last executing test programs: 11m18.583262375s ago: executing program 0 (id=455): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[]) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) inotify_init() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090020a602170076b4f33ead63c3a7ff00000002be0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000001000000000000000000000000005100", @ANYRES16=r1, @ANYBLOB="0002003400000000b7080000000000ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000110000009500000000000000baf5139e6f0f6efad30b1302b7039a4118a8984d5514cd35c6004e0f1ce6745482abe1f3020cc475408d1931019328ba1aacd9a3995d4cf5f7419fe00adf67d2844d3757d3040f7d7b2e64efd85500b7b95553071435a954ad5ed51e0b11e4eca81e17164f42951abb0f9c0e6b240e063aa9e92d8aa849d09fecb9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3}, &(0x7f00000002c0), &(0x7f0000000340)='%ps \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000280)=0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x2007) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 11m13.866449955s ago: executing program 0 (id=471): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rfcomm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11m10.402304142s ago: executing program 0 (id=485): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60040050) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x3, 0x83c, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7b, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010fe80)={0x10001, [], 0x8, "0cc5c2b3512463"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x20000010) 11m9.612985813s ago: executing program 0 (id=488): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) keyctl$revoke(0x3, 0x0) 11m5.562476378s ago: executing program 0 (id=506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x161) mount$fuse(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r4}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r5 = syz_open_pts(r2, 0x101000) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m3.864142887s ago: executing program 0 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60040050) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x3, 0x83c, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7b, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010fe80)={0x10001, [], 0x8, "0cc5c2b3512463"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x20000010) 10m48.78287882s ago: executing program 32 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60040050) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x3, 0x83c, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7b, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010fe80)={0x10001, [], 0x8, "0cc5c2b3512463"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x20000010) 12.765275007s ago: executing program 1 (id=2931): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000140)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod(0x0, 0x1, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r2, 0x0, 0x427) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$I2C(0x0, 0x3, 0x400) socket(0x10, 0x3, 0x0) add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 11.787746691s ago: executing program 2 (id=2934): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040)=0xc08, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000030000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0) 10.053815735s ago: executing program 3 (id=2939): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x4) writev(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 9.137369486s ago: executing program 1 (id=2944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000f5000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000005010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 9.024022048s ago: executing program 1 (id=2946): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x20000001}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002f40)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 9.02078536s ago: executing program 3 (id=2947): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xf0ffff}, 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="260000000743f35261eeae9b220f5af87f1a1f8fe1b3a27d41838d0cb1a544dba9e9234e341c99598360c998d5db9760f07aefdb42be89c82b8feebb401cc655b2209551a2d480a082262ea1e0308e87677d7c9085a4d003286639563aa90dbd3e1f55074ff089699eebf25383bcc6d3522473379860607473685e5d25cf959a8ef5b6a3e153ed58b4ff7d6dc3f3fc142435738d77ba245fb3"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001000100000000000000024b0000000000000000000008000200ac1414aa"], 0x24}}, 0x2400c044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6.556172638s ago: executing program 3 (id=2949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffffb, 0x0, 0x7, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x80000001, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x8000000000000000, 0x1, 0x4], 0xf000, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x0, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x1, 0xffffffffffffffff, 0xfffffffffffffab2, 0x7, 0x5, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/167, 0xa7}], 0x1) io_uring_enter(r3, 0x54, 0x0, 0x0, 0x0, 0x0) 6.406271619s ago: executing program 2 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000001000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0xffffffbf, 0x3, 0x0, 'queue1\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4.601984764s ago: executing program 2 (id=2952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000006000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000500)={0xffffffbf, 0x3, 0x0, 'queue1\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4.539870549s ago: executing program 1 (id=2953): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x40, 0x30, 0x7, {0x27, 0x1, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.380550898s ago: executing program 3 (id=2955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0904000000000000fff5020000000900010073797a30000000000900020073797a3200000000380000001c0a050000000000000000000200000a0c000340000f0000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 3.278447555s ago: executing program 2 (id=2957): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() semget(0x1, 0x4, 0x444) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x9d, 0x0, 0x804}, 0x0) 2.665526828s ago: executing program 3 (id=2958): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x844) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x49, 0x1003ff}, 0xffffffff, 0x7}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x130, 0x0, 0x130, 0x200, 0x130, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x48}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0x0, 'lo\x00', 'lo\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x80, 0x3}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@ip={@empty, @multicast2, 0xff, 0xffffff00, 'vlan1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff39, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000100000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r9, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=r2, @ANYRES16=r11, @ANYBLOB="090800000000ffdbdf25010000000800e5fd", @ANYBLOB="389e52ab3367bd45711b5da1be78b1ceedcc34d9c500af00017b83dc6f63ac1686848d", @ANYBLOB="440002f7f00001002400010071756575655f6964000000000000000000000000000000000000020000000000f5d6c6385e2a58ca08000400f000008008007098719048d4969353686f91eabc4d0d555194eb4e7531c7af6b2eaff4ff02d00b7d64add5e36d5dc6d0493b7d53e379ef2d3d5eaa969a28898a5994d6f2e90b8d4bdd5ec25728e2b0a5227d8605f18acf21dfc4c9a8cfe394f915e5fa3d621a16412f22f9982f9e9d61ff3220a45573fe0eda75a691b9", @ANYRES32=r10, @ANYBLOB="23ff04562a1006a8af0703832837431574b78256c01eaf3174767222609ca5d98954fc2164600a16702515965993b347819d24e3d080"], 0x60}, 0x1, 0x0, 0x0, 0x14000}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x80, 0x8, 0xfffffff7, 0x60808, 0xffffffffffffffff, 0x7fffffff, '\x00', r10, r5, 0x3, 0x4, 0x2, 0x7}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$TIOCCBRK(r0, 0x5428) r12 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x35315842, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x4af}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x200, 0x17}], 0x7b, 0x2, 0x3, 0x2, 0x4}}) r13 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r13, 0x80079a0) lseek(r13, 0x0, 0x4) r14 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r14, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000071"], 0x18}, 0x810) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0xac, 0x0, 0x912, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xffffffffffffffbc}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000) 2.420225308s ago: executing program 3 (id=2959): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x4, 0x1, 0x9}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) syz_usb_connect(0x6, 0x201, &(0x7f0000000640)=ANY=[], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000640)={0x9, 0xc}) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1068, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xc97141a55a0b5085, 0x0) read$msr(r9, &(0x7f0000032680)=""/102392, 0x18ff8) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300080009210000000122070009058103"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000600)=0x1) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000040)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="4006070000000721000d581d53ebb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.302363687s ago: executing program 4 (id=2960): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000014c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x66646185, 0xa, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x48, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.192463151s ago: executing program 4 (id=2961): socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400001807fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.046352182s ago: executing program 4 (id=2963): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, 0x0, &(0x7f00000000c0)) epoll_create1(0x0) syz_emit_vhci(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='.\x00', 0x1) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x80000, 0x2) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local, 0x80000001}, 0x1c) connect$inet6(r2, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0000000130001ffe18f6bcad3e1489944b20971c4f816f8b5ae7fd8818dc8dc6d1f1006192590a86a083bead859a5"], 0xe0}, 0x1, 0x0, 0x0, 0x42000000}, 0x0) 1.487773136s ago: executing program 5 (id=2964): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') (async, rerun: 64) getpid() (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0xe0}}, 0x0) 813.101688ms ago: executing program 4 (id=2965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000095bf000000000000000000000000000000000000000000200000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000005a00000000000000000000003c00000000000000ffffffff000000000000000000000000020000000403"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001002bbd7000fffffffffc0200000000000000003a00000000006401010200000000000000000000000000000000000000020a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000ffffffff100000000000000000000000fe8800000000000000000000000001010a0101000000000000000000000000003c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 750.382976ms ago: executing program 5 (id=2966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1b, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500006900", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 733.039667ms ago: executing program 4 (id=2967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000300)="f698", 0x2, 0xdde30d256756fc9b, &(0x7f00000004c0)={0xa, 0x4e21, 0x3, @mcast2}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r3 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc}}}}}}, 0x0) 721.067451ms ago: executing program 2 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0xc5cb}], 0x1, 0x0, 0x0, 0x0) close(r1) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r3, r4}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2a, 0x5, {0x1d, 0x1, 0x7}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "72682b14f653e1a8"}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008030) 598.364574ms ago: executing program 5 (id=2969): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xe6, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) 561.662063ms ago: executing program 5 (id=2970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000040a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) 511.66686ms ago: executing program 4 (id=2971): socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r2, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) (async, rerun: 32) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) (async) r4 = dup(0xffffffffffffffff) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r5, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x0, @generic}], 0x8) (async) write$6lowpan_enable(r4, 0x0, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}, @in=@multicast2, {@in6=@dev, @in6=@dev, 0x0, 0x1, 0x0, 0x9, 0x2, 0x0, 0x20}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6}}}, [@tmpl={0x44, 0x8, [{{@in=@local}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async, rerun: 64) r8 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (rerun: 32) 386.343508ms ago: executing program 5 (id=2972): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000014c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x66646185, 0xa, 0x4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x48, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 206.954683ms ago: executing program 1 (id=2973): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) readv(r2, &(0x7f0000002700)=[{&(0x7f0000001180)=""/250, 0xfa}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {}, {0x0, 0x20000000}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 205.709699ms ago: executing program 2 (id=2974): r0 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000380)=""/45) msgsnd(r0, &(0x7f0000000240)=ANY=[], 0x31, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) syz_emit_ethernet(0x4e, &(0x7f0000000b40)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x7, 0xd5, [@multicast1]}, @timestamp={0x44, 0x4, 0xdf}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) fsopen(&(0x7f00000001c0)='binder\x00', 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000280)={0xf0f022}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) readv(r3, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1) shutdown(r3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000090) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r6, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) 99.160092ms ago: executing program 5 (id=2975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000013030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000e4030000060a010400000000000000000100000008000b4000000000bc030480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000840301800c000100626974776973650074030280080003400000000208000140000000140800024000000012500305806800028008000180fffffffe0900020073797a300000000008000340000000010900020073797a31000000000900020073797a320000000008000180fffffffb0900020073797a300000000008000180fffffffe08000340000000020900020073797a3200000000a70001006c09036006e24be9a48cbb620114125f07ea1ab8513a1ab20eb61d4a4246c9f7ac8937e820e70fa65fcc17319ca3db0ae70a0838112dac5872e11ebc2ddc20c5ca79f4cb4497397584c4c8d01e9e139a72484129230f35d82c064935525e1a2310f27341b0036ce7ee1108ad5d972ee9cf56f3839cbe025b50b21059dc9731e028e9c02d95d8f951101dd5f179f7a884c4c7337fb1d56552f236b4b06ade871164bcd500640002800900020073797a310000000008000180fffffffb0900020073797a31000000000900020073797a32000000000900020073797a3100000000080001800000000008000340000000010900020073797a31000000000900020073797a3000000000aa000100db85ec8eae5ba8a565310975e527c5f5d60a2e3e1881751d4d4468a4784ee11c9ef600d76c3db867b8039eb9441a2120161ef09ff15a9d57a57c55982f49db8fcb9bb742c0508fcab01d9235a10218d7c3eba60319d9c7103d101dc755975e271ea9bfb2bbfff3c5d8f62009f4e6fe965ada258dbf18a344d66a040d6128cd0f8337d5a43dc450eb79fb4c7df580065976322c87912340ad458b94f72002a8884d3836d2b6b5000014000100c9ab0c5e4e3c8e298806e645996368bb018000000000000000000001080003400000000208000180fffffffc0900020073797a3200000000ef00010052d9fc0fee7bb5b82644e7ecdda879e098bbf83eedb57eb1890629a14c964e4dcd93fec4afd7aa1386e0dd8dc000627451a8a3fcbab94ea5c15b19187e649cd520084c675fbe4893753c58f057a9b34f76814edeadcf58cc86a31ab0e0a514312b619ad250aee2c2634cf6a4db3047035db85a0e4b3941a9e3170dd6315fdf02849cb01a2f724578a260cedb5626eb40cfa223153d26a2d178aa2ff12255477cdadbc6a18217eb06bbfd74b1e46d64042666258e64c82a6d2e27b74ec4a625cc5b1a696cf464aed77ab57d50dd83a702219122170dacc79ba1588dda8d8ccaebe09f2277512023e23081650008000640000000030900010073797a30"], 