 3-1: SerialNumber: syz [ 903.672340][ T5884] usb 3-1: config 0 descriptor?? [ 903.688651][T17835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 903.702530][ T30] audit: type=1400 audit(2000000237.060:1164): avc: denied { create } for pid=17861 comm="syz.0.3103" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 903.702978][ T30] audit: type=1400 audit(2000000237.060:1165): avc: denied { associate } for pid=17861 comm="syz.0.3103" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 903.797404][ T5884] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 903.943655][T17868] netlink: 'syz.3.3104': attribute type 4 has an invalid length. [ 904.014819][T17835] pim6reg1: entered promiscuous mode [ 904.073580][T17835] pim6reg1: entered allmulticast mode [ 904.298702][ T30] audit: type=1400 audit(2000000237.270:1166): avc: denied { rmdir } for pid=5828 comm="syz-executor" name="bus" dev="tmpfs" ino=3173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 904.943584][ T5884] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 905.085648][T17877] batman_adv: batadv0: Adding interface: macvlan3 [ 905.106348][T17877] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.134472][ T5884] usb 3-1: USB disconnect, device number 56 [ 905.142057][T17877] batman_adv: batadv0: Interface activated: macvlan3 [ 905.172613][T17884] geneve4: entered promiscuous mode [ 905.177983][T17884] geneve4: entered allmulticast mode [ 908.047784][T17955] tmpfs: Unknown parameter 'quotaÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 908.543153][T15918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.550264][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 908.635061][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.673393][T15918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.686503][T15918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.699102][T15918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.709319][T15918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.722905][T17969] netlink: 'syz.2.3117': attribute type 5 has an invalid length. [ 908.780104][T17964] Failed to initialize the IGMP autojoin socket (err -2) [ 908.823580][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3117'. [ 908.857429][T17969] geneve2: entered promiscuous mode [ 908.865131][T17969] geneve2: entered allmulticast mode [ 909.486201][ T5884] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 909.516194][T17149] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 909.612105][T18003] Invalid logical block size (536870912) [ 909.636051][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 909.643315][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.667357][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.687044][T17149] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 909.704449][T17149] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 909.713449][ T5884] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 909.725061][T17149] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 909.735849][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.750227][T17149] usb 1-1: config 166 has no interface number 0 [ 909.759686][ T5884] usb 3-1: config 0 descriptor?? [ 909.776292][T17149] usb 1-1: config 166 has no interface number 1 [ 909.784021][ T5884] hub 3-1:0.0: USB hub found [ 909.796174][T17149] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 909.819291][T17149] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 909.836386][T17149] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 909.847744][T17149] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 909.859838][T17149] usb 1-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 909.880002][T17149] usb 1-1: config 166 interface 177 has no altsetting 0 [ 909.934381][T17149] usb 1-1: config 166 interface 34 has no altsetting 0 [ 910.107940][ T5884] hub 3-1:0.0: 1 port detected [ 910.122147][T17149] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 910.134567][T17149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.176048][T17149] usb 1-1: Product: syz [ 910.183886][T17149] usb 1-1: Manufacturer: syz [ 910.204973][T17149] usb 1-1: SerialNumber: syz [ 910.367549][T18014] fuse: Bad value for 'fd' [ 910.387474][T17964] netdevsim netdevsim4 netdevsim0: renamed from eth1 [ 910.400497][T18014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3121'. [ 910.429440][T17964] netdevsim netdevsim4 netdevsim1: renamed from eth2 [ 910.760986][T17964] netdevsim netdevsim4 netdevsim2: renamed from eth3 [ 910.846111][ T5825] Bluetooth: hci2: command tx timeout [ 910.884007][ T5884] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 910.897495][ T5884] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 910.928699][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 910.934816][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 910.940046][T17964] netdevsim netdevsim4 netdevsim3: renamed from eth4 [ 910.969049][T17149] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 911.437739][ T5884] usb 3-1: USB disconnect, device number 57 [ 911.529130][T17149] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 911.690297][T17149] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 911.710529][T17149] uvcvideo 1-1:166.34: No valid video chain found. [ 911.742516][T17149] usb 1-1: USB disconnect, device number 56 [ 911.776553][ T30] audit: type=1326 audit(2000000245.140:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 911.801436][T18045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3128'. [ 911.862422][ T30] audit: type=1326 audit(2000000245.140:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 911.909734][ T30] audit: type=1326 audit(2000000245.170:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 911.986323][ T30] audit: type=1326 audit(2000000245.170:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.083377][ T30] audit: type=1326 audit(2000000245.170:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.242926][ T30] audit: type=1326 audit(2000000245.170:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.266512][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.359635][T18067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3131'. [ 912.386044][ T30] audit: type=1326 audit(2000000245.170:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.437947][ T30] audit: type=1326 audit(2000000245.170:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.503115][ T30] audit: type=1326 audit(2000000245.210:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.546387][T17149] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 912.578622][ T30] audit: type=1326 audit(2000000245.210:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18044 comm="syz.3.