last executing test programs: 2m50.834824986s ago: executing program 2 (id=1310): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x9, 0xf06}}}}]}, 0x44}}, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m50.755008815s ago: executing program 2 (id=1311): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 2m50.712032735s ago: executing program 2 (id=1312): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) 2m50.627784198s ago: executing program 2 (id=1313): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 2m50.550893549s ago: executing program 2 (id=1314): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='ceph\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f00000003c0), 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000400)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x2000}, 0x28) 2m48.610683803s ago: executing program 2 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x20000015) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m40.973627903s ago: executing program 32 (id=1395): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 2m33.546992388s ago: executing program 33 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x20000015) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m29.451764279s ago: executing program 4 (id=1467): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {0xffff, 0x0, 0x6}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@random="73bab6110e90"]}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 2m29.371832769s ago: executing program 4 (id=1469): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240), 0x0) 2m29.34381486s ago: executing program 4 (id=1470): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x2, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="3282", 0x2}], 0x1}, 0x8400) 2m29.306135718s ago: executing program 4 (id=1471): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 2m29.201306312s ago: executing program 4 (id=1472): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa000000000000000, 0x10000, 0xe6, 0x2, 0xd}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m29.178307273s ago: executing program 4 (id=1473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r4) accept4(r3, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="08000000010000", 0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x23, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m13.914693666s ago: executing program 34 (id=1473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r4) accept4(r3, &(0x7f0000000180)=@xdp, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0xfffffffffffffe88) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="08000000010000", 0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x23, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.254194548s ago: executing program 1 (id=1612): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00'}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0/file0\x00'}, 0x18) 2m6.008856357s ago: executing program 1 (id=1615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xb4}}, 0x0) 2m5.831475547s ago: executing program 1 (id=1617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m5.667977021s ago: executing program 1 (id=1619): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 2m5.511842685s ago: executing program 1 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 2m4.823933982s ago: executing program 1 (id=1624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000700000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m4.608442108s ago: executing program 35 (id=1624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000700000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.790589723s ago: executing program 5 (id=1769): socket$vsock_stream(0x28, 0x1, 0x0) userfaultfd(0x801) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="b7", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x19, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x2, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d14, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x1256, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x8, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93a, 0x2000006, 0x1000006, 0x7ff, 0x4, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x8, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m36.02647855s ago: executing program 5 (id=1782): r0 = syz_open_dev$media(&(0x7f0000000080), 0x200, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000f40)={0x80000000, &(0x7f0000000e80)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001d00)={{0x80000000, 0x0, 0x6, [0x5, 0x2]}, {r1, 0x0, 0x4, [0x13, 0x33ec]}, 0x2, [0x36c, 0x7fff]}) 1m35.885228722s ago: executing program 5 (id=1784): mkdir(0x0, 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r0}, 0x18) 1m35.808442656s ago: executing program 5 (id=1786): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m35.754485098s ago: executing program 5 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r1, 0x84}], 0x1, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) 1m35.459524599s ago: executing program 5 (id=1792): socket$vsock_stream(0x28, 0x1, 0x0) userfaultfd(0x801) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="b7", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x19, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x2, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d14, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x1256, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x8, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93a, 0x2000006, 0x1000006, 0x7ff, 0x4, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x8, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m35.261740863s ago: executing program 36 (id=1792): socket$vsock_stream(0x28, 0x1, 0x0) userfaultfd(0x801) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="b7", @ANYRES8], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x19, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x2, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d14, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x1256, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x8, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93a, 0x2000006, 0x1000006, 0x7ff, 0x4, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x8, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m26.578769483s ago: executing program 8 (id=1840): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000300)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 1m26.48193857s ago: executing program 8 (id=1841): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004014) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 1m24.771534075s ago: executing program 8 (id=1845): r0 = socket(0x10, 0x2, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000007c0)={0x8, @pix={0x8, 0x1, 0x59455247, 0x9, 0x4, 0x6, 0x3, 0x2, 0x0, 0x2, 0x0, 0x3}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x1214040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x2f, 0x61, 0x1, 0x3, 0x68, @remote, @dev={0xfe, 0x80, '\x00', 0x23}, 0x70, 0x10, 0x836, 0x7}}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 1m21.693738288s ago: executing program 8 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xfffffffffffffff7, 0xfffffffffffffff9}) 1m21.539742864s