0x458}}, 0x0) 0s ago: executing program 1 (id=2976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x700, 0x0, 0x200000000530, 0x200000000560], 0x700, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) kernel console output (not intermixed with test programs): 66.468814][ T5914] usb 3-1: SerialNumber: syz [ 666.495634][ T5914] usb 3-1: config 0 descriptor?? [ 666.611981][ T5913] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 666.662715][ T5913] usb 2-1: device descriptor read/8, error -71 [ 667.011899][T14265] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2165'. [ 667.425397][ T5913] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 667.485423][ T5913] usb 2-1: device descriptor read/8, error -71 [ 667.622981][ T5913] usb usb2-port1: unable to enumerate USB device [ 667.860828][T14240] sch_fq: defrate 4294967295 ignored. [ 668.507765][T14277] FAULT_INJECTION: forcing a failure. [ 668.507765][T14277] name failslab, interval 1, probability 0, space 0, times 0 [ 668.520479][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.4.2170 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 668.520504][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 668.520514][T14277] Call Trace: [ 668.520520][T14277] [ 668.520526][T14277] dump_stack_lvl+0x16c/0x1f0 [ 668.520556][T14277] should_fail_ex+0x512/0x640 [ 668.520583][T14277] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 668.520610][T14277] should_failslab+0xc2/0x120 [ 668.520637][T14277] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 668.520661][T14277] ? __alloc_skb+0x2b2/0x380 [ 668.520684][T14277] ? rcu_is_watching+0x12/0xc0 [ 668.520709][T14277] __alloc_skb+0x2b2/0x380 [ 668.520731][T14277] ? __pfx___alloc_skb+0x10/0x10 [ 668.520756][T14277] ? netlink_alloc_large_skb+0x33/0x130 [ 668.520780][T14277] netlink_alloc_large_skb+0x69/0x130 [ 668.520800][T14277] netlink_sendmsg+0x6a1/0xdd0 [ 668.520822][T14277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.520850][T14277] ____sys_sendmsg+0xa95/0xc70 [ 668.520869][T14277] ? copy_msghdr_from_user+0x10a/0x160 [ 668.520893][T14277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.520923][T14277] ___sys_sendmsg+0x134/0x1d0 [ 668.520949][T14277] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.520970][T14277] ? __lock_acquire+0x622/0x1c90 [ 668.521019][T14277] __sys_sendmsg+0x16d/0x220 [ 668.521044][T14277] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.521084][T14277] do_syscall_64+0xcd/0x4c0 [ 668.521115][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.521133][T14277] RIP: 0033:0x7f0d40d8e929 [ 668.521147][T14277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.521164][T14277] RSP: 002b:00007f0d3ebb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.521181][T14277] RAX: ffffffffffffffda RBX: 00007f0d40fb6160 RCX: 00007f0d40d8e929 [ 668.521192][T14277] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 668.521203][T14277] RBP: 00007f0d3ebb4090 R08: 0000000000000000 R09: 0000000000000000 [ 668.521213][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.521223][T14277] R13: 0000000000000000 R14: 00007f0d40fb6160 R15: 00007ffce6e99358 [ 668.521246][T14277] [ 668.846705][T14283] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2173'. [ 668.926809][ T30] audit: type=1400 audit(1751737797.931:813): avc: denied { ioctl } for pid=14282 comm="syz.5.2173" path="socket:[40011]" dev="sockfs" ino=40011 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 669.009023][ T5914] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 669.016574][ T5914] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 669.024261][ T5914] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 669.032260][ T5914] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 669.046720][ T5914] usb 3-1: USB disconnect, device number 63 [ 670.060014][ T1218] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 670.089039][ T5914] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 670.261839][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 670.273911][ T5914] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 670.299743][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.314184][ T1218] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.333224][ T5914] usb 5-1: config 0 descriptor?? [ 670.345623][ T1218] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 670.359442][ T5914] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 670.362491][ T1218] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 670.379063][ T1218] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.391809][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.508158][T14307] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 670.529137][ T1218] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.316837][ T5914] gspca_nw80x: reg_r err -110 [ 671.351455][ T5914] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 671.507416][ T5914] usb 5-1: USB disconnect, device number 62 [ 671.709769][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 671.921299][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 671.940736][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.963019][ T9] usb 3-1: config 0 descriptor?? [ 672.309607][ T30] audit: type=1400 audit(1751737801.371:814): avc: denied { read } for pid=14342 comm="syz.4.2193" path="socket:[40250]" dev="sockfs" ino=40250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 672.417160][T14348] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2193'. [ 674.330032][ T1218] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 674.549867][ T1218] usb 5-1: Using ep0 maxpacket: 32 [ 674.815396][ T1218] usb 5-1: config 32 has an invalid interface number: 76 but max is 0 [ 674.824154][ T1218] usb 5-1: config 32 has no interface number 0 [ 674.831012][ T1218] usb 5-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 674.843389][ T1218] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 674.853132][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.873737][ T1218] usbtest 5-1:32.76: Linux gadget zero [ 674.888454][ T1218] usbtest 5-1:32.76: high-speed {control in/out int-out} tests (+alt) [ 674.929962][ T5914] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 674.951478][ T24] usb 2-1: USB disconnect, device number 61 [ 675.119756][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 675.132977][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 675.182636][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 675.205824][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 675.254189][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 675.269798][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 675.280979][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 675.282408][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 675.292709][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.338328][ T9] [drm] Initialized udl on minor 2 [ 675.343971][ T5914] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 675.349990][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.377427][T14374] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2201'. [ 675.386441][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.386465][ T5914] usb 4-1: Product: syz [ 675.386480][ T5914] usb 4-1: Manufacturer: syz [ 675.386494][ T5914] usb 4-1: SerialNumber: syz [ 675.411442][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 675.422573][ T1218] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.423302][ T5914] usb 4-1: config 0 descriptor?? [ 675.432929][ T9] usb 3-1: USB disconnect, device number 64 [ 675.443639][ T1218] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 675.474981][ T1218] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 675.475195][ T5913] usb 5-1: USB disconnect, device number 63 [ 675.498480][ T5914] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 675.502356][T14374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2201'. [ 675.673421][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2202'. [ 675.761501][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2194'. [ 675.774324][ T5914] usb 4-1: USB disconnect, device number 55 [ 675.774436][ C0] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 676.134256][T14392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'. [ 676.145694][T14392] x_tables: ip_tables: udp match: only valid for protocol 17 [ 676.243028][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 676.476713][T14396] netlink: 'syz.4.2209': attribute type 4 has an invalid length. [ 676.510330][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 676.525632][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 676.557815][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.598563][ T9] usb 6-1: Product: syz [ 677.573076][ T9] usb 6-1: Manufacturer: syz [ 677.577706][ T9] usb 6-1: SerialNumber: syz [ 678.909375][ T30] audit: type=1800 audit(1751737807.961:815): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2204" name="bus" dev="overlay" ino=1650 res=0 errno=0 [ 679.167544][ T1218] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 682.529321][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.552611][ T9] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 682.567354][ T9] usb 6-1: USB disconnect, device number 40 [ 682.709304][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.905768][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2220'. [ 682.999506][ T30] audit: type=1400 audit(1751737812.051:816): avc: denied { listen } for pid=14443 comm="syz.1.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 683.492968][ T30] audit: type=1400 audit(1751737812.051:817): avc: denied { accept } for pid=14443 comm="syz.1.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 683.793935][ T30] audit: type=1326 audit(1751737812.111:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 685.283817][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.691008][ T30] audit: type=1326 audit(1751737812.111:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 685.714924][ T30] audit: type=1326 audit(1751737812.111:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 685.744829][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.907376][ T30] audit: type=1326 audit(1751737812.111:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 686.932544][ T30] audit: type=1326 audit(1751737812.111:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 686.996048][ T30] audit: type=1326 audit(1751737812.121:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 687.044498][ T30] audit: type=1400 audit(1751737812.141:824): avc: denied { mount } for pid=14443 comm="syz.1.2221" name="/" dev="rpc_pipefs" ino=40463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 687.156506][ T30] audit: type=1326 audit(1751737812.141:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 687.280081][ T30] audit: type=1326 audit(1751737812.141:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 687.308675][ T30] audit: type=1326 audit(1751737812.151:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 687.359804][ T30] audit: type=1326 audit(1751737812.151:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.1.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 688.182455][T14484] FAULT_INJECTION: forcing a failure. [ 688.182455][T14484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.195586][T14484] CPU: 1 UID: 0 PID: 14484 Comm: syz.2.2230 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 688.195611][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.195622][T14484] Call Trace: [ 688.195628][T14484] [ 688.195635][T14484] dump_stack_lvl+0x16c/0x1f0 [ 688.195664][T14484] should_fail_ex+0x512/0x640 [ 688.195691][T14484] _copy_from_iter+0x29f/0x16f0 [ 688.195718][T14484] ? lockdep_hardirqs_on+0x7c/0x110 [ 688.195746][T14484] ? __pfx__copy_from_iter+0x10/0x10 [ 688.195779][T14484] ? skb_put+0x17/0x1b0 [ 688.195797][T14484] ? skb_put+0x7f/0x1b0 [ 688.195819][T14484] netlink_sendmsg+0x829/0xdd0 [ 688.195842][T14484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.195871][T14484] ____sys_sendmsg+0xa95/0xc70 [ 688.195890][T14484] ? copy_msghdr_from_user+0x10a/0x160 [ 688.195913][T14484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.195936][T14484] ? lock_acquire+0x179/0x350 [ 688.195953][T14484] ? find_held_lock+0x2b/0x80 [ 688.195977][T14484] ___sys_sendmsg+0x134/0x1d0 [ 688.195999][T14484] ? rcu_is_watching+0x12/0xc0 [ 688.196022][T14484] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.196044][T14484] ? __lock_acquire+0x622/0x1c90 [ 688.196091][T14484] __sys_sendmsg+0x16d/0x220 [ 688.196116][T14484] ? __pfx___sys_sendmsg+0x10/0x10 [ 688.196138][T14484] ? rcu_is_watching+0x12/0xc0 [ 688.196175][T14484] do_syscall_64+0xcd/0x4c0 [ 688.196203][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.196221][T14484] RIP: 0033:0x7ff631f8e929 [ 688.196235][T14484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.196252][T14484] RSP: 002b:00007ff632e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.196269][T14484] RAX: ffffffffffffffda RBX: 00007ff6321b6160 RCX: 00007ff631f8e929 [ 688.196281][T14484] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 688.196291][T14484] RBP: 00007ff632e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 688.196301][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.196311][T14484] R13: 0000000000000000 R14: 00007ff6321b6160 R15: 00007ffdcbada998 [ 688.196335][T14484] [ 688.635029][T14486] netlink: 'syz.5.2232': attribute type 1 has an invalid length. [ 688.891742][T14488] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 688.960234][T14486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.985487][T14493] ipvlan2: entered allmulticast mode [ 688.992103][T14493] bond2: entered allmulticast mode [ 692.051563][ T5913] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 692.251898][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 692.275143][ T5913] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 692.303460][ T5913] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 692.331043][ T5913] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 692.345487][T14547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2249'. [ 692.375826][ T5913] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 692.391893][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 692.432359][ T5913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 692.455235][ T5913] usb 4-1: config 0 has no interface number 0 [ 692.466435][ T5913] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 692.489355][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 692.489369][ T30] audit: type=1400 audit(1751737821.551:846): avc: denied { name_bind } for pid=14553 comm="syz.4.2252" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 692.519747][ T5913] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 692.532722][ T5913] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 692.542846][ T5913] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 692.556073][ T5913] usb 4-1: config 0 interface 125 has no altsetting 0 [ 692.566661][ T5913] usb 4-1: config 0 interface 125 has no altsetting 2 [ 692.582277][ T5913] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 692.599819][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.615165][ T5913] usb 4-1: Product: syz [ 692.625665][ T5913] usb 4-1: Manufacturer: syz [ 692.648012][ T5913] usb 4-1: SerialNumber: syz [ 692.684417][ T5913] usb 4-1: config 0 descriptor?? [ 692.708585][ T5913] usb 4-1: selecting invalid altsetting 2 [ 692.970746][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2258'. [ 693.691474][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2266'. [ 694.029944][T14248] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 694.705920][T14608] netlink: 'syz.5.2268': attribute type 10 has an invalid length. [ 694.778611][T14609] FAULT_INJECTION: forcing a failure. [ 694.778611][T14609] name failslab, interval 1, probability 0, space 0, times 0 [ 694.791480][T14609] CPU: 1 UID: 0 PID: 14609 Comm: syz.2.2269 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 694.791506][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.791516][T14609] Call Trace: [ 694.791522][T14609] [ 694.791529][T14609] dump_stack_lvl+0x16c/0x1f0 [ 694.791558][T14609] should_fail_ex+0x512/0x640 [ 694.791586][T14609] should_failslab+0xc2/0x120 [ 694.791613][T14609] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 694.791638][T14609] ? skb_clone+0x190/0x3f0 [ 694.791666][T14609] skb_clone+0x190/0x3f0 [ 694.791691][T14609] netlink_deliver_tap+0xabd/0xd30 [ 694.791730][T14609] netlink_unicast+0x5df/0x7f0 [ 694.791751][T14609] ? __pfx_netlink_unicast+0x10/0x10 [ 694.791776][T14609] netlink_sendmsg+0x8d1/0xdd0 [ 694.791798][T14609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.791827][T14609] ____sys_sendmsg+0xa95/0xc70 [ 694.791846][T14609] ? copy_msghdr_from_user+0x10a/0x160 [ 694.791869][T14609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.791890][T14609] ? __lock_acquire+0xb8a/0x1c90 [ 694.791907][T14609] ? find_lowest_rq+0x17c/0x710 [ 694.791936][T14609] ___sys_sendmsg+0x134/0x1d0 [ 694.791961][T14609] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.791982][T14609] ? __lock_acquire+0x622/0x1c90 [ 694.792031][T14609] __sys_sendmsg+0x16d/0x220 [ 694.792055][T14609] ? __pfx___sys_sendmsg+0x10/0x10 [ 694.792096][T14609] do_syscall_64+0xcd/0x4c0 [ 694.792123][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.792141][T14609] RIP: 0033:0x7ff631f8e929 [ 694.792156][T14609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.792173][T14609] RSP: 002b:00007ff632e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.792191][T14609] RAX: ffffffffffffffda RBX: 00007ff6321b6160 RCX: 00007ff631f8e929 [ 694.792202][T14609] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 694.792213][T14609] RBP: 00007ff632e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 694.792223][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.792233][T14609] R13: 0000000000000000 R14: 00007ff6321b6160 R15: 00007ffdcbada998 [ 694.792258][T14609] [ 696.082775][ T5899] usb 4-1: USB disconnect, device number 56 [ 696.229030][T14622] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 696.237249][T14622] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 696.308385][T14622] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 696.316368][T14622] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 698.801578][T14661] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[14661] [ 698.856753][ T30] audit: type=1400 audit(1751737827.921:847): avc: denied { setopt } for pid=14657 comm="syz.3.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 699.131477][T14673] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.905250][ T30] audit: type=1400 audit(1751737828.951:848): avc: denied { map } for pid=14679 comm="syz.2.2291" path="socket:[43014]" dev="sockfs" ino=43014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.631394][T14707] FAULT_INJECTION: forcing a failure. [ 700.631394][T14707] name failslab, interval 1, probability 0, space 0, times 0 [ 700.644467][T14707] CPU: 1 UID: 0 PID: 14707 Comm: syz.1.2301 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 700.644493][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 700.644503][T14707] Call Trace: [ 700.644510][T14707] [ 700.644517][T14707] dump_stack_lvl+0x16c/0x1f0 [ 700.644547][T14707] should_fail_ex+0x512/0x640 [ 700.644576][T14707] should_failslab+0xc2/0x120 [ 700.644603][T14707] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 700.644629][T14707] ? __nf_conntrack_alloc+0xd1/0x5e0 [ 700.644656][T14707] __nf_conntrack_alloc+0xd1/0x5e0 [ 700.644680][T14707] ctnetlink_create_conntrack+0xb0/0x1650 [ 700.644702][T14707] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 700.644725][T14707] ? lockdep_hardirqs_on+0x7c/0x110 [ 700.644749][T14707] ? __pfx_ctnetlink_create_conntrack+0x10/0x10 [ 700.644771][T14707] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 700.644800][T14707] ? __rcu_read_unlock+0x2b4/0x580 [ 700.644819][T14707] ? nf_conntrack_find_get+0x141/0x350 [ 700.644843][T14707] ctnetlink_new_conntrack+0x60b/0x1080 [ 700.644866][T14707] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 700.644901][T14707] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 700.644920][T14707] ? nfnetlink_rcv_msg+0x983/0x1200 [ 700.644953][T14707] nfnetlink_rcv_msg+0x9fc/0x1200 [ 700.644984][T14707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 700.645009][T14707] ? __lock_acquire+0x622/0x1c90 [ 700.645051][T14707] ? avc_has_perm_noaudit+0x149/0x3b0 [ 700.645077][T14707] netlink_rcv_skb+0x158/0x420 [ 700.645097][T14707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 700.645121][T14707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.645152][T14707] ? ns_capable+0xd7/0x110 [ 700.645176][T14707] nfnetlink_rcv+0x1b3/0x430 [ 700.645198][T14707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 700.645226][T14707] netlink_unicast+0x53a/0x7f0 [ 700.645248][T14707] ? __pfx_netlink_unicast+0x10/0x10 [ 700.645274][T14707] netlink_sendmsg+0x8d1/0xdd0 [ 700.645297][T14707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.645326][T14707] ____sys_sendmsg+0xa95/0xc70 [ 700.645347][T14707] ? copy_msghdr_from_user+0x10a/0x160 [ 700.645372][T14707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.645389][T14707] ? lock_acquire+0x179/0x350 [ 700.645408][T14707] ? __lock_acquire+0xb8a/0x1c90 [ 700.645433][T14707] ___sys_sendmsg+0x134/0x1d0 [ 700.645459][T14707] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.645481][T14707] ? __lock_acquire+0x622/0x1c90 [ 700.645532][T14707] __sys_sendmsg+0x16d/0x220 [ 700.645557][T14707] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.645600][T14707] do_syscall_64+0xcd/0x4c0 [ 700.645627][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.645646][T14707] RIP: 0033:0x7f27d6b8e929 [ 700.645661][T14707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.645678][T14707] RSP: 002b:00007f27d798a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.645694][T14707] RAX: ffffffffffffffda RBX: 00007f27d6db6160 RCX: 00007f27d6b8e929 [ 700.645707][T14707] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 700.645718][T14707] RBP: 00007f27d798a090 R08: 0000000000000000 R09: 0000000000000000 [ 700.645728][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.645739][T14707] R13: 0000000000000000 R14: 00007f27d6db6160 R15: 00007ffccb28a348 [ 700.645765][T14707] [ 701.060049][ T5899] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 701.950019][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 702.137824][T14725] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 702.219768][ T5913] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 702.382255][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 702.403422][ T5913] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 702.416808][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.449279][ T5913] usb 2-1: Product: syz [ 702.490531][ T5913] usb 2-1: Manufacturer: syz [ 702.498917][ T5913] usb 2-1: SerialNumber: syz [ 702.840568][ T5913] usb 2-1: config 0 descriptor?? [ 702.897648][ T5913] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 703.917867][ T5913] gspca_topro: reg_w err -110 [ 703.949865][ T5913] gspca_topro: Sensor soi763a [ 704.193162][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 704.212369][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 704.238310][ T5899] usb 4-1: can't read configurations, error -71 [ 704.375133][ T30] audit: type=1400 audit(1751737833.441:849): avc: denied { execute_no_trans } for pid=14760 comm="syz.3.2319" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=43307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 704.562483][ T5913] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 705.249773][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 705.275052][ T1218] usb 2-1: USB disconnect, device number 62 [ 705.295371][T14763] could not allocate digest TFM handle sha256-ce [ 705.420879][ T5913] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 705.432462][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 705.446150][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 705.459891][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 705.472623][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 705.482175][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 705.490683][ T5913] usb 3-1: Product: syz [ 705.495095][ T5913] usb 3-1: Manufacturer: syz [ 705.503362][ T5913] usb 3-1: SerialNumber: syz [ 705.545904][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 705.551412][ T5913] usb 3-1: config 0 descriptor?? [ 705.557756][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 705.570494][ T9] usb 5-1: Product: syz [ 705.574673][ T9] usb 5-1: Manufacturer: syz [ 705.594755][ T9] usb 5-1: SerialNumber: syz [ 705.597623][ T5913] usb 3-1: selecting invalid altsetting 0 [ 705.657858][ T9] usb 5-1: config 0 descriptor?? [ 705.698482][ T9] usb 5-1: selecting invalid altsetting 0 [ 705.883795][ T5913] usb 5-1: USB disconnect, device number 64 [ 705.895095][ T9] usb 3-1: USB disconnect, device number 66 [ 706.038776][T13899] udevd[13899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 706.294494][T14785] vivid-000: disconnect [ 706.782400][ T30] audit: type=1326 audit(1751737835.851:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.403304][T14784] vivid-000: reconnect [ 707.546154][ T30] audit: type=1326 audit(1751737835.851:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.636274][ T30] audit: type=1326 audit(1751737835.851:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.662795][ T30] audit: type=1326 audit(1751737835.851:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.694608][ T30] audit: type=1326 audit(1751737835.851:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.723478][ T30] audit: type=1326 audit(1751737835.851:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27d6b8d290 code=0x7ffc0000 [ 707.748605][ T30] audit: type=1326 audit(1751737835.851:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.774285][ T30] audit: type=1326 audit(1751737835.851:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.852504][ T30] audit: type=1326 audit(1751737835.851:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14794 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d6b8e929 code=0x7ffc0000 [ 707.991559][T14810] netlink: 'syz.4.2334': attribute type 4 has an invalid length. [ 708.069892][ T9] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 708.275193][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 708.286640][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 708.374838][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 708.481308][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.580549][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 708.715981][ T9] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 708.787500][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.864726][ T9] usb 2-1: Product: syz [ 708.966035][ T9] usb 2-1: Manufacturer: syz [ 708.980469][ T9] usb 2-1: SerialNumber: syz [ 709.071347][ T9] usb 2-1: config 0 descriptor?? [ 709.222592][T14804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 709.244647][ T9] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 709.413935][ T9] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 709.483415][ T9] usb 2-1: USB disconnect, device number 63 [ 709.540198][ T9] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 709.559550][ T9] iuu_phoenix 2-1:0.0: device disconnected [ 709.869859][ T5899] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 710.263279][ T5899] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 710.284449][T14839] loop6: detected capacity change from 0 to 2560 [ 710.329994][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 710.330246][T14839] buffer_io_error: 2 callbacks suppressed [ 710.330257][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.356817][ T5899] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 710.379048][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 710.418517][ T5899] usb 3-1: Product: syz [ 710.440950][ T5899] usb 3-1: Manufacturer: syz [ 710.448479][ T5899] usb 3-1: SerialNumber: syz [ 710.470805][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.477606][ T5899] usb 3-1: config 0 descriptor?? [ 710.504375][ T5899] usb 3-1: selecting invalid altsetting 0 [ 710.524368][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.638540][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.739869][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.747830][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.790272][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 710.859315][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 710.882321][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 710.882336][ T30] audit: type=1400 audit(1751737839.951:861): avc: denied { shutdown } for pid=14849 comm="syz.3.