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606eb8f749 code=0x7ffc0000 [ 912.602778][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.754538][T17149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.766019][T17149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.775856][T17149] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 912.802713][T17149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.840558][T17149] usb 1-1: config 0 descriptor?? [ 912.926051][ T5825] Bluetooth: hci2: command tx timeout [ 912.937083][T17964] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 913.016899][T17964] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 913.058159][T17964] wireguard: wg0: Could not create IPv4 socket [ 913.087215][T17964] wireguard: wg1: Could not create IPv4 socket [ 913.107667][T17964] wireguard: wg2: Could not create IPv4 socket [ 913.297341][T17149] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 913.336044][T17149] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 913.343422][T17149] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 913.457062][T17149] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 913.470680][T17149] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 913.495901][T18064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.975393][T17149] playstation 0003:054C:0DF2.0027: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 913.995391][T18064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.031750][T18132] 9pnet_virtio: no channels available for device syz [ 915.372297][T17149] playstation 0003:054C:0DF2.0027: Failed to retrieve feature with reportID 9: -71 [ 915.396030][T17149] playstation 0003:054C:0DF2.0027: Failed to retrieve DualSense pairing info: -71 [ 915.405322][T17149] playstation 0003:054C:0DF2.0027: Failed to get MAC address from DualSense [ 915.440097][T17149] playstation 0003:054C:0DF2.0027: Failed to create dualsense. [ 915.470252][T17149] playstation 0003:054C:0DF2.0027: probe with driver playstation failed with error -71 [ 915.534936][ T5825] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 916.330869][T17149] usb 1-1: USB disconnect, device number 57 [ 917.280798][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 917.291563][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 917.302021][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 917.309913][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 917.320912][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 917.351507][T18156] Failed to initialize the IGMP autojoin socket (err -2) [ 918.350457][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 918.360212][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 918.369744][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 918.396884][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 918.407430][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 918.694017][ T65] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 918.711152][ T65] bridge0 (unregistering): left promiscuous mode [ 919.036064][T17149] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 919.046975][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.058083][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.067705][ T65] bond0 (unregistering): Released all slaves [ 919.170599][ T65] bond1 (unregistering): Released all slaves [ 919.197787][T17149] usb 2-1: config 0 interface 0 has no altsetting 0 [ 919.204532][T17149] usb 2-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=6d.ea [ 919.214123][T17149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.237330][T17149] usb 2-1: config 0 descriptor?? [ 919.313715][ T65] bond2 (unregistering): Released all slaves [ 919.409397][T11751] Bluetooth: hci2: command tx timeout [ 919.428200][ T65] bond3 (unregistering): (slave veth3): Releasing active interface [ 919.437108][ T65] bond3 (unregistering): Released all slaves [ 919.445374][T18203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.454145][T18203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.563793][ T65] bond4 (unregistering): Released all slaves [ 919.671321][ T65] bond5 (unregistering): (slave veth5): Releasing active interface [ 919.680249][ T65] bond5 (unregistering): Released all slaves [ 919.790595][ T65] bond6 (unregistering): (slave veth7): Releasing active interface [ 919.799672][ T65] bond6 (unregistering): Released all slaves [ 919.909686][ T65] bond7 (unregistering): Released all slaves [ 919.953802][T18186] Failed to initialize the IGMP autojoin socket (err -2) [ 920.026041][ T65] : left promiscuous mode [ 920.114457][ T65] tipc: Left network mode [ 920.190595][T18214] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 920.206831][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 920.206848][ T30] audit: type=1400 audit(2000000253.570:1188): avc: denied { relabelfrom } for pid=18186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 920.527143][T11751] Bluetooth: hci4: command tx timeout [ 920.532932][ T30] audit: type=1400 audit(2000000253.730:1189): avc: denied { relabelto } for pid=18186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 921.033368][ T65] hsr_slave_0: left promiscuous mode [ 921.039825][ T65] hsr_slave_1: left promiscuous mode [ 921.046308][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.054835][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.063079][ T65] batman_adv: batadv0: Removing interface: macvlan2 [ 921.071240][ T65] batman_adv: batadv0: Removing interface: macvlan3 [ 921.486159][T11751] Bluetooth: hci2: command tx timeout [ 921.625803][T17149] usb 2-1: string descriptor 0 read error: -71 [ 921.675719][T17149] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 921.719925][T17149] usb 2-1: USB disconnect, device number 83 [ 923.180809][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3156'. [ 923.258607][T18238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3157'. [ 923.283670][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 923.294616][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 923.303685][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 923.313706][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 923.321997][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 923.351661][T18237] Failed to initialize the IGMP autojoin socket (err -2) [ 923.568399][T11751] Bluetooth: hci2: command tx timeout [ 924.004289][T18156] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 924.026406][T18156] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 924.045252][T18156] wireguard: wg0: Could not create IPv4 socket [ 924.053831][T18156] wireguard: wg1: Could not create IPv4 socket [ 924.061499][T18156] wireguard: wg2: Could not create IPv4 socket [ 925.009892][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3162'. [ 925.175239][T18285] input input28: cannot allocate more than FF_MAX_EFFECTS effects [ 925.349103][T18278] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3161'. [ 925.981825][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 925.992892][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 926.006083][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 926.192572][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 926.203113][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 926.451200][T18299] Failed to initialize the IGMP autojoin socket (err -2) [ 928.289727][ T5825] Bluetooth: hci2: command tx timeout [ 928.389425][T18357] batman_adv: batadv0: Adding interface: macvlan4 [ 928.396217][T18357] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.422053][T18357] batman_adv: batadv0: Interface activated: macvlan4 [ 928.486101][T13069] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 928.624050][T18361] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 928.637038][T13069] usb 3-1: Using ep0 maxpacket: 8 [ 928.658750][T13069] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 928.682627][T13069] usb 