ago: executing program 8 (id=1880): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x13) 1m21.509376136s ago: executing program 8 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@ignoreqv}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ntfs3\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'prealloc'}}]}}) 1m6.285501972s ago: executing program 37 (id=1881): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@ignoreqv}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ntfs3\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'prealloc'}}]}}) 10.864227461s ago: executing program 0 (id=2257): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb00000000000000004000", 0x27) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x51, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x7, 0x10, 0x10001}}) 6.313992779s ago: executing program 6 (id=2301): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0x400, 0x0, 0x0, 0x8, 0x70}) 5.708504181s ago: executing program 0 (id=2304): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x4010810) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.399166683s ago: executing program 6 (id=2308): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000779000/0x400000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 4.545128684s ago: executing program 6 (id=2309): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) 4.479482665s ago: executing program 9 (id=2310): socket$packet(0x11, 0x2, 0x300) syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.28699847s ago: executing program 9 (id=2314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000028, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b00ba9950034538fb00000000", 0x0, 0x81ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.164233282s ago: executing program 9 (id=2315): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x3000) socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 4.019572286s ago: executing program 9 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.521533635s ago: executing program 9 (id=2319): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000779000/0x400000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 3.445797809s ago: executing program 0 (id=2320): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000003000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, &(0x7f0000000400), 0x0, &(0x7f0000000580), 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) 2.647386662s ago: executing program 9 (id=2322): io_uring_setup(0x1b7b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f00000000c0)=0xc) 2.597656276s ago: executing program 7 (id=2323): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x12{.\x00', 0x10000, &(0x7f0000000100)={@_ha_fsid={[0x3, 0xa5]}, {0x7ff, 0x1740, 0x7, 0x4}}, 0xff2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.691288581s ago: executing program 0 (id=2324): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140, 0x11) r1 = fanotify_init(0x20, 0x40000) fanotify_mark(r1, 0x105, 0x48000032, r0, 0x0) 1.587547233s ago: executing program 3 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000028, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b00ba9950034538fb00000000", 0x0, 0x81ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.559235679s ago: executing program 7 (id=2326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 1.486821061s ago: executing program 3 (id=2327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x3, 0x0, 0x6}], 0x1, 0x0, 0x0, 0x1) 1.416246404s ago: executing program 7 (id=2328): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r4, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @val={@void, {0x812d, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "c0", "118190", 0xa00}}}}}, 0x0) 1.347965144s ago: executing program 3 (id=2329): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, 0x0) 1.294109465s ago: executing program 6 (id=2330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '#'}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.260384882s ago: executing program 7 (id=2331): futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb4, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "7f36c525"}]}]}}, "234a3802"}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a40)='^,/\x00', 0x0, 0x0) 1.200402458s ago: executing program 3 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.184408934s ago: executing program 6 (id=2333): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}, {0xfffd, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "5cfd34138ae6f66483434775cd006b110bff76eee1befd7013c92f410e77a8ac", "7c78f9802b06dc4139b18b1b898a8d11", {"175bc40f3a8e052ef51c156cdb7795b3", "73438263a380460d00ab1aba711ad2c8"}}}}}}}, 0x0) 1.032177433s ago: executing program 6 (id=2334): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b89200"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000600)="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", 0x202}, {0x0}], 0x2) 959.569473ms ago: executing program 3 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0xb8, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x49f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8db2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x398}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x80) 470.289897ms ago: executing program 3 (id=2336): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 274.566964ms ago: executing program 7 (id=2337): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) landlock_create_ruleset(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="f6", 0x1}], 0x1}}], 0x1, 0x0) 15.381812ms ago: executing program 0 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 12.662654ms ago: executing program 7 (id=2339): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x54, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x15, 0x2, 0xfffd, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xd, "bdab27b5135f29b105e5fe"}, @timestamp={0x8, 0xa, 0xffff, 0x7}, @mss={0x2, 0x4, 0x40}, @sack={0x5, 0x1e, [0xa2, 0x4776, 0x3, 0x7, 0x2, 0x1, 0x8]}]}}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c90006"], 0xe) 0s ago: executing program 0 (id=2340): syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) io_uring_setup(0x1b7b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): ting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.825094][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.853149][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 367.877464][ T5730] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 367.894473][ T5730] usb 2-1: config 168 interface 0 has no altsetting 0 [ 367.903338][ T5730] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 367.912435][ T5730] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 367.932887][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.944728][ T5730] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 367.957312][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.957671][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.968975][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.002747][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.012746][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.024271][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.037827][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.041546][ T5730] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 368.092564][ T5730] usb 2-1: config 168 interface 0 has no altsetting 0 [ 368.104462][ T5730] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 368.111962][ T5730] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 368.124746][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 368.137809][ T5730] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.149926][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.161465][ T5730] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.174782][ T5730] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 368.239363][ T5730] usb 2-1: config 168 interface 0 has no altsetting 0 [ 368.281471][ T5730] usb 2-1: string descriptor 0 read error: -22 [ 368.293829][ T5730] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 368.320307][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.398410][ T5730] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 369.175302][ T30] audit: type=1400 audit(2000000147.520:485): avc: denied { mount } for pid=10450 comm="syz.6.1557" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 369.305698][ T30] audit: type=1400 audit(2000000147.600:486): avc: denied { unmount } for pid=9976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 369.581913][T10434] wg1 speed is unknown, defaulting to 1000 [ 369.910530][T10434] lo speed is unknown, defaulting to 1000 [ 370.086813][ T5617] Bluetooth: hci6: command tx timeout [ 370.101553][T10434] lo speed is unknown, defaulting to 1000 [ 370.388039][T10488] fuse: Bad value for 'fd' [ 370.784753][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.792055][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.799714][T10434] bridge_slave_0: entered allmulticast mode [ 370.807153][T10434] bridge_slave_0: entered promiscuous mode [ 370.815673][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.823058][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.830408][T10434] bridge_slave_1: entered allmulticast mode [ 370.841225][T10434] bridge_slave_1: entered promiscuous mode [ 370.918591][T10516] fuse: Bad value for 'fd' [ 370.924244][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.945687][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.038465][T10434] team0: Port device team_slave_0 added [ 371.059597][T10434] team0: Port device team_slave_1 added [ 371.107202][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.124337][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.158285][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.171587][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.180825][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.207260][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.236612][ T5729] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 371.269457][T10434] hsr_slave_0: entered promiscuous mode [ 371.275733][T10434] hsr_slave_1: entered promiscuous mode [ 371.281720][T10434] debugfs: 'hsr0' already exists in 'hsr' [ 371.287948][T10434] Cannot create hsr debugfs directory [ 371.293489][T10526] tipc: Started in network mode [ 371.299475][T10526] tipc: Node identity 080211000001, cluster identity 4711 [ 371.306818][T10526] tipc: Enabled bearer , priority 0 [ 371.397733][ T5729] usb 6-1: Using ep0 maxpacket: 16 [ 371.410063][ T5729] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 371.443326][ T5729] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.464221][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.480923][ T5729] usb 6-1: Product: syz [ 371.485149][ T5729] usb 6-1: Manufacturer: syz [ 371.507664][ T5729] usb 6-1: SerialNumber: syz [ 371.524094][ T5729] usb 6-1: config 0 descriptor?? [ 371.584563][T10541] fuse: Bad value for 'fd' [ 371.796647][T10434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 371.839801][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.872730][T10434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 371.897308][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.911157][T10434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 371.931643][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.945220][T10434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 371.956400][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.625939][ T5729] tipc: Node number set to 134418688 [ 372.643799][ T5730] usb 2-1: USB disconnect, device number 67 [ 372.649896][ T5617] Bluetooth: hci6: command tx timeout [ 373.026961][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.034484][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.067519][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.089765][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.107844][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.115007][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.135973][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.143138][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.246674][ T991] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 373.377211][ T991] usb 7-1: device descriptor read/64, error -71 [ 373.617793][ T991] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 373.663449][T10594] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1605'. [ 373.669452][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.777826][ T991] usb 7-1: device descriptor read/64, error -71 [ 373.878935][T10603] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 373.879548][T10434] veth0_vlan: entered promiscuous mode [ 373.894921][T10603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.903383][T10603] team0: Port device netdevsim1 added [ 373.907522][ T991] usb usb7-port1: attempt power cycle [ 373.920451][T10434] veth1_vlan: entered promiscuous mode [ 373.970982][T10434] veth0_macvtap: entered promiscuous mode [ 373.982789][T10434] veth1_macvtap: entered promiscuous mode [ 374.011235][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.014156][ T5729] usb 6-1: USB disconnect, device number 2 [ 374.022307][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.043214][ T752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.062951][ T752] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.091033][ T752] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.100659][ T752] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.182929][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.191354][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.215690][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.224073][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.277714][ T991] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 374.297334][ T991] usb 7-1: device descriptor read/8, error -71 [ 374.396675][ T5729] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 374.810561][ T5617] Bluetooth: hci6: command tx timeout [ 374.856534][ T991] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 375.147516][ T991] usb 7-1: device descriptor read/8, error -71 [ 375.427077][ T991] usb usb7-port1: unable to enumerate USB device [ 375.516642][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 375.523065][ T5729] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 376.287027][ T5729] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 376.303693][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 