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 711.756620][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.798154][T14839] ldm_validate_partition_table(): Disk read failed. [ 711.821059][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.894710][T14859] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 711.904012][T14839] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.935578][T14839] Dev loop6: unable to read RDB block 0 [ 711.947347][T14839] loop6: unable to read partition table [ 711.958065][T14839] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 711.962844][ T9] usb 3-1: USB disconnect, device number 67 [ 711.989983][ T5899] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 712.113443][ T30] audit: type=1400 audit(1751737841.181:862): avc: denied { getopt } for pid=14862 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 712.162438][ T5899] usb 2-1: config 8 has an invalid interface number: 22 but max is 0 [ 712.176832][ T5899] usb 2-1: config 8 has no interface number 0 [ 712.196689][ T5899] usb 2-1: config 8 interface 22 has no altsetting 0 [ 712.208809][ T5899] usb 2-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 712.222942][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.231158][ T5899] usb 2-1: Product: syz [ 712.235376][ T5899] usb 2-1: Manufacturer: syz [ 712.249579][ T5899] usb 2-1: SerialNumber: syz [ 712.267825][T14858] [U] J"—E:ÀÆ" [ 713.222678][T14880] netlink: 'syz.3.2355': attribute type 4 has an invalid length. [ 713.244015][ T5899] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 713.278220][ T5899] usb 2-1: USB disconnect, device number 64 [ 714.012833][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 714.093279][ T5913] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 714.410303][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 714.437882][ T9] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 714.456205][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.590124][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.617851][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.621990][ T5913] usb 6-1: device descriptor read/64, error -71 [ 714.638945][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 714.660794][ T9] usb 3-1: config 0 has no interface number 0 [ 714.666910][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 714.697025][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 714.727210][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.748584][ T9] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.812474][ T9] usb 3-1: config 0 interface 125 has no altsetting 0 [ 714.820503][ T9] usb 3-1: config 0 interface 125 has no altsetting 2 [ 714.829131][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 714.838984][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.847040][ T9] usb 3-1: Product: syz [ 714.869826][ T5913] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 714.890244][ T9] usb 3-1: Manufacturer: syz [ 714.894863][ T9] usb 3-1: SerialNumber: syz [ 714.905995][ T9] usb 3-1: config 0 descriptor?? [ 714.922542][ T9] usb 3-1: selecting invalid altsetting 2 [ 715.039833][ T5913] usb 6-1: device descriptor read/64, error -71 [ 715.232855][ T5913] usb usb6-port1: attempt power cycle [ 715.370590][T14921] openvswitch: netlink: Duplicate or invalid key (type 0). [ 715.378005][T14921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.590894][ T5913] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 715.625770][ T5913] usb 6-1: device descriptor read/8, error -71 [ 716.046802][ T9] get_1284_register timeout [ 716.501469][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.510189][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.644134][ T9] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 716.652618][ C0] usb 3-1: async_complete: urb error -104 [ 716.673720][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2373'. [ 716.756472][T14934] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2372'. [ 716.877612][T14938] netlink: 'syz.1.2375': attribute type 10 has an invalid length. [ 716.892582][T14938] syz_tun: entered promiscuous mode [ 716.928174][T14938] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 717.063082][T14946] wg0 speed is unknown, defaulting to 1000 [ 718.410053][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 718.599636][T14961] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 718.609512][T14961] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 718.619728][T14961] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 718.624363][ T5914] usb 3-1: USB disconnect, device number 68 [ 718.633651][T14961] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 718.635925][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 718.763517][T14963] bridge0: entered promiscuous mode [ 718.769326][T14963] macsec0: entered promiscuous mode [ 718.803080][T14963] bridge0: port 3(macsec0) entered blocking state [ 718.814598][T14963] bridge0: port 3(macsec0) entered disabled state [ 718.822213][T14963] macsec0: entered allmulticast mode [ 718.823822][T14968] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 718.830442][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 718.842525][T14963] bridge0: entered allmulticast mode [ 718.851310][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 718.860638][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.867833][T14963] macsec0: left allmulticast mode [ 718.868748][ T9] usb 4-1: Product: syz [ 718.874009][T14963] bridge0: left allmulticast mode [ 718.883235][ T9] usb 4-1: Manufacturer: syz [ 718.887840][ T9] usb 4-1: SerialNumber: syz [ 718.888402][T14963] bridge0: left promiscuous mode [ 718.898972][ T9] usb 4-1: config 0 descriptor?? [ 718.913724][ T5913] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 719.069816][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 719.102401][ T5913] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 719.126967][ T5913] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.129965][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 719.137021][ T5913] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.174895][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 719.183730][ T5913] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 719.193445][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.212251][ T5913] usb 6-1: config 0 descriptor?? [ 719.947691][T14977] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 720.307587][ T5913] usbhid 6-1:0.0: can't add hid device: -71 [ 720.322016][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 720.335025][ T5913] usb 6-1: USB disconnect, device number 45 [ 720.676550][ T5899] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 721.439322][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2397'. [ 721.522838][ T5899] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 721.552692][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.581666][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 721.605109][ T5899] usb 2-1: config 0 has no interfaces? [ 721.621664][ T9] usb 4-1: USB disconnect, device number 59 [ 721.638308][ T5899] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 721.678329][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.852131][T15021] syz.4.2398: attempt to access beyond end of device [ 721.852131][T15021] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 721.865481][T15021] SQUASHFS error: Failed to read block 0x0: -5 [ 721.871926][T15021] unable to read squashfs_super_block [ 722.129897][ T5899] usb 2-1: Product: syz [ 722.135222][ T5899] usb 2-1: Manufacturer: syz [ 722.142866][ T5899] usb 2-1: SerialNumber: syz [ 722.171698][ T5899] usb 2-1: config 0 descriptor?? [ 722.385712][ T5899] usb 2-1: USB disconnect, device number 65 [ 722.557718][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 722.655319][T15034] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 722.687573][T15038] netlink: 'syz.3.2406': attribute type 10 has an invalid length. [ 722.735828][T15038] syz_tun: entered promiscuous mode [ 723.072852][T15043] could not allocate digest TFM handle sha256-ce [ 724.450650][T15075] QAT: Invalid ioctl 1075883590 [ 724.456256][T15075] QAT: Invalid ioctl 1075883590 [ 724.480020][T15075] QAT: Invalid ioctl 1075883590 [ 724.627167][T15075] QAT: Invalid ioctl 1075883590 [ 724.645864][T15081] syz.1.2419 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 724.686092][T15075] QAT: Invalid ioctl 1075883590 [ 724.772736][T15075] QAT: Invalid ioctl 1075883590 [ 724.828409][T15075] QAT: Invalid ioctl 1075883590 [ 724.885156][T15075] QAT: Invalid ioctl 1075883590 [ 724.929806][ T5913] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 724.949316][T15075] QAT: Invalid ioctl 1075883590 [ 725.003677][T15075] QAT: Invalid ioctl 1075883590 [ 725.144032][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 725.196576][ T5913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 725.287464][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 725.383571][ T5913] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.436836][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.499239][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 725.574298][ T5913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 725.582163][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 725.620232][ T5913] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.652612][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.679733][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 725.739842][ T5913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 725.765995][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 726.357456][ T5913] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 726.369397][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 726.380832][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 726.396384][ T5913] usb 5-1: string descriptor 0 read error: -22 [ 726.417731][ T5913] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 726.444221][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.466014][ T5913] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 727.842447][T15079] tipc: Started in network mode [ 727.847340][T15079] tipc: Node identity 5, cluster identity 4711 [ 727.855090][T15079] tipc: Node number set to 5 [ 727.956507][ T5913] usb 5-1: USB disconnect, device number 65 [ 727.967365][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2429'. [ 728.409742][ T5899] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 729.109532][T15134] netlink: 'syz.1.2434': attribute type 10 has an invalid length. [ 729.281509][ T5899] usb 6-1: config 2 has an invalid interface number: 106 but max is 0 [ 729.319783][ T5899] usb 6-1: config 2 has no interface number 0 [ 729.326534][ T5899] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=d1.12 [ 729.336567][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.583074][ T5899] usb 6-1: string descriptor 0 read error: -71 [ 729.593101][ T5899] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 729.620213][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 729.667798][ T5899] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 729.702606][ T5899] dvb-usb: DViCO FusionHDTV5 USB Gold error while loading driver (-19) [ 729.733465][ T5899] dvb_usb_cxusb 6-1:2.106: probe with driver dvb_usb_cxusb failed with error -22 [ 729.756657][ T30] audit: type=1400 audit(1751737858.821:863): avc: denied { ioctl } for pid=15143 comm="syz.3.2439" path="socket:[44402]" dev="sockfs" ino=44402 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 729.760067][ T5899] usb 6-1: USB disconnect, device number 46 [ 731.060083][ T30] audit: type=1400 audit(1751737860.081:864): avc: denied { append } for pid=15160 comm="syz.5.2441" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 732.544768][T15175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2446'. [ 733.617133][ T30] audit: type=1400 audit(1751737862.681:865): avc: denied { map } for pid=15194 comm="syz.4.2452" path="socket:[44483]" dev="sockfs" ino=44483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 733.876871][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2450'. [ 733.893542][T15180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2450'. [ 733.910223][ T30] audit: type=1400 audit(1751737862.981:866): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 734.720270][T15220] geneve2: entered promiscuous mode [ 735.574248][T15222] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 735.580781][T15222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 735.588870][T15222] vhci_hcd vhci_hcd.0: Device attached [ 735.601733][T15223] vhci_hcd: connection closed [ 735.631560][T12506] vhci_hcd: stop threads [ 736.369828][ T5899] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 736.859642][T12506] vhci_hcd: release socket [ 736.864252][T12506] vhci_hcd: disconnect device [ 737.002848][T15237] tipc: Enabling of bearer rejected, failed to enable media [ 737.082492][T15238] ubi: mtd0 is already attached to ubi31 [ 737.107438][ T30] audit: type=1400 audit(1751737866.161:867): avc: denied { create } for pid=15232 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 737.158187][ T30] audit: type=1400 audit(1751737866.171:868): avc: denied { sys_admin } for pid=15232 comm="syz.3.2462" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 737.391982][T15235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2461'. [ 737.408902][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2461'. [ 738.115908][T15244] mmap: syz.4.2463 (15244): VmData 37593088 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 738.139084][ T30] audit: type=1400 audit(1751737867.181:869): avc: denied { mounton } for pid=15241 comm="syz.4.2463" path="/432/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 738.294388][ T30] audit: type=1400 audit(1751737867.361:870): avc: denied { unmount } for pid=7038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 739.088994][T15266] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 740.232693][T15274] netlink: 'syz.4.2472': attribute type 10 has an invalid length. [ 740.312047][T15274] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 740.552798][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 740.565652][T15280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 740.572154][T15280] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 740.580639][T15280] vhci_hcd vhci_hcd.0: Device attached [ 740.660565][T15287] vhci_hcd: connection closed [ 740.660823][ T3444] vhci_hcd: stop threads [ 740.694102][T15292] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 740.709538][ T3444] vhci_hcd: release socket [ 740.716946][ T3444] vhci_hcd: disconnect device [ 740.735792][ T30] audit: type=1326 audit(1751737869.801:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.4.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d40d8e929 code=0x7fc00000 [ 741.798660][ T30] audit: type=1326 audit(1751737870.811:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.4.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d40d8e929 code=0x7fc00000 [ 741.979969][ T5899] vhci_hcd: vhci_device speed not set [ 742.129420][T15307] vivid-000: disconnect [ 742.306213][T15312] syz.1.2484: attempt to access beyond end of device [ 742.306213][T15312] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 742.319481][T15312] SQUASHFS error: Failed to read block 0x0: -5 [ 742.326020][T15312] unable to read squashfs_super_block [ 742.676150][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 742.685222][T15319] netlink: 'syz.4.2486': attribute type 5 has an invalid length. [ 742.763838][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 742.904214][ T30] audit: type=1400 audit(1751737871.971:873): avc: denied { write } for pid=15318 comm="syz.4.