3-1: config 150 has no interface number 0 [ 928.689576][T13069] usb 3-1: config 150 interface 204 has no altsetting 0 [ 928.699152][T13069] usb 3-1: config 150 interface 1 has no altsetting 0 [ 928.708377][T13069] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 928.718245][T13069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.726655][T13069] usb 3-1: Product: syz [ 928.730932][T13069] usb 3-1: Manufacturer: syz [ 928.735701][T13069] usb 3-1: SerialNumber: syz [ 928.751606][T18361] 8021q: adding VLAN 0 to HW filter on device bond6 [ 928.782433][T18366] bond6: (slave veth7): Enslaving as an active interface with a down link [ 928.836244][T18361] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 929.545503][T13069] xr_serial 3-1:150.204: xr_serial converter detected [ 929.565862][T13069] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 929.572709][T13069] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 929.592925][T13069] usb 3-1: USB disconnect, device number 58 [ 929.609344][T13069] xr_serial 3-1:150.204: device disconnected [ 929.680847][T18394] affs: No valid root block on device nullb0 [ 930.026970][T18399] geneve3: entered promiscuous mode [ 930.037030][T18399] geneve3: entered allmulticast mode [ 930.104738][ T30] audit: type=1400 audit(2000000263.470:1190): avc: denied { ioctl } for pid=18403 comm="syz.1.3185" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 930.367709][ T5825] Bluetooth: hci2: command tx timeout [ 931.174545][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.289258][T18435] sg_write: data in/out 124/36 bytes for SCSI command 0xdd-- guessing data in; [ 931.289258][T18435] program syz.1.3192 not setting count and/or reply_len properly [ 931.311202][ T30] audit: type=1400 audit(2000000264.680:1191): avc: denied { block_suspend } for pid=18433 comm="syz.1.3192" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 931.603685][T11751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 931.613518][T11751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 931.622428][T11751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 931.630139][T11751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 931.637524][T11751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 931.695608][T18443] Failed to initialize the IGMP autojoin socket (err -2) [ 931.767595][T18299] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 931.798540][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 931.800207][T18299] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 931.847406][T18299] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 931.858057][T18299] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 932.417121][T18460] affs: No valid root block on device nullb0 [ 932.486897][ T5825] Bluetooth: hci2: command tx timeout [ 932.918637][T18475] Failed to initialize the IGMP autojoin socket (err -2) [ 932.931298][T18476] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 932.980775][T18479] syzkaller0: entered promiscuous mode [ 932.986353][T18479] syzkaller0: entered allmulticast mode [ 933.342625][T18486] 9pnet_fd: Insufficient options for proto=fd [ 933.839635][T11751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 933.850001][T11751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 933.858556][T11751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 934.106547][T11751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 934.132759][T11751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 934.237806][T18492] Failed to initialize the IGMP autojoin socket (err -2) [ 934.570926][T11751] Bluetooth: hci2: command tx timeout [ 934.608791][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 934.637198][T18505] netlink: 'syz.2.3202': attribute type 5 has an invalid length. [ 934.660986][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 934.751683][T18505] geneve2: entered promiscuous mode [ 934.757000][T18505] geneve2: entered allmulticast mode [ 935.007096][T18299] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 935.066135][T18299] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 935.196694][T18299] wireguard: wg0: Could not create IPv4 socket [ 935.217799][T18299] wireguard: wg1: Could not create IPv4 socket [ 935.229118][T18299] wireguard: wg2: Could not create IPv4 socket [ 935.610436][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 935.621978][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 935.630596][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 935.637670][T13069] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 935.652915][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 935.662785][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 935.710493][T18521] Failed to initialize the IGMP autojoin socket (err -2) [ 935.798250][T13069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.829755][T13069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.872701][T13069] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 935.892296][T13069] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 935.927457][T13069] usb 3-1: Manufacturer: syz [ 935.942273][T13069] usb 3-1: config 0 descriptor?? [ 936.636502][T18536] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 936.643033][T18536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 936.692021][T18536] vhci_hcd vhci_hcd.0: Device attached [ 936.726060][T18542] vhci_hcd: connection closed [ 936.726515][ T6132] vhci_hcd: stop threads [ 936.743407][ T6132] vhci_hcd: release socket [ 936.770675][ T6132] vhci_hcd: disconnect device [ 936.985337][ T30] audit: type=1400 audit(2000000270.350:1192): avc: denied { ioctl } for pid=18550 comm="syz.1.3208" path="socket:[64492]" dev="sockfs" ino=64492 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 937.065189][T13069] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input30 [ 937.133548][T18521] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 937.154125][T18521] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 937.158857][T13069] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0028/input/input31 [ 937.173021][T18521] wireguard: wg0: Could not create IPv4 socket [ 937.191512][T18521] wireguard: wg1: Could not create IPv4 socket [ 937.200335][T18521] wireguard: wg2: Could not create IPv4 socket [ 937.215185][T13069] uclogic 0003:256C:006D.0028: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 937.339835][ T24] usb 3-1: USB disconnect, device number 59 [ 937.535411][T18566] fido_id[18566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 939.010537][T18649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.000676][T18664] bridge5: entered promiscuous mode [ 940.005982][T18664] bridge5: entered allmulticast mode [ 940.284172][T18666] tmpfs: Bad value for 'mpol' [ 941.796017][T18655] syz.3.3211 (18655): drop_caches: 2 [ 941.822386][T18676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3216'. [ 941.918875][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.928783][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.937358][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.945495][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.953280][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.003327][T18675] Failed to initialize the IGMP autojoin socket (err -2) [ 943.276580][ T1207] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 943.436109][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 943.448535][ T1207] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.476264][ T1207] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.492302][ T1207] usb 2-1: config 0 interface 0 has no altsetting 0 [ 943.509947][ T1207] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 943.522910][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.533419][ T1207] usb 2-1: config 0 descriptor?? [ 943.575221][T18675] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 943.604424][T18675] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 943.622085][T18675] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 943.637393][T18675] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 943.848146][T18743] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 943.860878][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 943.949288][T18743] bond0: entered promiscuous mode [ 943.982357][T18743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.046126][T11751] Bluetooth: hci2: command tx timeout [ 944.087901][T18751] bond0: (slave bridge6): making interface the new active one [ 944.168693][T18751] bridge6: entered promiscuous mode [ 944.174857][T18751] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 945.065099][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.093900][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.103824][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.112247][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.127517][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.154843][T18770] Failed to initialize the IGMP autojoin socket (err -2) [ 945.339572][ T30] audit: type=1400 audit(2000000278.710:1193): avc: denied { write } for pid=18777 comm="syz.3.3227" path="socket:[65032]" dev="sockfs" ino=65032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 946.544130][T11751] Bluetooth: hci2: command tx timeout [ 947.162762][T18675] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 947.243279][T18675] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 947.303137][T18675] wireguard: wg0: Could not create IPv4 socket [ 947.328553][T18675] wireguard: wg1: Could not create IPv4 socket [ 947.361958][T18675] wireguard: wg2: Could not create IPv4 socket [ 947.669110][ T1207] usbhid 2-1:0.0: can't add hid device: -71 [ 947.675128][ T1207] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 947.749859][ T1207] usb 2-1: USB disconnect, device number 84 [ 948.082765][T18817] syz.2.3230 (18817): drop_caches: 2 [ 948.227131][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 948.266612][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.277854][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 948.286353][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 948.293730][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 948.376625][T18825] Failed to initialize the IGMP autojoin socket (err -2) [ 949.169029][T18847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3235'. [ 949.178427][T18847] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3235'. [ 950.380475][ T5825] Bluetooth: hci2: command tx timeout [ 950.954690][T18825] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 950.974859][T18825] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 950.995847][T18825] wireguard: wg0: Could not create IPv4 socket [ 951.004280][T18825] wireguard: wg1: Could not create IPv4 socket [ 951.013740][T18825] wireguard: wg2: Could not create IPv4 socket [ 952.348175][T18948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21092 sclass=netlink_audit_socket pid=18948 comm=syz.1.3239 [ 952.891658][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.904713][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.913515][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.921446][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.930547][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.960482][T18966] Failed to initialize the IGMP autojoin socket (err -2) [ 955.006189][ T5825] Bluetooth: hci2: command tx timeout [ 955.214350][T18999] 9pnet_fd: Insufficient options for proto=fd [ 957.159761][ T5825] Bluetooth: hci2: command tx timeout [ 958.638550][T19039] futex_wake_op: syz.1.3261 tries to shift op by -1; fix this program [ 959.176545][ T5825] Bluetooth: hci2: command tx timeout [ 960.031177][T19060] netlink: 'syz.2.3260': attribute type 1 has an invalid length. [ 960.042125][T18966] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 960.062821][T18966] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 960.100854][T19060] 8021q: adding VLAN 0 to HW filter on device bond4 [ 960.110766][T18966] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 960.143067][T18966] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 960.206959][T19060] bond4: (slave dummy0): Enslaving as an active interface with a down link [ 961.246056][ T5825] Bluetooth: hci2: command tx timeout [ 961.546773][T11751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.572561][T11751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.581604][T11751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.590651][T11751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.598501][T11751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 961.632984][T19100] Failed to initialize the IGMP autojoin socket (err -2) [ 961.706157][T17190] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 961.916154][T17190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 961.946021][T17190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 962.002050][T17190] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 962.015990][T17190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.056037][T17190] usb 4-1: Product: syz [ 962.060228][T17190] usb 4-1: Manufacturer: syz [ 962.064814][T17190] usb 4-1: SerialNumber: syz [ 962.206475][T17190] usb 4-1: config 0 descriptor?? [ 962.219175][T18966] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 962.702391][T18966] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 962.744649][T18966] wireguard: wg0: Could not create IPv4 socket [ 962.817943][T18966] wireguard: wg1: Could not create IPv4 socket [ 962.829228][T18966] wireguard: wg2: Could not create IPv4 socket [ 964.122290][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 964.137837][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 964.146956][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 964.155154][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 964.164416][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 964.237166][T19144] Failed to initialize the IGMP autojoin socket (err -2) [ 964.652392][T17190] usb 4-1: USB disconnect, device number 79 [ 964.708717][T19122] udevd[19122]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.777197][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 964.946075][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 964.983292][ T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 965.016752][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.060532][ T24] usb 2-1: Product: syz [ 965.069667][ T24] usb 2-1: Manufacturer: syz [ 965.074484][ T24] usb 2-1: SerialNumber: syz [ 965.087540][ T24] usb 2-1: config 0 descriptor?? [ 965.099735][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 