376.318477][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.330707][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.342772][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.354415][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 376.367946][ T5729] usb 6-1: config 168 interface 0 has no altsetting 0 [ 376.379933][ T5729] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 376.392895][ T5729] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 376.407424][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 376.419898][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.432036][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.443874][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.448195][ T991] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 376.455649][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 376.477057][ T5729] usb 6-1: config 168 interface 0 has no altsetting 0 [ 376.484751][ T5729] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 376.493216][ T5729] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 376.504690][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 376.517108][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.529256][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.540814][ T5729] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.552630][ T5729] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 376.568375][ T5729] usb 6-1: config 168 interface 0 has no altsetting 0 [ 376.578201][ T5729] usb 6-1: string descriptor 0 read error: -22 [ 376.596686][ T5729] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 376.616560][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.627156][ T991] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 376.644671][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.644950][ T5729] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 376.661100][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.672737][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.688948][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.701568][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.718189][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.725489][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.738660][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.749701][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.757471][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.767482][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.779404][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.790149][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.799812][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.813621][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.821375][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.830695][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.843351][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.857594][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.867713][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.887682][ T5617] Bluetooth: hci6: command tx timeout [ 376.895778][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.906574][ T991] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.915489][ T991] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.926973][ T991] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.935449][ T991] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 376.944578][ T991] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 376.953440][ T991] usb 8-1: Product: syz [ 376.957682][ T991] usb 8-1: Manufacturer: syz [ 376.962337][ T991] usb 8-1: SerialNumber: syz [ 376.977234][ T991] usb 8-1: config 0 descriptor?? [ 376.988494][ T991] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 377.075463][ T49] team0: Port device netdevsim1 removed [ 377.099047][ T30] audit: type=1400 audit(2000000001.960:487): avc: denied { read } for pid=10651 comm="syz.6.1626" laddr=172.20.20.10 lport=48211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.307880][ T5729] usb 8-1: USB disconnect, device number 2 [ 377.321457][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.333712][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.341657][ T5729] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 377.354998][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.365121][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.380575][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.499776][ T49] bridge_slave_1: left allmulticast mode [ 377.511731][ T49] bridge_slave_1: left promiscuous mode [ 377.518553][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.535672][ T49] bridge_slave_0: left allmulticast mode [ 377.541946][ T49] bridge_slave_0: left promiscuous mode [ 377.548277][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.629948][ T49] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 377.775001][ T30] audit: type=1400 audit(2000000002.630:488): avc: denied { write } for pid=10668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.838907][ T49] bond1 (unregistering): (slave bridge1): Releasing active interface [ 377.854308][ T30] audit: type=1400 audit(2000000002.710:489): avc: denied { write } for pid=10679 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.931391][ T49] bond2 (unregistering): (slave bridge2): Releasing active interface [ 378.008393][ T49] bond4 (unregistering): (slave bridge3): Releasing active interface [ 378.313127][ T49] bond5 (unregistering): (slave bridge4): Releasing active interface [ 378.370619][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.380949][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.390619][ T49] bond0 (unregistering): Released all slaves [ 378.399809][ T49] bond1 (unregistering): Released all slaves [ 378.413124][ T49] bond2 (unregistering): Released all slaves [ 378.427076][ T49] bond3 (unregistering): Released all slaves [ 378.439740][ T49] bond4 (unregistering): Released all slaves [ 378.450836][ T49] bond5 (unregistering): Released all slaves [ 378.469031][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 378.576731][ T5729] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 378.593608][ T49] tipc: Left network mode [ 378.759949][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 378.779659][ T5729] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 378.796072][ T5729] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 378.805250][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.816942][ T5729] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 379.482960][ T5613] Bluetooth: hci0: command tx timeout [ 379.627519][T10658] wg1 speed is unknown, defaulting to 1000 [ 379.785063][ T5729] usb 4-1: config 0 has no interface number 0 [ 379.791284][ T5729] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 379.802863][ T5729] usb 4-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.816128][ T5729] usb 4-1: config 0 interface 125 has no altsetting 0 [ 379.824696][ T5729] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 379.833812][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.959400][ T30] audit: type=1400 audit(2000000001.060:490): avc: denied { write } for pid=10694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.022740][ T5724] usb 6-1: USB