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 743.028715][T15303] vivid-000: reconnect [ 744.410395][ T1218] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 744.701710][ T1218] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 744.721414][ T1218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 744.745154][ T1218] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 744.757058][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 744.770424][ T1218] usb 3-1: Product: syz [ 744.777828][ T1218] usb 3-1: Manufacturer: syz [ 744.784990][ T1218] usb 3-1: SerialNumber: syz [ 744.795784][ T30] audit: type=1400 audit(1751737873.861:874): avc: denied { map } for pid=15354 comm="syz.5.2496" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 744.829932][ T1218] usb 3-1: config 0 descriptor?? [ 744.900348][ T1218] usb 3-1: selecting invalid altsetting 0 [ 745.318126][T15361] overlayfs: failed to resolve '/#V9h8ÚƒÇTˆ~{ê': -2 [ 745.413287][T15362] openvswitch: netlink: Tunnel attr 10875 out of range max 16 [ 746.099062][ T30] audit: type=1400 audit(1751737874.381:875): avc: denied { mount } for pid=15359 comm="syz.5.2498" name="/" dev="configfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 746.725482][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.732246][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.943729][ T30] audit: type=1400 audit(1751737874.381:876): avc: denied { mounton } for pid=15359 comm="syz.5.2498" path="/387/file0" dev="configfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 747.051002][ T5913] usb 3-1: USB disconnect, device number 69 [ 747.154168][ T30] audit: type=1400 audit(1751737874.471:877): avc: denied { read } for pid=15359 comm="syz.5.2498" name="/" dev="configfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 747.178049][ T30] audit: type=1400 audit(1751737874.471:878): avc: denied { open } for pid=15359 comm="syz.5.2498" path="/387/file0" dev="configfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 747.272134][ T30] audit: type=1400 audit(1751737875.251:879): avc: denied { unmount } for pid=8284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 747.544242][T15373] could not allocate digest TFM handle sha256-ce [ 747.625105][T15380] netlink: 'syz.5.2503': attribute type 10 has an invalid length. [ 747.804934][T15386] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 747.934342][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 749.480554][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 749.500035][T15386] dummy0: entered promiscuous mode [ 749.507082][T15386] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 749.638957][ T24] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 749.647283][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.657563][ T24] usb 4-1: config 0 has no interface number 0 [ 749.663744][ T24] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 749.674023][ T24] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.779113][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 749.829074][T15398] syz.5.2508: attempt to access beyond end of device [ 749.829074][T15398] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 749.844641][T15398] SQUASHFS error: Failed to read block 0x0: -5 [ 749.851030][T15398] unable to read squashfs_super_block [ 750.115645][T15401] overlay: Bad value for 'redirect_dir' [ 750.132145][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.148533][ T24] usb 4-1: Product: syz [ 750.162989][ T24] usb 4-1: Manufacturer: syz [ 750.174308][ T24] usb 4-1: SerialNumber: syz [ 750.188503][ T24] usb 4-1: config 0 descriptor?? [ 750.213147][T15382] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 750.632479][T15413] random: crng reseeded on system resumption [ 750.679120][ T30] audit: type=1400 audit(1751737879.701:880): avc: denied { write } for pid=15404 comm="syz.4.2511" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 750.828913][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.956175][ T30] audit: type=1400 audit(1751737879.701:881): avc: denied { ioctl } for pid=15404 comm="syz.4.2511" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 750.965230][T15382] tipc: Bearer : already 2 bearers with priority 10 [ 750.987232][T15382] tipc: Bearer : trying with adjusted priority [ 750.994410][T15382] tipc: Enabling of bearer rejected, failed to enable media [ 752.375149][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'. [ 752.511868][T15438] vivid-000: disconnect [ 753.286513][T15437] vivid-000: reconnect [ 753.356778][T12510] Bluetooth: hci1: Frame reassembly failed (-84) [ 753.368064][ T1218] usb 4-1: USB disconnect, device number 60 [ 754.100335][ T5899] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 754.282705][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.348186][ T5899] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 754.380850][ T5899] usb 5-1: New USB device found, idVendor=1934, idProduct=1202, bcdDevice=9f.58 [ 754.392508][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.404399][ T5899] usb 5-1: Product: syz [ 754.413080][ T5899] usb 5-1: Manufacturer: syz [ 754.418054][ T5899] usb 5-1: SerialNumber: syz [ 754.446955][ T5899] usb 5-1: config 0 descriptor?? [ 755.359809][ T5835] Bluetooth: hci1: command 0x1003 tx timeout [ 755.366153][T14248] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 755.518111][ T30] audit: type=1400 audit(1751737884.581:882): avc: denied { map } for pid=15459 comm="syz.1.2527" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 755.544351][ T5899] usb 5-1: USB disconnect, device number 66 [ 755.710184][ T30] audit: type=1400 audit(1751737884.581:883): avc: denied { execute } for pid=15459 comm="syz.1.2527" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 755.734013][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.165343][ T1218] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 756.322754][T15477] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 756.556681][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.685825][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.804266][ T1218] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 756.906183][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.105752][ T1218] usb 4-1: config 0 descriptor?? [ 757.840322][ T1218] usbhid 4-1:0.0: can't add hid device: -71 [ 757.846307][ T1218] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 757.891106][ T1218] usb 4-1: USB disconnect, device number 61 [ 757.932566][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 758.010065][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 758.018991][T15500] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2541'. [ 758.412303][T15492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.466193][T15492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 758.535386][T15492] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 759.966293][T14248] Bluetooth: hci2: command 0x0c1a tx timeout [ 760.482285][T14248] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.569872][T14248] Bluetooth: hci5: command 0x0419 tx timeout [ 760.969991][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 761.429785][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 761.486128][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 761.542175][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.663521][ T30] audit: type=1400 audit(1751737890.621:884): avc: denied { accept } for pid=15562 comm="syz.5.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 761.910057][ T24] usb 2-1: Product: syz [ 761.914256][ T24] usb 2-1: Manufacturer: syz [ 761.918853][ T24] usb 2-1: SerialNumber: syz [ 762.879993][ T30] audit: type=1800 audit(1751737891.901:885): pid=15585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2550" name="bus" dev="overlay" ino=2651 res=0 errno=0 [ 766.099838][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 766.358322][ T5913] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 766.380309][ T24] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 766.423963][ T24] usb 2-1: USB disconnect, device number 66 [ 766.472263][T15604] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 766.567870][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.814167][ T5913] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 766.828041][ T5913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 766.835559][T15611] netlink: 'syz.4.2565': attribute type 10 has an invalid length. [ 766.856480][ T5913] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 766.875976][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 766.890380][T15611] bond0: (slave syz_tun): Releasing backup interface [ 766.897174][ T5913] usb 6-1: Product: syz [ 766.904725][ T5913] usb 6-1: Manufacturer: syz [ 766.917498][ T5913] usb 6-1: SerialNumber: syz [ 766.950041][ T5913] usb 6-1: config 0 descriptor?? [ 767.822181][ T5913] usb 6-1: can't set config #0, error -71 [ 767.837778][ T5913] usb 6-1: USB disconnect, device number 47 [ 768.604086][T15632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2570'. [ 768.613752][T15632] x_tables: ip_tables: udp match: only valid for protocol 17 [ 769.700677][T15639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 769.764972][T15639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 769.771491][T15639] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 770.646773][ T30] audit: type=1400 audit(1751737898.851:886): avc: denied { setopt } for pid=15643 comm="syz.1.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 770.717607][T15658] binder: BINDER_SET_CONTEXT_MGR already set [ 770.738296][T15658] binder: 15655:15658 ioctl 4018620d 200000000040 returned -16 [ 770.797150][T15650] could not allocate digest TFM handle sha224-ssse3 [ 770.912625][ T5899] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 771.249886][ T1218] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 771.271527][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 771.295963][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 771.296046][T15670] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 771.368671][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 771.404092][ T1218] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 771.416336][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.426405][ T5899] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 771.444277][ T1218] usb 4-1: Product: syz [ 771.448837][ T1218] usb 4-1: Manufacturer: syz [ 771.460473][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.473188][ T1218] usb 4-1: SerialNumber: syz [ 771.491301][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 771.501014][ T1218] usb 4-1: config 0 descriptor?? [ 771.506373][ T5899] usb 3-1: SerialNumber: syz [ 771.513601][ T1218] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 771.537483][T15653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 771.544790][T15653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 771.564123][ T5899] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 771.780845][T14248] Bluetooth: hci2: command 0x0c1a tx timeout [ 771.861708][T14248] Bluetooth: hci5: command 0x0419 tx timeout [ 771.923113][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 772.136611][ T30] audit: type=1400 audit(1751737901.201:887): avc: denied { append } for pid=15684 comm="syz.5.2586" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 773.190912][ T5899] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 773.201054][ T24] usb 4-1: USB disconnect, device number 62 [ 773.283052][ T5899] usb 3-1: USB disconnect, device number 70 [ 774.211695][T15734] SELinux: failed to load policy [ 774.813303][T15749] geneve2: entered promiscuous mode [ 776.253195][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2609'. [ 776.276059][T15772] 8021q: VLANs not supported on bond0 [ 776.311130][ T5899] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 776.687074][ T5899] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 776.786058][T15784] sp0: Synchronizing with TNC [ 777.583938][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 777.592902][ T5899] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 777.603733][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 777.613207][ T5899] usb 3-1: Product: syz [ 777.617422][ T5899] usb 3-1: Manufacturer: syz [ 777.622377][ T5899] usb 3-1: SerialNumber: syz [ 777.700439][ T5899] usb 3-1: config 0 descriptor?? [ 777.733031][ T5899] usb 3-1: selecting invalid altsetting 0 [ 778.138721][ T5913] usb 3-1: USB disconnect, device number 71 [ 778.287122][ T30] audit: type=1400 audit(1751737907.351:888): avc: denied { mount } for pid=15795 comm="syz.1.2617" name="/" dev="pstore" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 778.429994][ T30] audit: type=1400 audit(1751737907.381:889): avc: denied { mounton } for pid=15795 comm="syz.1.2617" path="/518/file0" dev="pstore" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 778.836521][ T30] audit: type=1400 audit(1751737907.901:890): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 780.992666][ T30] audit: type=1326 audit(1751737910.051:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 781.220854][ T30] audit: type=1326 audit(1751737910.051:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 781.303372][ T30] audit: type=1326 audit(1751737910.051:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 781.472283][ T30] audit: type=1326 audit(1751737910.051:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 781.647029][ T30] audit: type=1326 audit(1751737910.051:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 781.689614][T15843] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 781.820437][ T30] audit: type=1326 audit(1751737910.051:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 781.924448][ T30] audit: type=1326 audit(1751737910.051:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.5.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135dd8e929 code=0x7ffc0000 [ 782.159898][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 782.359777][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 782.539282][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 782.561180][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.572169][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.583982][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 782.594581][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.630027][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 782.662829][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.913608][ T24] usb 5-1: usb_control_msg returned -32 [ 782.919226][ T24] usbtmc 5-1:16.0: can't read capabilities [ 782.933642][T15854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 782.961019][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 783.005750][T15860] ipvlan2: entered promiscuous mode [ 785.008090][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 785.008107][ T30] audit: type=1400 audit(1751737914.071:921): avc: denied { mount } for pid=15891 comm="syz.1.2645" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 785.100094][ T30] audit: type=1400 audit(1751737914.151:922): avc: denied { search } for pid=15891 comm="syz.1.2645" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 785.124337][ T24] usb 5-1: USB disconnect, device number 67 [ 785.252834][ T30] audit: type=1400 audit(1751737914.321:923): avc: denied { getopt } for pid=15891 comm="syz.1.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 785.762718][T15909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15909 comm=syz.5.2651 [ 788.241682][T15938] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.386129][T15938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 788.443253][T15949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 788.449797][T15949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 788.458211][T15938] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 788.520003][T15949] vhci_hcd vhci_hcd.0: Device attached [ 788.709765][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 789.620650][T15950] vhci_hcd: connection closed [ 789.635495][ T3431] vhci_hcd: stop threads [ 789.647309][ T3431] vhci_hcd: release socket [ 789.729799][ T3431] vhci_hcd: disconnect device [ 789.759898][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 789.767513][ T5913] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 789.775140][ T5913] usb 37-1: enqueue for inactive port 0 [ 789.802280][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.820594][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 789.841259][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 789.859394][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 789.860612][ T5913] vhci_hcd: vhci_device speed not set [ 789.868082][ T9] usb 5-1: Product: syz [ 789.878423][ T9] usb 5-1: Manufacturer: syz [ 789.893255][ T9] usb 5-1: SerialNumber: syz [ 789.916770][ T9] usb 5-1: config 0 descriptor?? [ 789.926867][ T9] usb 5-1: selecting invalid altsetting 0 [ 790.026589][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 790.067874][ T9] usb 5-1: USB disconnect, device number 68 [ 790.588348][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 790.594735][T14248] Bluetooth: hci2: command 0x0c1a tx timeout [ 790.600931][ T5835] Bluetooth: hci5: command 0x0419 tx timeout [ 790.644438][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 790.668424][ T24] usb 4-1: string descriptor 0 read error: -71 [ 790.680637][T13858] udevd[13858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.791463][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 790.827858][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 790.957654][T15977] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 790.974742][ T24] usb 4-1: config 0 descriptor?? [ 791.084674][T15978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.108118][T15978] vxfs: WRONG superblock magic 00000000 at 1 [ 791.114355][T15978] vxfs: WRONG superblock magic 00000000 at 8 [ 791.120398][T15978] vxfs: can't find superblock. [ 791.143353][ T24] usb 4-1: can't set config #0, error -71 [ 791.162813][ T24] usb 