965.396234][T19173] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 965.562099][T19156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.572242][T19156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.592093][ T24] gspca_se401: ExtraFeatures: 255 [ 965.602448][ T24] gspca_se401: Too many frame sizes [ 965.805679][T19188] 9pnet_virtio: no channels available for device syz [ 965.848777][ T1207] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 965.960775][T13069] usb 2-1: USB disconnect, device number 85 [ 966.116028][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 966.122693][ T1207] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 966.142127][ T1207] usb 4-1: config 0 has no interface number 0 [ 966.155899][ T1207] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 966.191359][ T1207] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 966.206106][T11751] Bluetooth: hci2: command tx timeout [ 966.216290][ T1207] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 966.228725][ T1207] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 966.256633][ T1207] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 966.283805][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.296788][ T1207] usb 4-1: config 0 descriptor?? [ 966.326365][ T1207] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 966.424046][T19144] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 966.445176][T19144] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 966.469045][T19144] wireguard: wg0: Could not create IPv4 socket [ 966.488402][T19144] wireguard: wg1: Could not create IPv4 socket [ 966.505476][T19144] wireguard: wg2: Could not create IPv4 socket [ 966.628322][T19210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.647631][T19210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.746611][T13069] usb 4-1: USB disconnect, device number 80 [ 966.774866][T19182] ldusb: No device or device unplugged -19 [ 966.774868][T13069] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 967.764009][T19275] netlink: 'syz.3.3279': attribute type 8 has an invalid length. [ 967.907849][ T30] audit: type=1400 audit(2000000301.270:1194): avc: denied { connect } for pid=19272 comm="syz.2.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 968.417557][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 968.804670][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 968.815267][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 968.823758][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 968.832766][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 968.840624][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 968.865574][T19304] Failed to initialize the IGMP autojoin socket (err -2) [ 969.888495][ T30] audit: type=1400 audit(2000000303.260:1195): avc: denied { read } for pid=19327 comm="syz.1.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 970.048874][T19336] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3289'. [ 970.896876][T19356] vlan0: entered promiscuous mode [ 970.901991][T19356] veth1_to_bridge: entered promiscuous mode [ 970.908597][T19356] vlan0: entered allmulticast mode [ 970.913829][T19356] veth1_to_bridge: entered allmulticast mode [ 970.927157][T11751] Bluetooth: hci2: command tx timeout [ 971.806210][T13069] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 972.531966][T19304] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 972.569575][T19304] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 972.601265][T19304] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 972.649700][T19304] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 973.006144][T11751] Bluetooth: hci2: command tx timeout [ 973.018026][T19402] loop8: detected capacity change from 0 to 8 [ 973.030060][T19402] Dev loop8: unable to read RDB block 8 [ 973.046044][T19402] loop8: unable to read partition table [ 973.051853][T19402] loop8: partition table beyond EOD, truncated [ 973.066001][T19402] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 973.501183][T19416] netlink: 'syz.1.3300': attribute type 1 has an invalid length. [ 973.725201][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 973.735522][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 973.744198][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 973.752051][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 973.759551][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 973.871946][T19421] Failed to initialize the IGMP autojoin socket (err -2) [ 974.136637][T19304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 974.234873][T19304] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 974.377706][T19304] wireguard: wg0: Could not create IPv4 socket [ 974.473278][T19304] wireguard: wg1: Could not create IPv4 socket [ 974.508424][T19304] wireguard: wg2: Could not create IPv4 socket [ 975.635688][T19479] netlink: 'syz.2.3303': attribute type 33 has an invalid length. [ 975.643536][T19479] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3303'. [ 976.141325][T19484] 9pnet_fd: p9_fd_create_unix (19484): problem connecting socket: ./cgroup: -30 [ 976.250944][T19491] netlink: 'syz.3.3307': attribute type 1 has an invalid length. [ 976.429959][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 976.446958][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.466501][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.474274][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.474767][T19491] 8021q: adding VLAN 0 to HW filter on device bond8 [ 976.484218][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 976.505207][T19491] bond7: (slave bond8): making interface the new active one [ 976.513078][T19491] bond7: (slave bond8): Enslaving as an active interface with an up link [ 976.587898][T19498] Failed to initialize the IGMP autojoin socket (err -2) [ 976.699545][T19506] libceph: resolve '0' (ret=-3): failed [ 977.262108][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 977.626121][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 977.756163][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 977.764618][ T24] usb 3-1: config 0 has no interface number 0 [ 977.771573][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 977.796383][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 977.805446][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.817478][ T24] usb 3-1: Product: syz [ 977.821697][ T24] usb 3-1: Manufacturer: syz [ 977.826625][ T24] usb 3-1: SerialNumber: syz [ 977.833968][ T24] usb 3-1: config 0 descriptor?? [ 978.074943][T19533] netlink: 'syz.1.3315': attribute type 4 has an invalid length. [ 978.152158][T19519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.166911][T19519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.388986][ T24] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 978.422007][T19541] syz.3.3316 (19541): drop_caches: 2 [ 978.454946][ T24] usb 3-1: USB disconnect, device number 60 [ 978.530869][T11751] Bluetooth: hci2: command tx timeout [ 979.539327][T19498] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 979.560557][T19498] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 979.593316][T19498] wireguard: wg0: Could not create IPv4 socket [ 979.604637][T19498] wireguard: wg1: Could not create IPv4 socket [ 979.615288][T19498] wireguard: wg2: Could not create IPv4 socket [ 980.487322][T19601] binder: BINDER_SET_CONTEXT_MGR already set [ 980.516040][T19601] binder: 19600:19601 ioctl 4018620d 2000000002c0 returned -16 [ 980.966144][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 981.170197][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 981.209775][ T24] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 981.231463][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 981.244726][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 981.254517][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 981.266370][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 981.274780][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.285203][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 981.308240][ T24] usb 3-1: config 0 descriptor?? [ 981.343276][T19618] Failed to initialize the IGMP autojoin socket (err -2) [ 981.397686][T19622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3322'. [ 981.725052][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.733671][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.782778][T14670] Bluetooth: hci4: Frame reassembly failed (-84) [ 983.241992][ T30] audit: type=1400 audit(2000000316.610:1196): avc: denied { bind } for pid=19655 comm="syz.3.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 983.271204][ T30] audit: type=1400 audit(2000000316.630:1197): avc: denied { setopt } for pid=19655 comm="syz.3.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 983.291725][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.329501][ T5825] Bluetooth: hci2: command tx timeout [ 983.806181][ T5825] Bluetooth: hci4: command 0x1003 tx timeout [ 983.807493][T11751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 983.897814][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 983.903827][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 983.943573][ T24] usb 3-1: USB disconnect, device number 61 [ 984.697462][T19618] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 984.719188][T19618] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 984.735235][T19618] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 984.752388][T19618] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 985.192390][T19618] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 985.213689][T19618] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 985.232478][T19618] wireguard: wg0: Could not create IPv4 socket [ 985.240917][T19618] wireguard: wg1: Could not create IPv4 socket [ 985.250643][T19618] wireguard: wg2: Could not create IPv4 socket [ 985.569207][ T30] audit: type=1400 audit(2000000318.890:1198): avc: denied { write } for pid=19723 comm="syz.1.3329" name="mouse0" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 985.592502][ C0] vkms_vblank_simulate: vblank timer overrun [ 986.888248][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.900638][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.909539][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.917767][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.925340][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 986.960450][T19740] Failed to initialize the IGMP autojoin socket (err -2) [ 988.719542][T19785] syz.1.3340 (19785): drop_caches: 2 [ 989.007352][ T5825] Bluetooth: hci2: command tx timeout [ 990.307381][ T30] audit: type=1400 audit(2000000323.670:1199): avc: denied { ioctl } for pid=19813 comm="syz.3.3343" path="socket:[71242]" dev="sockfs" ino=71242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 990.609837][T19740] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 990.727097][T19740] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 990.808793][T19740] wireguard: wg0: Could not create IPv4 socket [ 990.844000][T19740] wireguard: wg1: Could not create IPv4 socket [ 990.885663][T19740] wireguard: wg2: Could not create IPv4 socket [ 990.903743][ T30] audit: type=1400 audit(2000000324.270:1200): avc: denied { ioctl } for pid=19823 comm="syz.2.3346" path="socket:[71265]" dev="sockfs" ino=71265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 992.411486][T19825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3346'. [ 992.614056][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.979573][T11751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.990627][T11751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 995.007225][T11751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 995.017523][T11751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 995.031739][T11751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 995.083165][T19992] Failed to initialize the IGMP autojoin socket (err -2) [ 995.604474][T19992] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 995.618005][T19992] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 995.630522][T19992] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 995.641275][T19992] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 996.554424][T20023] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3353'. [ 996.563897][T20023] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3353'. [ 997.088400][ T5825] Bluetooth: hci2: command tx timeout [ 997.163550][T11751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.174803][T11751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.184829][T11751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.193321][T11751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.200996][T11751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 997.226152][T19992] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 997.415272][T19992] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 997.584616][T19992] wireguard: wg0: Could not create IPv4 socket [ 997.597354][T20029] Failed to initialize the IGMP autojoin socket (err -2) [ 997.605620][T19992] wireguard: wg1: Could not create IPv4 socket [ 997.650225][T19992] wireguard: wg2: Could not create IPv4 socket [ 998.116034][ T1207] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 998.278727][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.310057][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.336499][ T1207] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 998.346050][ T1207] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 998.354186][ T1207] usb 2-1: Manufacturer: syz [ 998.364003][ T1207] usb 2-1: config 0 descriptor?? [ 999.205213][ T30] audit: type=1326 audit(2000000332.570:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20043 comm="syz.1.3361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36ea18f749 code=0x0 [ 999.362515][ T1207] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #200: -71 [ 999.381999][ T1207] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 999.392019][ T1207] uclogic 0003:256C:006D.0029: failed probing pen v2 parameters: -71 [ 999.401052][ T1207] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 999.408798][ T1207] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71 [ 999.436231][ T1207] usb 2-1: USB disconnect, device number 86 [ 1000.353568][T15918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1000.363703][T15918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1000.372274][T15918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1000.380092][T15918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1000.388657][T15918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1000.424428][T20103] Failed