disconnect, device number 3 [ 380.186181][ T5729] usb 4-1: Product: syz [ 380.192867][ T5729] usb 4-1: Manufacturer: syz [ 380.195618][T10658] lo speed is unknown, defaulting to 1000 [ 380.197754][ T5729] usb 4-1: SerialNumber: syz [ 380.229543][ T5729] usb 4-1: config 0 descriptor?? [ 380.236980][ T30] audit: type=1400 audit(2000000001.330:491): avc: denied { write } for pid=10718 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.382084][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 380.716580][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 380.879576][ T24] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 380.913103][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 380.950909][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 380.980620][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 380.994402][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.007899][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.019748][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.032033][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.044019][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.056465][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.072755][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.086311][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.102103][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.121669][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.134006][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.147789][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.162626][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.175881][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.191922][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.205820][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.225675][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.243226][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.256585][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.267420][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.319737][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.347484][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 381.356721][ T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 381.365146][ T24] usb 6-1: Product: syz [ 381.378176][ T24] usb 6-1: Manufacturer: syz [ 381.385353][T10658] lo speed is unknown, defaulting to 1000 [ 381.391361][ T24] usb 6-1: SerialNumber: syz [ 381.395195][ T24] usb 6-1: config 0 descriptor?? [ 381.451765][ T30] audit: type=1400 audit(2000000002.550:492): avc: denied { write } for pid=10730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.507116][ T24] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 381.527514][ T5613] Bluetooth: hci0: command tx timeout [ 381.689884][ T5729] usb 6-1: USB disconnect, device number 4 [ 381.692898][ T30] audit: type=1400 audit(2000000002.790:493): avc: denied { write } for pid=10754 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.716441][ T5729] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 381.887835][ T991] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 381.924217][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 381.949683][ T30] audit: type=1400 audit(2000000003.040:494): avc: denied { cmd } for pid=10765 comm="syz.7.1650" path="socket:[28230]" dev="sockfs" ino=28230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.999866][ T49] hsr_slave_0: left promiscuous mode [ 382.010223][ T49] hsr_slave_1: left promiscuous mode [ 382.027259][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.040372][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.048397][ T991] usb 7-1: Using ep0 maxpacket: 8 [ 382.054849][ T991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 382.063942][ T991] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 382.075335][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.089408][ T991] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.103492][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.115880][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.127951][ T991] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 382.141508][ T991] usb 7-1: config 168 interface 0 has no altsetting 0 [ 382.149255][ T991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 382.157084][ T991] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 382.169341][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.181071][ T991] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.193478][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.208679][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.220704][ T991] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 382.234585][ T49] team0 (unregistering): Port device team_slave_1 removed [ 382.243866][ T991] usb 7-1: config 168 interface 0 has no altsetting 0 [ 382.254612][ T49] team0 (unregistering): Port device team_slave_0 removed [ 382.254876][ T991] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 382.286582][ T991] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 382.300445][ T5794] usb 4-1: USB disconnect, device number 56 [ 382.326197][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.352443][ T991] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.370005][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.398235][ T991] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.419405][ T991] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 382.446564][ T991] usb 7-1: config 168 interface 0 has no altsetting 0 [ 382.461647][ T991] usb 7-1: string descriptor 0 read error: -22 [ 382.468198][ T991] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 382.480703][ T991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.516192][ T991] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 382.538270][ T30] audit: type=1400 audit(2000000003.630:495): avc: denied { create } for pid=10778 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 382.560580][ T30] audit: type=1400 audit(2000000003.630:496): avc: denied { write } for pid=10778 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 383.016321][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.044914][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.066374][T10658] bridge_slave_0: entered allmulticast mode [ 383.082286][T10658] bridge_slave_0: entered promiscuous mode [ 383.102215][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.125844][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.152067][T10658] bridge_slave_1: entered allmulticast mode [ 383.177271][T10658] bridge_slave_1: entered promiscuous mode [ 383.200486][ T49] IPVS: stop unused estimator thread 0... [ 383.265644][ T30] audit: type=1400 audit(2000000004.360:497): avc: denied { write } for pid=10788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.300837][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.339573][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.385453][ T30] audit: type=1400 audit(2000000004.480:498): avc: denied { write } for pid=10813 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.422511][T10658] team0: Port device team_slave_0 added [ 383.454912][T10658] team0: Port device team_slave_1 added [ 383.534799][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.551257][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.607261][ T5613] Bluetooth: hci0: command tx timeout [ 383.614126][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.642159][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.657787][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.702842][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.766925][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 383.941440][T10658] hsr_slave_0: entered promiscuous mode [ 383.948822][T10658] hsr_slave_1: entered promiscuous mode [ 383.955157][T10658] debugfs: 'hsr0' already exists in 'hsr' [ 383.965664][T10658] Cannot create hsr debugfs directory [ 383.980549][T10819] tipc: Started in network mode [ 383.988995][T10819] tipc: Node identity 080211000001, cluster identity 4711 [ 384.006741][T10819] tipc: Enabled bearer , priority 0 [ 384.485251][T10658] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 384.519987][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.533035][T10658] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 384.545218][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.553444][T10658] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 384.567592][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.575978][T10658] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 384.579366][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1671'. [ 384.594111][T10658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.605224][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1671'. [ 384.732619][ T30] audit: type=1400 audit(2000000005.830:499): avc: denied { bind } for pid=10848 comm="syz.7.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.743123][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.774971][ T30] audit: type=1400 audit(2000000005.860:500): avc: denied { setopt } for pid=10848 comm="syz.7.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.804416][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1672'. [ 384.804943][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.829129][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.836273][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.873486][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.880631][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.129307][ T5729] tipc: Node number set to 134418688 [ 385.274927][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.341363][ T30] audit: type=1400 audit(2000000006.440:501): avc: denied { ioctl } for pid=10872 comm="syz.5.1678" path="/dev/sg0" dev="devtmpfs" ino=797 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 385.522261][T10658] veth0_vlan: entered promiscuous mode [ 385.536400][T10658] veth1_vlan: entered promiscuous mode [ 385.555806][T10658] veth0_macvtap: entered promiscuous mode [ 385.564638][T10658] veth1_macvtap: entered promiscuous mode [ 385.578116][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.605521][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.650850][T10623] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.664051][T10623] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.679870][T10623] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.691478][ T5613] Bluetooth: hci0: command tx timeout [ 385.700882][T10623] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.728079][ T991] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 385.775624][T10623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.787262][T10623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.812075][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.820595][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.906638][ T991] usb 6-1: Using ep0 maxpacket: 16 [ 385.913139][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.936551][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.077184][ T991] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 386.090411][ T991] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 386.100489][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.110602][ T991] usb 6-1: config 0 descriptor?? [ 386.989171][ T5343] usb 7-1: USB disconnect, device number 6 [ 387.219984][ T991] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 387.251430][ T991] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 387.276678][ T991] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 387.297912][ T991] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 387.317445][ T991] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 387.338535][ T991] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 387.381910][ T991] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 387.396705][ T5707] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 387.414926][ T991] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 387.500034][ T5724] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 387.514515][ T991] usb 6-1: USB disconnect, device number 5 [ 387.527077][ T5724] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 387.559611][ T5724] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 387.581413][ T5707] usb 9-1: Using ep0 maxpacket: 16 [ 387.586614][ T5724] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 387.624455][ T5707] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 387.644837][ T5707] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 387.654835][ T5707] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.663079][ T5707] usb 9-1: Product: syz [ 387.667873][ T5707] usb 9-1: Manufacturer: syz [ 387.672553][ T5707] usb 9-1: SerialNumber: syz [ 387.680493][ T5707] usb 9-1: config 0 descriptor?? [ 387.693376][ T5707] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 387.703207][ T5707] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 389.006644][ T5724] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 389.096351][ T5707] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 389.166644][ T5724] usb 7-1: Using ep0 maxpacket: 8 [ 389.179964][ T5724] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 389.199732][ T5724] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 389.224458][T10941] fuse: Bad value for 'fd' [ 389.234089][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.257835][ T5724] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.281654][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.305546][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.342195][ T5724] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 389.355954][ T5724] usb 7-1: config 168 interface 0 has no altsetting 0 [ 389.368965][ T5724] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 389.384720][ T5724] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 389.396325][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.410896][ T5724] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.425861][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.439902][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 390.091659][ T5707] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 390.092112][ T5724] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 390.106781][ T5707] em28xx 9-1:0.0: board has no eeprom [ 390.118333][ T5724] usb 7-1: config 168 interface 0 has no altsetting 0 [ 390.169115][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 390.217567][ T5724] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 390.227468][ T991] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 390.247442][ T5724] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 390.268038][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 390.279662][ T5724] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 390.291857][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 390.304258][ T5724] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 390.322286][ T5724] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 390.336250][ T5724] usb 7-1: config 168 interface 0 has no altsetting 0 [ 390.345836][ T5724] usb 7-1: string descriptor 0 read error: -22 [ 390.352263][ T5724] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 390.362599][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.372235][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 390.382566][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 390.398328][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.407728][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 390.412878][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.424732][ T24] usb 6-1: Product: syz [ 390.435237][ T991] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 390.448351][ T5724] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 390.455776][ T24] usb 6-1: Manufacturer: syz [ 390.456849][ T5707] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 390.463969][ T24] usb 6-1: SerialNumber: syz [ 390.478121][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 390.482118][ T5707] em28xx 9-1:0.0: dvb set to bulk mode. [ 390.495601][ T991] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 390.507327][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.515468][ T991] usb 4-1: Product: syz [ 390.519872][ T5730] em28xx 9-1:0.0: Binding DVB extension [ 390.531094][ T5707] usb 9-1: USB disconnect, device number 2 [ 390.552493][ T5707] em28xx 9-1:0.0: Disconnecting em28xx [ 390.565607][ T991] usb 4-1: Manufacturer: syz [ 390.566448][ T5730] em28xx 9-1:0.0: Registering input extension [ 390.571005][ T991] usb 4-1: SerialNumber: syz [ 390.583852][ T991] usb 4-1: config 0 descriptor?? [ 390.588586][ T5707] em28xx 9-1:0.0: Closing input extension [ 390.591915][ T991] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 390.621585][ T991] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 390.632163][ T5707] em28xx 9-1:0.0: Freeing device [ 390.710021][T10957] Bluetooth: MGMT ver 1.23 [ 390.710717][ T24] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 390.723800][ T24] cdc_ncm 6-1:1.0: bind() failure [ 390.739177][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 390.757002][ T24] cdc_ncm 6-1:1.1: bind() failure [ 390.777805][ T24] usb 6-1: USB disconnect, device number 6 [ 391.006634][ T5730] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 391.084278][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1712'. [ 391.165114][ T5730] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.176731][ T5730] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.187082][ T5730] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.197092][ T991] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 391.203967][ T5730] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.211828][ T991] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 391.219759][ T5730] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.233578][ T5730] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.241667][ T5730] usb 8-1: Product: syz [ 391.245839][ T5730] usb 8-1: Manufacturer: syz [ 391.257074][ T5730] cdc_wdm 8-1:1.0: skipping garbage [ 391.266559][ T5730] cdc_wdm 8-1:1.0: skipping garbage [ 391.278890][ T5730] cdc_wdm 8-1:1.0: skipping garbage [ 391.289005][ T5730] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 391.405397][T10974] fuse: Bad value for 'fd' [ 391.426964][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 391.464326][ T5730] usb 8-1: USB disconnect, device number 3 [ 392.218841][ T991] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 392.237519][ T991] em28xx 4-1:0.0: No AC97 audio processor [ 392.244674][ T24] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 392.308159][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.338415][ T24] usb 9-1: config 0 descriptor?? [ 392.360550][ T24] cp210x 9-1:0.0: cp210x converter detected [ 392.632794][T10985] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1720'. [ 392.646379][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.655311][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.690281][T10985] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1720'. [ 392.772841][ T24] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 392.788210][ T24] cp210x 9-1:0.0: GPIO initialisation failed: -524 [ 392.799502][ T24] usb 9-1: cp210x converter now attached to ttyUSB0 [ 393.119519][ T5730] usb 9-1: USB disconnect, device number 3 [ 393.147883][ T5730] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 393.184786][ T5730] cp210x 9-1:0.0: device disconnected [ 393.311408][ T9] usb 4-1: USB disconnect, device number 57 [ 393.350540][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 393.369871][ T9] em28xx 4-1:0.0: Freeing device [ 394.253984][ T5724] usb 7-1: USB disconnect, device number 7 [ 395.396609][ T5730] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 395.507705][ T30] audit: type=1400 audit(2000000016.610:502): avc: denied { write } for pid=11012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.568803][ T5730] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.603795][ T5730] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.605041][ T30] audit: type=1400 audit(2000000016.700:503): avc: denied { write } for pid=11039 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.628733][ T5730] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.675507][ T5730] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.722384][ T5730] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.744198][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.762665][ T5730] usb 6-1: Product: syz [ 395.779863][ T5730] usb 6-1: Manufacturer: syz [ 395.791790][ T5730] cdc_wdm 6-1:1.0: skipping garbage [ 395.808832][ T5730] cdc_wdm 6-1:1.0: skipping garbage [ 395.819214][ T5730] cdc_wdm 6-1:1.0: skipping garbage [ 395.834882][ T5730] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 396.024752][ T9] usb 6-1: USB disconnect, device number 7 [ 396.068666][ T5794] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 396.240242][ T5794] usb 7-1: Using ep0 maxpacket: 16 [ 396.268399][ T5794] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 396.288528][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 396.311368][ T5794] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 396.336916][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.357084][ T5794] usb 7-1: Product: syz [ 396.370486][ T5794] usb 7-1: Manufacturer: syz [ 396.375525][ T5794] usb 7-1: SerialNumber: syz [ 396.392280][ T5794] usb 7-1: config 0 descriptor?? [ 396.417935][ T5794] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 396.427799][ T5794] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 397.025088][ T5794] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 397.032947][ T5794] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 397.236649][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 