4-1: USB disconnect, device number 63 [ 791.416712][T15983] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2670'. [ 791.425867][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2670'. [ 791.434876][T15983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2670'. [ 791.537018][ T30] audit: type=1326 audit(1751737920.601:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 791.603035][ T30] audit: type=1326 audit(1751737920.631:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 791.640721][ T30] audit: type=1326 audit(1751737920.631:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 791.722695][ T30] audit: type=1326 audit(1751737920.631:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 791.768502][ T30] audit: type=1326 audit(1751737920.631:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 791.800343][ T30] audit: type=1326 audit(1751737920.631:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 792.474073][ T30] audit: type=1326 audit(1751737920.631:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 792.499971][ T30] audit: type=1326 audit(1751737920.631:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 792.609244][T15991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 792.615442][T15991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 792.637593][T15991] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 792.650097][ T30] audit: type=1326 audit(1751737920.631:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 792.673877][ T30] audit: type=1326 audit(1751737920.631:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15984 comm="syz.3.2671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 792.886967][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2673'. [ 793.927023][ T24] hid (null): unknown global tag 0xd [ 793.939872][ T24] hid (null): unknown global tag 0xe [ 793.956920][ T24] hid-generic 854B:0003:0004.000E: unknown global tag 0xd [ 794.028370][ T24] hid-generic 854B:0003:0004.000E: item 0 1 1 13 parsing failed [ 794.070443][ T24] hid-generic 854B:0003:0004.000E: probe with driver hid-generic failed with error -22 [ 794.325893][T15967] Bluetooth: hci2: command 0x0c1a tx timeout [ 794.869901][T15967] Bluetooth: hci3: command 0x0c1a tx timeout [ 794.876173][T15967] Bluetooth: hci5: command 0x0419 tx timeout [ 796.360611][T16046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 796.837669][T16046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 796.843962][T16046] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 796.860989][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 796.861004][ T30] audit: type=1400 audit(1751737925.921:945): avc: denied { mount } for pid=16047 comm="syz.5.2686" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 797.205851][ T30] audit: type=1400 audit(1751737926.271:946): avc: denied { create } for pid=16061 comm="syz.2.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 797.909739][ T30] audit: type=1400 audit(1751737926.401:947): avc: denied { listen } for pid=16061 comm="syz.2.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 797.939976][ T30] audit: type=1400 audit(1751737926.401:948): avc: denied { accept } for pid=16061 comm="syz.2.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 798.159850][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 798.950175][ T5832] Bluetooth: hci5: command 0x0419 tx timeout [ 798.956183][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 799.325961][T16085] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 799.332505][T16085] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 799.351569][T16085] vhci_hcd vhci_hcd.0: Device attached [ 799.468322][T16089] wg0 speed is unknown, defaulting to 1000 [ 799.579775][ T9] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 799.689753][ T5899] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 800.101109][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 800.137141][T16097] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 800.143684][T16097] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.151564][T16097] vhci_hcd vhci_hcd.0: Device attached [ 800.222062][T16100] vhci_hcd: connection closed [ 800.231199][ T5899] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 800.261564][T11528] vhci_hcd: stop threads [ 800.429484][T11528] vhci_hcd: release socket [ 800.472662][T11528] vhci_hcd: disconnect device [ 800.498675][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.598826][ T5899] usb 2-1: Product: syz [ 800.642280][ T5899] usb 2-1: Manufacturer: syz [ 800.690036][ T5899] usb 2-1: SerialNumber: syz [ 800.916057][ T5899] usb 2-1: config 0 descriptor?? [ 801.261709][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 801.268495][T16092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.289077][T16092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.488115][ T5899] gspca_sonixj: reg_r err -71 [ 802.940165][ T5899] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 802.951928][ T5899] usb 2-1: USB disconnect, device number 67 [ 803.130877][ T30] audit: type=1326 audit(1751737932.118:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.283705][ T30] audit: type=1326 audit(1751737932.118:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.438614][ T30] audit: type=1326 audit(1751737932.165:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.674447][ T30] audit: type=1326 audit(1751737932.165:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.725498][ T30] audit: type=1326 audit(1751737932.165:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.775071][ T30] audit: type=1326 audit(1751737932.175:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.800003][ T30] audit: type=1326 audit(1751737932.175:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.837482][ T30] audit: type=1326 audit(1751737932.175:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.864445][ T30] audit: type=1326 audit(1751737932.184:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 803.910807][ T30] audit: type=1326 audit(1751737932.184:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.2706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0835b8e929 code=0x7ffc0000 [ 804.327103][T16137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2709'. [ 804.521653][T16139] input: syz1 as /devices/virtual/input/input20 [ 804.842834][T16086] vhci_hcd: connection reset by peer [ 804.858452][ T3446] vhci_hcd: stop threads [ 804.863516][ T3446] vhci_hcd: release socket [ 804.884634][ T3446] vhci_hcd: disconnect device [ 804.952109][ T9] vhci_hcd: vhci_device speed not set [ 804.995003][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2715'. [ 807.192983][T16178] loop3: detected capacity change from 0 to 1 [ 807.584342][T16178] Dev loop3: unable to read RDB block 1 [ 807.589910][T16178] loop3: unable to read partition table [ 807.596124][T16178] loop3: partition table beyond EOD, truncated [ 807.602462][T16178] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 807.694924][ T5204] Dev loop3: unable to read RDB block 1 [ 807.730234][ T5204] loop3: unable to read partition table [ 807.762942][ T5204] loop3: partition table beyond EOD, truncated [ 807.982688][T16185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2724'. [ 807.992349][T16185] x_tables: ip_tables: udp match: only valid for protocol 17 [ 808.589569][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.595888][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.078225][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 809.078239][ T30] audit: type=1400 audit(1751737937.684:1019): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 809.169691][T16194] syz.5.2727 (16194): drop_caches: 2 [ 809.182336][T16194] syz.5.2727 (16194): drop_caches: 2 [ 809.915081][T14778] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 810.157280][T14778] usb 4-1: Using ep0 maxpacket: 16 [ 810.172469][T14778] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 810.194091][T14778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.223376][T14778] usb 4-1: Product: syz [ 810.308958][T14778] usb 4-1: Manufacturer: syz [ 810.315562][T14778] usb 4-1: SerialNumber: syz [ 810.423109][ T30] audit: type=1400 audit(1751737938.937:1020): avc: denied { read } for pid=16212 comm="syz.5.2734" path="socket:[48333]" dev="sockfs" ino=48333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 810.473085][T16217] overlay: Unknown parameter 'subj_type' [ 810.524263][T16214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.637551][ T9] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 811.663313][T16220] ALSA: mixer_oss: invalid OSS volume '' [ 811.803285][ T9] usb 6-1: device descriptor read/64, error -71 [ 811.962921][ T30] audit: type=1800 audit(1751737940.200:1021): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2728" name="bus" dev="overlay" ino=2905 res=0 errno=0 [ 813.246533][ T9] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 813.952155][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 814.321410][T14778] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.327766][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 814.360624][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 814.378001][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.393652][ T24] usb 5-1: Product: syz [ 814.397835][ T24] usb 5-1: Manufacturer: syz [ 814.403028][ T24] usb 5-1: SerialNumber: syz [ 814.435869][T14778] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 814.485766][T14778] usb 4-1: USB disconnect, device number 64 [ 814.657166][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.047887][ T30] audit: type=1800 audit(1751737942.988:1022): pid=16249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2741" name="bus" dev="overlay" ino=2537 res=0 errno=0 [ 816.158703][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 816.259233][ T24] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 816.307171][ T24] usb 5-1: USB disconnect, device number 69 [ 816.348360][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.450798][T16265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2752'. [ 816.476474][ T1218] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 816.787610][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 816.828540][ T1218] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 816.836908][ T1218] usb 4-1: config 254 has no interface number 0 [ 816.867767][ T1218] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 816.885467][ T1218] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.903139][ T1218] usb 4-1: config 254 interface 235 has no altsetting 0 [ 816.921821][ T1218] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 816.951824][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 816.972208][ T1218] usb 4-1: Product: syz [ 816.982610][ T1218] usb 4-1: Manufacturer: syz [ 817.093134][ T1218] usb 4-1: SerialNumber: syz [ 817.111700][T16255] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 817.122951][ T1218] usbtest 4-1:254.235: couldn't get endpoints, -22 [ 817.576290][ T1218] usbtest 4-1:254.235: probe with driver usbtest failed with error -22 [ 817.611209][ T1218] usb 4-1: USB disconnect, device number 65 [ 817.977874][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 818.527762][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 818.625346][ T5913] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 818.656288][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 3840, setting to 1024 [ 818.670545][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 818.734084][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 818.789959][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.806572][ T9] usb 5-1: Product: syz [ 818.810769][ T9] usb 5-1: Manufacturer: syz [ 818.815363][ T9] usb 5-1: SerialNumber: syz [ 818.903328][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 818.910120][ T5913] usb 3-1: New USB device found, idVendor=1b16, idProduct=000a, bcdDevice= 0.00 [ 818.921945][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.943612][ T5913] usb 3-1: config 0 descriptor?? [ 818.975684][ T9] usb 5-1: config 0 descriptor?? [ 818.984224][T16283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 819.004062][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 819.010428][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 819.025850][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 819.213122][T16300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.240566][ T9] usb 5-1: USB disconnect, device number 70 [ 819.246650][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 819.266923][T16300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 819.279842][T16300] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 819.386309][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 819.403274][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 819.421866][ T5913] usb 3-1: USB disconnect, device number 72 [ 820.334696][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 820.472170][ T30] audit: type=1400 audit(1751737948.329:1023): avc: denied { execute } for pid=16336 comm="syz.3.2775" name="file1" dev="ramfs" ino=48627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 820.815486][T15967] Bluetooth: hci2: command 0x0c1a tx timeout [ 821.397747][ T30] audit: type=1400 audit(1751737948.329:1024): avc: denied { execute_no_trans } for pid=16336 comm="syz.3.2775" path="/file1" dev="ramfs" ino=48627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 821.420885][T15967] Bluetooth: hci3: command 0x0c1a tx timeout [ 821.499693][T15967] Bluetooth: hci5: command 0x0419 tx timeout [ 821.672736][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 821.690140][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 822.302924][T14778] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 822.317620][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 822.328133][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 822.337678][ T9] usb 2-1: Product: syz [ 822.341847][ T9] usb 2-1: Manufacturer: syz [ 822.347030][ T9] usb 2-1: SerialNumber: syz [ 822.355992][ T9] usb 2-1: config 0 descriptor?? [ 822.372842][ T9] usb 2-1: selecting invalid altsetting 0 [ 822.385543][T16360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.405886][T16360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.501589][T14778] usb 5-1: Using ep0 maxpacket: 32 [ 822.520192][T14778] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 822.643565][ T5913] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 822.951105][T14778] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 823.121888][T14778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.257578][T14778] usb 5-1: Product: syz [ 823.322082][T14778] usb 5-1: Manufacturer: syz [ 823.398670][T14778] usb 5-1: SerialNumber: syz [ 823.429565][ T9] usb 2-1: USB disconnect, device number 68 [ 823.595026][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 823.620434][ T5913] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 823.639082][ T5913] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 823.668255][T16374] openvswitch: netlink: Missing key (keys=40, expected=100) [ 823.675994][ T5913] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 162, changing to 7 [ 823.711585][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.714290][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 823.728764][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.746949][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.754978][ T5913] usb 4-1: Product: syz [ 823.768182][ T5913] usb 4-1: Manufacturer: syz [ 823.783645][ T5913] usb 4-1: SerialNumber: syz [ 823.784842][T14778] usb 5-1: selecting invalid altsetting 1 [ 823.810352][T14778] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 823.810439][T14778] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 823.846906][T14778] usb 5-1: USB disconnect, device number 71 [ 824.074999][ T5913] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 824.104635][ T5913] usb 