to initialize the IGMP autojoin socket (err -2) [ 1001.315504][T20141] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1001.764940][T20103] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1001.798184][T20103] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1001.909371][T20103] wireguard: wg0: Could not create IPv4 socket [ 1001.918109][T20103] wireguard: wg1: Could not create IPv4 socket [ 1001.927592][T20103] wireguard: wg2: Could not create IPv4 socket [ 1003.164600][T20218] autofs: Unknown parameter 'tr0xffffffffffffffff' [ 1003.416100][ T1207] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1003.544756][T20235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3379'. [ 1003.857399][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.870867][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.020904][T20240] netlink: 'syz.2.3380': attribute type 1 has an invalid length. [ 1004.164404][ T1207] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1004.174187][ T1207] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1004.204507][ T1207] usb 2-1: Manufacturer: syz [ 1004.218065][ T1207] usb 2-1: config 0 descriptor?? [ 1004.440839][T15918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1004.451947][T15918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1004.469145][T15918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1004.477587][T15918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1004.586702][ T30] audit: type=1400 audit(2000000337.930:1202): avc: denied { getopt } for pid=20221 comm="syz.1.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1004.978821][T15918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.012122][T20245] Failed to initialize the IGMP autojoin socket (err -2) [ 1005.510515][ T1207] usbhid 2-1:0.0: can't add hid device: -32 [ 1005.528934][ T1207] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1007.007229][T15918] Bluetooth: hci2: command tx timeout [ 1007.121290][ T1207] usb 2-1: USB disconnect, device number 87 [ 1008.385470][T20245] netdevsim netdevsim4 netdevsim0: renamed from eth5 [ 1008.403258][T20245] netdevsim netdevsim4 netdevsim1: renamed from eth6 [ 1008.425163][T20245] netdevsim netdevsim4 netdevsim2: renamed from eth7 [ 1008.442609][T20245] netdevsim netdevsim4 netdevsim3: renamed from eth8 [ 1008.887193][T20245] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1008.908455][T20245] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1008.927633][T20245] wireguard: wg0: Could not create IPv4 socket [ 1008.936707][T20245] wireguard: wg1: Could not create IPv4 socket [ 1008.944956][T20245] wireguard: wg2: Could not create IPv4 socket [ 1009.007188][T20245] [ 1009.009536][T20245] ====================================================== [ 1009.016532][T20245] WARNING: possible circular locking dependency detected [ 1009.023542][T20245] syzkaller #0 Not tainted [ 1009.027949][T20245] ------------------------------------------------------ [ 1009.034956][T20245] syz-executor/20245 is trying to acquire lock: [ 1009.041210][T20245] ffff88807ae2b840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 1009.052762][T20245] [ 1009.052762][T20245] but task is already holding lock: [ 1009.060126][T20245] ffff88807ae2bb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1009.068998][T20245] [ 1009.068998][T20245] which lock already depends on the new lock. [ 1009.068998][T20245] [ 1009.079388][T20245] [ 1009.079388][T20245] the existing dependency chain (in reverse order) is: [ 1009.088394][T20245] [ 1009.088394][T20245] -> #1 (&conn->lock#2){+.+.}-{4:4}: [ 1009.095853][T20245] __mutex_lock+0x193/0x1060 [ 1009.100950][T20245] l2cap_info_timeout+0x79/0xa0 [ 1009.106307][T20245] process_one_work+0x9cf/0x1b70 [ 1009.111833][T20245] worker_thread+0x6c8/0xf10 [ 1009.116936][T20245] kthread+0x3c5/0x780 [ 1009.121513][T20245] ret_from_fork+0x675/0x7d0 [ 1009.126598][T20245] ret_from_fork_asm+0x1a/0x30 [ 1009.131862][T20245] [ 1009.131862][T20245] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}: [ 1009.142084][T20245] __lock_acquire+0x126f/0x1c90 [ 1009.147430][T20245] lock_acquire+0x179/0x350 [ 1009.152430][T20245] __flush_work+0x4e4/0xcc0 [ 1009.157431][T20245] __cancel_work_sync+0x10c/0x130 [ 1009.162954][T20245] l2cap_conn_del+0x5af/0x730 [ 1009.168140][T20245] l2cap_disconn_cfm+0x96/0xd0 [ 1009.173407][T20245] hci_conn_hash_flush+0x10e/0x260 [ 1009.179017][T20245] hci_dev_close_sync+0x602/0x11d0 [ 1009.184626][T20245] hci_dev_do_close+0x2e/0x90 [ 1009.189798][T20245] hci_unregister_dev+0x227/0x640 [ 1009.195325][T20245] vhci_release+0x17d/0x230 [ 1009.200335][T20245] __fput+0x402/0xb70 [ 1009.204907][T20245] task_work_run+0x150/0x240 [ 1009.209997][T20245] do_exit+0x86f/0x2bf0 [ 1009.214656][T20245] do_group_exit+0xd3/0x2a0 [ 1009.219667][T20245] __x64_sys_exit_group+0x3e/0x50 [ 1009.225196][T20245] x64_sys_call+0x150b/0x1730 [ 1009.230377][T20245] do_syscall_64+0xcd/0xfa0 [ 1009.235382][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.241865][T20245] [ 1009.241865][T20245] other info that might help us debug this: [ 1009.241865][T20245] [ 1009.252064][T20245] Possible unsafe locking scenario: [ 1009.252064][T20245] [ 1009.259487][T20245] CPU0 CPU1 [ 1009.264827][T20245] ---- ---- [ 1009.270163][T20245] lock(&conn->lock#2); [ 1009.274387][T20245] lock((work_completion)(&(&conn->info_timer)->work)); [ 1009.283907][T20245] lock(&conn->lock#2); [ 1009.290652][T20245] lock((work_completion)(&(&conn->info_timer)->work)); [ 1009.297651][T20245] [ 1009.297651][T20245] *** DEADLOCK *** [ 1009.297651][T20245] [ 1009.305776][T20245] 5 locks held by syz-executor/20245: [ 1009.311122][T20245] #0: ffff888067800dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1009.320676][T20245] #1: ffff8880678000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1009.330307][T20245] #2: ffffffff9035bfc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1009.340368][T20245] #3: ffff88807ae2bb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1009.349674][T20245] #4: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 1009.358784][T20245] [ 1009.358784][T20245] stack backtrace: [ 1009.364650][T20245] CPU: 1 UID: 0 PID: 20245 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1009.364668][T20245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.364676][T20245] Call Trace: [ 1009.364683][T20245] [ 1009.364688][T20245] dump_stack_lvl+0x116/0x1f0 [ 1009.364702][T20245] print_circular_bug+0x275/0x350 [ 1009.364724][T20245] check_noncircular+0x14c/0x170 [ 1009.364746][T20245] __lock_acquire+0x126f/0x1c90 [ 1009.364761][T20245] lock_acquire+0x179/0x350 [ 1009.364773][T20245] ? __flush_work+0x4d0/0xcc0 [ 1009.364788][T20245] ? mark_held_locks+0x49/0x80 [ 1009.364800][T20245] ? __flush_work+0x4d0/0xcc0 [ 1009.364815][T20245] __flush_work+0x4e4/0xcc0 [ 1009.364829][T20245] ? __flush_work+0x4d0/0xcc0 [ 1009.364844][T20245] ? detach_if_pending+0x1f1/0x280 [ 1009.364865][T20245] ? __pfx___flush_work+0x10/0x10 [ 1009.364881][T20245] ? __pfx_wq_barrier_func+0x10/0x10 [ 1009.364903][T20245] ? __pfx___might_resched+0x10/0x10 [ 1009.364920][T20245] ? __pfx___mutex_lock+0x10/0x10 [ 1009.364934][T20245] __cancel_work_sync+0x10c/0x130 [ 1009.364950][T20245] l2cap_conn_del+0x5af/0x730 [ 1009.364966][T20245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1009.364981][T20245] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1009.364997][T20245] l2cap_disconn_cfm+0x96/0xd0 [ 1009.365013][T20245] hci_conn_hash_flush+0x10e/0x260 [ 1009.365028][T20245] hci_dev_close_sync+0x602/0x11d0 [ 1009.365042][T20245] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1009.365056][T20245] ? up_write+0x1b2/0x520 [ 1009.365070][T20245] hci_dev_do_close+0x2e/0x90 [ 1009.365083][T20245] hci_unregister_dev+0x227/0x640 [ 1009.365098][T20245] vhci_release+0x17d/0x230 [ 1009.365112][T20245] ? __pfx_vhci_release+0x10/0x10 [ 1009.365124][T20245] __fput+0x402/0xb70 [ 1009.365142][T20245] task_work_run+0x150/0x240 [ 1009.365157][T20245] ? __pfx_task_work_run+0x10/0x10 [ 1009.365174][T20245] do_exit+0x86f/0x2bf0 [ 1009.365194][T20245] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.365208][T20245] ? __pfx_do_exit+0x10/0x10 [ 1009.365228][T20245] ? rcu_is_watching+0x12/0xc0 [ 1009.365246][T20245] do_group_exit+0xd3/0x2a0 [ 1009.365266][T20245] __x64_sys_exit_group+0x3e/0x50 [ 1009.365286][T20245] x64_sys_call+0x150b/0x1730 [ 1009.365304][T20245] do_syscall_64+0xcd/0xfa0 [ 1009.365317][T20245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.365331][T20245] RIP: 0033:0x7f2aad18f749 [ 1009.365341][T20245] Code: Unable to access opcode bytes at 0x7f2aad18f71f. [ 1009.365347][T20245] RSP: 002b:00007ffd7dbabc08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1009.365360][T20245] RAX: ffffffffffffffda RBX: 00007f2aad214e56 RCX: 00007f2aad18f749 [ 1009.365368][T20245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1009.365376][T20245] RBP: 00007f2aad1f0858 R08: 00007ffd7dba99a7 R09: 000000000000002e [ 1009.365385][T20245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1009.365397][T20245] R13: 000000000000002e R14: 00007ffd7dbabd42 R15: 0000000000000025 [ 1009.365410][T20245] [ 1009.667146][T15918] Bluetooth: hci2: command tx timeout [ 1009.752173][ T30] audit: type=1400 audit(2000000343.020:1203): avc: denied { write } for pid=5796 comm="syz-executor" path="pipe:[4776]" dev="pipefs" ino=4776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1010.249826][T14454] syz_tun (unregistering): left allmulticast mode [ 1010.729856][ T6132] bridge_slave_1: left allmulticast mode [ 1010.735524][ T6132] bridge_slave_1: left promiscuous mode [ 1010.756309][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.764412][ T6132] bridge_slave_0: left allmulticast mode [ 1010.778689][ T6132] bridge_slave_0: left promiscuous mode [ 1010.784360][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.942403][ T6132] dvmrp6 (unregistering): left allmulticast mode [ 1011.085104][ T6132] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1011.258013][ T6132] bond0 (unregistering): (slave bridge6): Releasing backup interface [ 1011.267806][ T6132] bridge6 (unregistering): left promiscuous mode [ 1011.396303][ T6132] bond1 (unregistering): Released all slaves [ 1011.503693][ T6132] bond2 (unregistering): Released all slaves [ 1011.513162][ T6132] bond3 (unregistering): Released all slaves [ 1011.524471][ T6132] bond0 (unregistering): Released all slaves [ 1011.635511][ T6132] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1011.644666][ T6132] bond4 (unregistering): Released all slaves [ 1011.654404][ T6132] bond5 (unregistering): Released all slaves [ 1012.010294][ T6132] hsr_slave_0: left promiscuous mode [ 1012.016258][ T6132] hsr_slave_1: left promiscuous mode [ 1012.770801][ T6132] IPVS: stop unused estimator thread 0... [ 1013.269721][ T6132] bridge_slave_1: left allmulticast mode [ 1013.276538][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.284936][ T6132] bridge_slave_0: left allmulticast mode [ 1013.292352][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.303398][ T6132] bridge_slave_1: left allmulticast mode [ 1013.309143][ T6132] bridge_slave_1: left promiscuous mode [ 1013.314799][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.323314][ T6132] bridge_slave_0: left allmulticast mode [ 1013.329015][ T6132] bridge_slave_0: left promiscuous mode [ 1013.334660][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.595597][ T6132] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1013.651548][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.661235][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.671140][ T6132] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1013.679966][ T6132] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1013.689185][ T6132] bond0 (unregistering): Released all slaves [ 1013.789365][ T6132] bond1 (unregistering): Released all slaves [ 1013.893109][ T6132] bond2 (unregistering): (slave veth5): Releasing active interface [ 1013.901668][ T6132] bond2 (unregistering): Released all slaves [ 1013.999173][ T6132] bond3 (unregistering): Released all slaves [ 1014.008941][ T6132] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1014.017576][ T6132] bond4 (unregistering): Released all slaves [ 1014.117132][ T6132] bond5 (unregistering): Released all slaves [ 1014.288545][ T6132] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1014.375418][ T6132] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1014.383709][ T6132] bridge3 (unregistering): left promiscuous mode [ 1014.518848][ T6132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.533304][ T6132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.545288][ T6132] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1014.556048][ T6132] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1014.569727][ T6132] bond0 (unregistering): Released all slaves [ 1014.671071][ T6132] bond1 (unregistering): Released all slaves [ 1014.768281][ T6132] bond2 (unregistering): Released all slaves [ 1014.867784][ T6132] bond3 (unregistering): Released all slaves [ 1014.959038][ T6132] bond4 (unregistering): Released all slaves [ 1015.054639][ T6132] bond5 (unregistering): Released all slaves [ 1015.159197][ T6132] bond6 (unregistering): (slave veth7): Releasing active interface [ 1015.167971][ T6132] bond6 (unregistering): Released all slaves [ 1015.178225][ T6132] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1015.188839][ T6132] bond7 (unregistering): Released all slaves [ 1015.460204][ T6132] bond8 (unregistering): Released all slaves [ 1015.601741][ T6132] : left promiscuous mode [ 1016.129320][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.139096][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.146683][ T6132] batman_adv: batadv0: Removing interface: macvlan2 [ 1016.153460][ T6132] batman_adv: batadv0: Removing interface: macsec1 [ 1016.160392][ T6132] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1016.167649][ T6132] batman_adv: batadv0: Removing interface: macvlan3 [ 1016.174687][ T6132] batman_adv: batadv0: Interface deactivated: macvlan4 [ 1016.181688][ T6132] batman_adv: batadv0: Removing interface: macvlan4 [ 1016.190230][ T6132] hsr_slave_0: left promiscuous mode [ 1016.195733][ T6132] hsr_slave_1: left promiscuous mode [ 1016.201271][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.208735][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.216080][ T6132] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1016.222912][ T6132] batman_adv: batadv0: Removing interface: macvlan2