4-1: found format II with max.bitrate = 1, frame size=8 [ 824.112301][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 824.181824][T16384] syz.5.2789: attempt to access beyond end of device [ 824.181824][T16384] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 824.195148][T16384] SQUASHFS error: Failed to read block 0x0: -5 [ 824.201507][T16384] unable to read squashfs_super_block [ 824.461908][ T5913] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 824.494057][ T5913] usb 4-1: USB disconnect, device number 66 [ 824.522268][T16387] overlayfs: failed to resolve './file0': -2 [ 824.529919][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.653396][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 824.662175][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 824.672008][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.680787][ T24] usb 3-1: Product: syz [ 824.685042][ T24] usb 3-1: Manufacturer: syz [ 824.690035][ T24] usb 3-1: SerialNumber: syz [ 824.717442][T16389] vivid-000: disconnect [ 824.865382][T16392] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.872686][T16392] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.877911][T15605] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 824.892553][T16392] bridge0: entered allmulticast mode [ 824.916246][ T30] audit: type=1400 audit(1751737952.501:1025): avc: denied { setattr } for pid=16391 comm="syz.5.2792" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 824.916868][T16392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.959700][T16392] bridge_slave_1: left allmulticast mode [ 824.968483][T16392] bridge_slave_1: left promiscuous mode [ 825.078128][T16392] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.169493][T16392] bridge_slave_0: left allmulticast mode [ 825.204617][T16392] bridge_slave_0: left promiscuous mode [ 825.240524][T16392] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.496009][T15605] usb 2-1: Using ep0 maxpacket: 32 [ 825.610703][T16388] vivid-000: reconnect [ 826.783206][T15605] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 826.998633][T15605] usb 2-1: config 0 has no interface number 0 [ 827.004830][T15605] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.016484][ T30] audit: type=1800 audit(1751737952.594:1026): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2787" name="bus" dev="overlay" ino=2863 res=0 errno=0 [ 827.038681][T15605] usb 2-1: config 0 interface 85 has no altsetting 0 [ 827.046383][ T30] audit: type=1400 audit(1751737954.446:1027): avc: denied { node_bind } for pid=16399 comm="syz.5.2795" saddr=100.1.1.0 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 827.071215][T15605] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 827.080449][T15605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.088513][T15605] usb 2-1: Product: syz [ 827.094077][T15605] usb 2-1: Manufacturer: syz [ 827.098734][T15605] usb 2-1: SerialNumber: syz [ 827.114959][T15605] usb 2-1: config 0 descriptor?? [ 827.188920][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 827.736777][T15605] appletouch 2-1:0.85: Failed to read mode from device. [ 828.128106][T15605] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 828.161780][T15605] usb 2-1: USB disconnect, device number 69 [ 828.177583][ T24] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 828.194834][ T24] usb 3-1: USB disconnect, device number 73 [ 828.343006][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.381558][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 828.997234][ T30] audit: type=1400 audit(1751737956.299:1028): avc: denied { map } for pid=16410 comm="syz.2.2798" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 829.087918][ T30] audit: type=1400 audit(1751737956.299:1029): avc: denied { execute } for pid=16410 comm="syz.2.2798" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 829.113028][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.402829][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 829.606131][T16421] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 831.251539][T16432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 831.621414][T16432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 831.677758][T16432] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 832.472483][T15967] Bluetooth: hci2: command 0x0c1a tx timeout [ 832.848980][T14778] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 832.885931][ T30] audit: type=1400 audit(1751737959.956:1030): avc: denied { setopt } for pid=16452 comm="syz.5.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 833.247786][T14778] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 833.290745][T14778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.324666][T14778] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 833.333735][T14778] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 833.407582][T14778] usb 3-1: Manufacturer: syz [ 833.419786][T14778] usb 3-1: config 0 descriptor?? [ 833.815590][T15967] Bluetooth: hci5: command 0x0419 tx timeout [ 833.821946][T15967] Bluetooth: hci3: command 0x0c1a tx timeout [ 834.179327][T14778] rc_core: IR keymap rc-hauppauge not found [ 834.186474][T14778] Registered IR keymap rc-empty [ 834.204803][T14778] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 834.233569][T14778] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 834.252113][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 834.424618][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 834.512382][T16489] netlink: 'syz.5.2817': attribute type 10 has an invalid length. [ 834.560372][T14778] usb 3-1: USB disconnect, device number 74 [ 834.619483][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 834.672268][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 834.912989][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 834.932593][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 835.019259][T16498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2819'. [ 835.028788][T16498] x_tables: ip_tables: udp match: only valid for protocol 17 [ 835.182694][ T24] usb 5-1: Product: syz [ 835.342377][ T24] usb 5-1: Manufacturer: syz [ 835.400170][ T24] usb 5-1: SerialNumber: syz [ 835.424127][ T24] usb 5-1: config 0 descriptor?? [ 835.450496][ T24] usb 5-1: selecting invalid altsetting 0 [ 835.566931][T16499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 835.686705][T16499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 835.692677][T16499] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 836.198578][T14778] usb 5-1: USB disconnect, device number 72 [ 837.204766][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 837.422016][T16520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.521141][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.577833][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 837.599189][T15967] Bluetooth: hci2: command 0x0c1a tx timeout [ 837.644522][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.663843][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.671844][ T24] usb 2-1: Product: syz [ 837.681887][ T24] usb 2-1: Manufacturer: syz [ 837.696470][ T24] usb 2-1: SerialNumber: syz [ 837.708908][ T24] cdc_mbim 2-1:1.0: skipping garbage [ 837.920649][T15967] Bluetooth: hci5: command 0x0419 tx timeout [ 837.926819][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 838.145703][T16528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 838.389072][ T24] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 838.441944][ T24] cdc_mbim 2-1:1.0: bind() failure [ 838.667531][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 838.685376][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'. [ 838.705123][ T24] cdc_ncm 2-1:1.1: bind() failure [ 839.431058][T15605] usb 2-1: USB disconnect, device number 70 [ 839.499035][T16570] binder: BINDER_SET_CONTEXT_MGR already set [ 839.517717][T16570] binder: 16568:16570 ioctl 4018620d 200000000040 returned -16 [ 840.755859][T16566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 840.807732][T16566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 840.938139][T16566] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 841.647871][ T5832] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 841.667599][T16598] netlink: 'syz.4.2847': attribute type 10 has an invalid length. [ 841.692842][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 841.702926][T16598] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 842.146982][T16609] syz.1.2848: attempt to access beyond end of device [ 842.146982][T16609] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 842.160241][T16609] SQUASHFS error: Failed to read block 0x0: -5 [ 842.166622][T16609] unable to read squashfs_super_block [ 843.366460][ T5832] Bluetooth: hci5: command 0x0419 tx timeout [ 843.372563][T15967] Bluetooth: hci3: command 0x0c1a tx timeout [ 843.618580][T15605] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 843.865994][T15605] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 843.873440][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 844.270375][T16631] netlink: 'syz.4.2855': attribute type 1 has an invalid length. [ 844.482408][T15605] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 844.560358][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 844.611729][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 844.877740][T15605] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 844.930676][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 844.951615][T15605] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.265017][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 845.310567][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 845.342217][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 845.356072][T15605] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 845.356822][ T30] audit: type=1400 audit(1751737971.620:1031): avc: denied { remount } for pid=16640 comm="syz.5.2858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 845.373920][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 845.425250][T15605] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.524107][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 845.538858][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 845.550516][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 845.560154][T15605] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 845.679117][T15605] usb 4-1: string descriptor 0 read error: -22 [ 845.687329][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 845.692673][ T9] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 845.698620][T15605] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 845.712983][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 845.721333][ T24] usb 2-1: Product: syz [ 845.728449][T15605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.736644][ T24] usb 2-1: Manufacturer: syz [ 845.741269][ T24] usb 2-1: SerialNumber: syz [ 845.755103][ T24] usb 2-1: config 0 descriptor?? [ 846.184266][T15605] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 846.193524][ T24] usb 2-1: selecting invalid altsetting 0 [ 846.219387][T15605] usb 4-1: USB disconnect, device number 67 [ 846.249745][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.275708][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.324557][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 846.341499][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.372053][ T9] usb 6-1: config 0 descriptor?? [ 846.600508][T14778] usb 2-1: USB disconnect, device number 71 [ 846.613141][T16656] delete_channel: no stack [ 846.863995][ T9] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 846.982311][T16672] syz.2.2867 (16672): drop_caches: 2 [ 847.062352][T16672] syz.2.2867 (16672): drop_caches: 2 [ 848.289793][ T9] usb 6-1: USB disconnect, device number 50 [ 848.553253][ T30] audit: type=1400 audit(1751737974.604:1032): avc: denied { getopt } for pid=16683 comm="syz.4.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 849.108258][T16699] syz.3.2875: attempt to access beyond end of device [ 849.108258][T16699] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 849.121546][T16699] SQUASHFS error: Failed to read block 0x0: -5 [ 849.127955][T16699] unable to read squashfs_super_block [ 853.040728][T15605] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 853.487741][T15605] usb 2-1: Using ep0 maxpacket: 8 [ 853.525590][T15605] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 853.544294][T15605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.553277][T15605] usb 2-1: Product: syz [ 853.557543][T15605] usb 2-1: Manufacturer: syz [ 853.566125][T15605] usb 2-1: SerialNumber: syz [ 853.576832][T15605] usb 2-1: config 0 descriptor?? [ 853.596603][T15605] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 853.631770][T15605] dvb-usb: bulk message failed: -22 (2/0) [ 853.654634][T15605] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.673812][T15605] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 853.694153][T15605] usb 2-1: media controller created [ 853.742164][T15605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.860721][T15605] dvb-usb: bulk message failed: -22 (1/0) [ 853.866525][T15605] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 853.896836][T15605] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 853.936607][T15605] dvb-usb: schedule remote query interval to 50 msecs. [ 853.943492][T15605] dvb-usb: bulk message failed: -22 (2/0) [ 853.971815][T15605] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 854.010240][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 854.016306][ T24] dvb-usb: error while querying for an remote control event. [ 854.140809][T15605] usb 2-1: USB disconnect, device number 72 [ 854.339085][T16761] netlink: 'syz.4.2895': attribute type 4 has an invalid length. [ 854.456823][T15605] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 855.551848][T16773] openvswitch: netlink: Missing key (keys=40, expected=100) [ 856.250658][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2905'. [ 856.682680][T16798] mkiss: ax0: crc mode is auto. [ 856.867270][T16801] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 856.867270][T16801] program syz.4.2909 not setting count and/or reply_len properly [ 856.885654][ T30] audit: type=1400 audit(1751737982.368:1033): avc: denied { setopt } for pid=16799 comm="syz.5.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 860.532252][T14778] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 860.563335][T15605] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 860.670076][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 860.764477][T15605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.952247][T15605] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 860.961857][T15605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.976083][T15605] usb 3-1: config 0 descriptor?? [ 861.023137][T14778] usb 5-1: Using ep0 maxpacket: 16 [ 861.036843][T14778] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 861.047507][T14778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.056194][T14778] usb 5-1: Product: syz [ 861.060496][T14778] usb 5-1: Manufacturer: syz [ 861.065137][T14778] usb 5-1: SerialNumber: syz [ 861.197518][T16846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.210108][T16846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.218774][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 861.229891][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 861.239770][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.249182][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.306959][T16860] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2925'. [ 861.420550][T16860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.647023][T15605] usbhid 3-1:0.0: can't add hid device: -71 [ 861.854585][T16851] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 862.017410][T15605] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 862.078931][ T30] audit: type=1800 audit(1751737987.260:1034): pid=16863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2922" name="bus" dev="overlay" ino=2706 res=0 errno=0 [ 862.680301][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 864.350611][T15605] usb 3-1: USB disconnect, device number 75 [ 864.556102][T16868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'. [ 864.947574][ T24] usb 4-1: USB disconnect, device number 68 [ 865.764006][T14778] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 865.838328][T14778] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 865.869757][T14778] usb 5-1: USB disconnect, device number 73 [ 866.135168][T13898] udevd[13898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.250587][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 866.356045][T16891] netlink: 'syz.5.2933': attribute type 10 has an invalid length. [ 866.376337][T16891] dummy0: entered promiscuous mode [ 866.382700][T16891] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 866.479900][ T24] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 866.510364][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.544121][ T24] usb 2-1: Product: syz [ 866.555417][ T24] usb 2-1: Manufacturer: syz [ 866.569302][ T24] usb 2-1: SerialNumber: syz [ 866.590425][ T24] usb 2-1: config 0 descriptor?? [ 866.598554][T16896] binder_alloc: 16895: binder_alloc_buf, no vma [ 866.640014][ T5832] Bluetooth: hci1: urb ffff88814bce4700 submission failed (2) [ 867.826835][ T24] usb 2-1: USB disconnect, device number 73 [ 868.244151][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2941'. [ 868.271848][T14778] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 868.549615][T16921] lo speed is unknown, defaulting to 1000 [ 868.555706][T16921] lo speed is unknown, defaulting to 1000 [ 868.565937][T16921] lo speed is unknown, defaulting to 1000 [ 868.587437][T16921] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 868.635218][T16921] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 868.713377][T16921] lo speed is unknown, defaulting to 1000 [ 868.727912][T16921] lo speed is unknown, defaulting to 1000 [ 868.741485][T16921] lo speed is unknown, defaulting to 1000 [ 868.755382][T16921] lo speed is unknown, defaulting to 1000 [ 868.769021][T16921] lo speed is unknown, defaulting to 1000 [ 868.902042][T14778] usb 5-1: Using ep0 maxpacket: 8 [ 868.922693][ T30] audit: type=1400 audit(1751737993.658:1035): avc: denied { connect } for pid=16920 comm="syz.5.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 868.927158][T14778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.955658][T14778] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 868.964957][T14778] usb 5-1: New USB device strings: Mfr=0, Product=179, SerialNumber=0 [ 868.974151][T14778] usb 5-1: Product: syz [ 868.983905][T14778] usb 5-1: config 0 descriptor?? [ 869.441464][T16927] overlay: Unknown parameter '/' [ 870.394289][ T30] audit: type=1400 audit(1751737994.753:1036): avc: denied { listen } for pid=16931 comm="syz.1.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 872.078456][T14778] usbhid 5-1:0.0: can't add hid device: -71 [ 872.084436][T14778] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 872.106565][T14778] usb 5-1: USB disconnect, device number 74 [ 874.280143][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.286592][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.556165][T16980] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 875.638548][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 875.648332][T16983] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 875.819593][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 875.854379][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 875.927519][ T9] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 875.952610][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.976974][ T9] usb 2-1: Product: syz [ 875.991622][ T9] usb 2-1: Manufacturer: syz [ 876.007976][ T9] usb 2-1: SerialNumber: syz [ 876.048233][T16992] netlink: 'syz.4.2961': attribute type 4 has an invalid length. [ 876.090887][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2962'. [ 876.268603][T14778] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 876.594386][T16972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.736553][T14778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 876.802053][T16972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.929017][T14778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.112874][T14778] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 877.208468][ T9] usb 2-1: selecting invalid altsetting 1 [ 877.214363][T14778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.230594][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 877.230690][ T9] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 877.271253][T14778] usb 4-1: config 0 descriptor?? [ 877.290814][ T9] usb 2-1: USB disconnect, device number 74 [ 877.772927][T14778] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 877.860248][T17021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.882642][ T30] audit: type=1400 audit(1751738002.040:1037): avc: denied { write } for pid=17020 comm="syz.4.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 877.902789][T17024] siw: device registration error -23 [ 877.905634][T17026] smc: removing ib device syz2 [ 877.908348][T17024] siw: device registration error -23 [ 877.918600][T17024] siw: device registration error -23 [ 877.924079][T17024] siw: device registration error -23 [ 877.929594][T17024] siw: device registration error -23 [ 877.935123][T17024] siw: device registration error -23 [ 877.940722][T17024] siw: device registration error -23 [ 877.946369][T17024] siw: device registration error -23 [ 877.951891][T17024] siw: device registration error -23 [ 877.958823][T17024] siw: device registration error -23 [ 877.964357][T17024] siw: device registration error -23 [ 877.970022][T17024] siw: device registration error -23 [ 877.975547][T17024] siw: device registration error -23 [ 877.981116][T17024] siw: device registration error -23 [ 877.986637][T17024] siw: device registration error -23 [ 877.991433][T14778] usb 4-1: USB disconnect, device number 69 [ 877.992168][T17024] siw: device registration error -23 [ 878.003388][T17024] siw: device registration error -23 [ 878.008904][T17024] siw: device registration error -23 [ 878.014507][T17024] siw: device registration error -23 [ 878.020018][T17024] siw: device registration error -23 [ 878.025587][T17024] siw: device registration error -23 [ 878.031087][T17024] siw: device registration error -23 [ 878.036685][T17024] siw: device registration error -23 [ 878.042259][T17024] siw: device registration error -23 [ 878.047819][T17024] siw: device registration error -23 [ 878.053430][T17024] siw: device registration error -23 [ 878.058980][T17024] siw: device registration error -23 [ 878.064555][T17024] siw: device registration error -23 [ 878.070113][T17024] siw: device registration error -23 [ 878.076332][T17024] siw: device registration error -23 [ 878.081859][T17024] siw: device registration error -23 [ 878.087476][T17024] siw: device registration error -23 [ 878.093002][T17024] siw: device registration error -23 [ 878.584497][T17026] ------------[ cut here ]------------ [ 878.589997][T17026] WARNING: CPU: 0 PID: 17026 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 878.600839][T17026] Modules linked in: [ 878.604956][T17026] CPU: 0 UID: 0 PID: 17026 Comm: syz.4.2971 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 878.617385][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.627465][T17026] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 878.632939][T17026] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 5d 0a f9 e8 c0 5d 0a f9 90 <0f> 0b 90 5b e9 b6 5d 0a f9 e8 b1 39 71 f9 eb da 66 66 2e 0f 1f 84 [ 878.652959][T17026] RSP: 0018:ffffc9000518f1f0 EFLAGS: 00010293 [ 878.659154][T17026] RAX: 0000000000000000 RBX: ffff888021fc1320 RCX: ffffffff888bfc94 [ 878.667148][T17026] RDX: ffff88802510c880 RSI: ffffffff88b1c2c0 RDI: ffff888021fc13a0 [ 878.675144][T17026] RBP: ffffffff88b02770 R08: 0000000000000005 R09: 0000000000000001 [ 878.683119][T17026] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888021fc0668 [ 878.691421][T17026] R13: ffff888021fbffe0 R14: ffff888021fbffe0 R15: ffff888021fc1080 [ 878.699419][T17026] FS: 00007f0d3ebb46c0(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 878.708474][T17026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.715103][T17026] CR2: 00007f1c2d9c8cb7 CR3: 000000007c7af000 CR4: 00000000003526f0 [ 878.723485][T17026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 878.731478][T17026] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 878.739464][T17026] Call Trace: [ 878.742736][T17026] [ 878.745659][T17026] rxe_dealloc+0x25/0xc0 [ 878.750222][T17026] ib_dealloc_device+0x49/0x230 [ 878.755075][T17026] __ib_unregister_device+0x396/0x480 [ 878.760460][T17026] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 878.766352][T17026] ib_unregister_device_and_put+0x5a/0x80 [ 878.772084][T17026] nldev_dellink+0x21f/0x320 [ 878.776671][T17026] ? __pfx_nldev_dellink+0x10/0x10 [ 878.782150][T17026] ? cap_capable+0xb3/0x250 [ 878.786651][T17026] ? bpf_lsm_capable+0x9/0x10 [ 878.791336][T17026] ? security_capable+0x7e/0x260 [ 878.796270][T17026] ? ns_capable+0xd7/0x110 [ 878.800682][T17026] ? __pfx_nldev_dellink+0x10/0x10 [ 878.805884][T17026] rdma_nl_rcv_msg+0x387/0x6e0 [ 878.810654][T17026] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 878.816303][T17026] ? __lock_acquire+0x622/0x1c90 [ 878.821261][T17026] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 878.827740][T17026] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 878.834723][T17026] ? netlink_deliver_tap+0x1ae/0xd30 [ 878.840016][T17026] ? is_vmalloc_addr+0x86/0xa0 [ 878.845124][T17026] netlink_unicast+0x53a/0x7f0 [ 878.849886][T17026] ? __pfx_netlink_unicast+0x10/0x10 [ 878.855183][T17026] netlink_sendmsg+0x8d1/0xdd0 [ 878.859947][T17026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.865233][T17026] ____sys_sendmsg+0xa95/0xc70 [ 878.870009][T17026] ? copy_msghdr_from_user+0x10a/0x160 [ 878.875484][T17026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.881114][T17026] ? __pfx_futex_wake_mark+0x10/0x10 [ 878.886402][T17026] ___sys_sendmsg+0x134/0x1d0 [ 878.891108][T17026] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.896307][T17026] ? __lock_acquire+0x622/0x1c90 [ 878.901270][T17026] __sys_sendmsg+0x16d/0x220 [ 878.905862][T17026] ? __pfx___sys_sendmsg+0x10/0x10 [ 878.911323][T17026] ? __x64_sys_futex+0x1e0/0x4c0 [ 878.916289][T17026] do_syscall_64+0xcd/0x4c0 [ 878.920810][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.926698][T17026] RIP: 0033:0x7f0d40d8e929 [ 878.931124][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.951144][T17026] RSP: 002b:00007f0d3ebb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.959569][T17026] RAX: ffffffffffffffda RBX: 00007f0d40fb6160 RCX: 00007f0d40d8e929 [ 878.967559][T17026] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000004b [ 878.975728][T17026] RBP: 00007f0d40e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 878.984060][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.992050][T17026] R13: 0000000000000000 R14: 00007f0d40fb6160 R15: 00007ffce6e99358 [ 879.000075][T17026] [ 879.003091][T17026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 879.010347][T17026] CPU: 0 UID: 0 PID: 17026 Comm: syz.4.2971 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 879.022383][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 879.032412][T17026] Call Trace: [ 879.035669][T17026] [ 879.038576][T17026] dump_stack_lvl+0x3d/0x1f0 [ 879.043150][T17026] panic+0x71c/0x800 [ 879.047027][T17026] ? __pfx_panic+0x10/0x10 [ 879.051424][T17026] ? show_trace_log_lvl+0x29b/0x3e0 [ 879.056607][T17026] ? check_panic_on_warn+0x1f/0xb0 [ 879.061693][T17026] ? rxe_pool_cleanup+0x41/0x60 [ 879.066523][T17026] check_panic_on_warn+0xab/0xb0 [ 879.071446][T17026] __warn+0xf6/0x3c0 [ 879.075323][T17026] ? rxe_pool_cleanup+0x41/0x60 [ 879.080164][T17026] report_bug+0x3c3/0x580 [ 879.084479][T17026] ? rxe_pool_cleanup+0x41/0x60 [ 879.089310][T17026] handle_bug+0x184/0x210 [ 879.093617][T17026] exc_invalid_op+0x17/0x50 [ 879.098096][T17026] asm_exc_invalid_op+0x1a/0x20 [ 879.102924][T17026] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 879.108370][T17026] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 5d 0a f9 e8 c0 5d 0a f9 90 <0f> 0b 90 5b e9 b6 5d 0a f9 e8 b1 39 71 f9 eb da 66 66 2e 0f 1f 84 [ 879.127957][T17026] RSP: 0018:ffffc9000518f1f0 EFLAGS: 00010293 [ 879.134003][T17026] RAX: 0000000000000000 RBX: ffff888021fc1320 RCX: ffffffff888bfc94 [ 879.141951][T17026] RDX: ffff88802510c880 RSI: ffffffff88b1c2c0 RDI: ffff888021fc13a0 [ 879.149899][T17026] RBP: ffffffff88b02770 R08: 0000000000000005 R09: 0000000000000001 [ 879.157844][T17026] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888021fc0668 [ 879.165791][T17026] R13: ffff888021fbffe0 R14: ffff888021fbffe0 R15: ffff888021fc1080 [ 879.173755][T17026] ? __pfx_rxe_dealloc+0x10/0x10 [ 879.178711][T17026] ? __ib_unregister_device+0x384/0x480 [ 879.184270][T17026] ? rxe_pool_cleanup+0x40/0x60 [ 879.189129][T17026] rxe_dealloc+0x25/0xc0 [ 879.193381][T17026] ib_dealloc_device+0x49/0x230 [ 879.198244][T17026] __ib_unregister_device+0x396/0x480 [ 879.203623][T17026] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 879.209521][T17026] ib_unregister_device_and_put+0x5a/0x80 [ 879.215230][T17026] nldev_dellink+0x21f/0x320 [ 879.219815][T17026] ? __pfx_nldev_dellink+0x10/0x10 [ 879.224979][T17026] ? cap_capable+0xb3/0x250 [ 879.229475][T17026] ? bpf_lsm_capable+0x9/0x10 [ 879.234140][T17026] ? security_capable+0x7e/0x260 [ 879.239065][T17026] ? ns_capable+0xd7/0x110 [ 879.243467][T17026] ? __pfx_nldev_dellink+0x10/0x10 [ 879.248569][T17026] rdma_nl_rcv_msg+0x387/0x6e0 [ 879.253323][T17026] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 879.258603][T17026] ? __lock_acquire+0x622/0x1c90 [ 879.263531][T17026] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 879.269941][T17026] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 879.276877][T17026] ? netlink_deliver_tap+0x1ae/0xd30 [ 879.282153][T17026] ? is_vmalloc_addr+0x86/0xa0 [ 879.286911][T17026] netlink_unicast+0x53a/0x7f0 [ 879.291662][T17026] ? __pfx_netlink_unicast+0x10/0x10 [ 879.296940][T17026] netlink_sendmsg+0x8d1/0xdd0 [ 879.301695][T17026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.306972][T17026] ____sys_sendmsg+0xa95/0xc70 [ 879.311723][T17026] ? copy_msghdr_from_user+0x10a/0x160 [ 879.317171][T17026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.322445][T17026] ? __pfx_futex_wake_mark+0x10/0x10 [ 879.327721][T17026] ___sys_sendmsg+0x134/0x1d0 [ 879.332392][T17026] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.337577][T17026] ? __lock_acquire+0x622/0x1c90 [ 879.342522][T17026] __sys_sendmsg+0x16d/0x220 [ 879.347102][T17026] ? __pfx___sys_sendmsg+0x10/0x10 [ 879.352200][T17026] ? __x64_sys_futex+0x1e0/0x4c0 [ 879.357145][T17026] do_syscall_64+0xcd/0x4c0 [ 879.361644][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.367520][T17026] RIP: 0033:0x7f0d40d8e929 [ 879.371922][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.391514][T17026] RSP: 002b:00007f0d3ebb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 879.399915][T17026] RAX: ffffffffffffffda RBX: 00007f0d40fb6160 RCX: 00007f0d40d8e929 [ 879.407873][T17026] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000004b [ 879.415828][T17026] RBP: 00007f0d40e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 879.423782][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.431734][T17026] R13: 0000000000000000 R14: 00007f0d40fb6160 R15: 00007ffce6e99358 [ 879.439700][T17026] [ 879.442913][T17026] Kernel Offset: disabled [ 879.447218][T17026] Rebooting in 86400 seconds..