397.419382][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.439724][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 397.460319][ T5794] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 397.471536][ T5794] em28xx 7-1:0.0: No AC97 audio processor [ 397.488946][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 397.532907][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.571857][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.581161][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.600489][ T9] usb 6-1: config 0 descriptor?? [ 397.719641][T11070] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 398.048839][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 398.840567][ T5794] usb 7-1: USB disconnect, device number 8 [ 398.859444][ T5794] em28xx 7-1:0.0: Disconnecting em28xx [ 398.874359][ T30] audit: type=1400 audit(2000000019.970:504): avc: denied { write } for pid=11076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.935786][ T5794] em28xx 7-1:0.0: Freeing device [ 398.996012][ T30] audit: type=1400 audit(2000000020.090:505): avc: denied { write } for pid=11102 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.193476][ T30] audit: type=1400 audit(2000000020.290:506): avc: denied { write } for pid=11105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.227963][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 399.240399][ T5794] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 399.262744][ T30] audit: type=1400 audit(2000000020.360:507): avc: denied { write } for pid=11116 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.396932][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 399.398609][ T5794] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 399.412663][ T5794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.423324][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.423642][ T5794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 399.440950][ T5794] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 399.441405][ T9] usb 9-1: config 0 has no interface number 0 [ 399.453008][ T5794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 399.470628][ T5794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 399.475287][ T9] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 399.488497][ T5794] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 399.502406][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 399.521223][ T5794] usb 7-1: Product: syz [ 399.527208][ T9] usb 9-1: config 0 interface 1 has no altsetting 0 [ 399.535748][ T5794] usb 7-1: Manufacturer: syz [ 399.546338][ T9] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 399.555366][ T5794] cdc_wdm 7-1:1.0: skipping garbage [ 399.558257][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.574234][ T5794] cdc_wdm 7-1:1.0: skipping garbage [ 399.585942][ T5794] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 399.589620][ T9] usb 9-1: Product: syz [ 399.602262][ T5794] cdc_wdm 7-1:1.0: Unknown control protocol [ 399.612271][ T9] usb 9-1: Manufacturer: syz [ 399.615874][ T30] audit: type=1400 audit(2000000020.720:508): avc: denied { write } for pid=11119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.623680][ T9] usb 9-1: SerialNumber: syz [ 399.650231][ T9] usb 9-1: config 0 descriptor?? [ 399.782112][ T30] audit: type=1400 audit(2000000020.880:509): avc: denied { write } for pid=11133 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.817510][T11130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.814977][ T5794] usb 7-1: USB disconnect, device number 9 [ 400.891536][ T9] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 400.907739][ T9] cx231xx 9-1:0.1: Failed to read PCB config [ 400.921667][ T9] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71 [ 400.963958][ T9] usb 9-1: USB disconnect, device number 4 [ 401.274172][ T5707] usb 6-1: USB disconnect, device number 8 [ 401.577071][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 401.756675][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 401.800152][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.810233][ T9] usb 9-1: config 0 has no interface number 0 [ 401.816480][ T9] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 401.835590][ T9] usb 9-1: config 0 interface 1 has no altsetting 0 [ 401.856301][ T9] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 401.889611][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.914332][ T9] usb 9-1: Product: syz [ 401.925189][ T9] usb 9-1: Manufacturer: syz [ 401.941002][ T9] usb 9-1: SerialNumber: syz [ 401.969416][ T9] usb 9-1: config 0 descriptor?? [ 402.205217][ T9] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 402.220241][ T9] cx231xx 9-1:0.1: bad scenario!!!!! [ 402.220241][ T9] config_info=0 [ 402.230770][ T9] cx231xx 9-1:0.1: Failed to read PCB config [ 402.469875][ T991] usb 9-1: USB disconnect, device number 5 [ 403.778698][ T30] audit: type=1400 audit(2000000024.880:510): avc: denied { bind } for pid=11176 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 403.936587][ T991] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 403.955709][ T5794] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 404.096732][ T5724] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 404.118174][T11189] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 404.128870][ T5794] usb 8-1: Using ep0 maxpacket: 16 [ 404.130321][T11189] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 404.134156][ T991] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.178350][ T5794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 404.196678][ T991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.211937][ T5794] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.222965][ T5794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.232709][ T991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 404.248621][ T5794] usb 8-1: Product: syz [ 404.256316][ T991] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.272145][ T5794] usb 8-1: Manufacturer: syz [ 404.280300][ T5794] usb 8-1: SerialNumber: syz [ 404.289644][ T5724] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.302350][ T5794] usb 8-1: config 0 descriptor?? [ 404.307382][ T991] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.319247][ T5724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.336315][ T5794] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 404.349569][ T991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.358295][ T5724] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.367303][ T5794] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 404.374146][ T5724] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 404.386753][ T991] usb 7-1: config 0 descriptor?? [ 404.392151][ T5724] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 404.406047][ T5724] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 404.453531][ T5724] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.462874][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 404.471107][ T5724] usb 6-1: Product: syz [ 404.475356][ T5724] usb 6-1: Manufacturer: syz [ 404.493486][ T5724] cdc_wdm 6-1:1.0: skipping garbage [ 404.498953][ T5724] cdc_wdm 6-1:1.0: skipping garbage [ 404.505780][ T5724] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 404.562755][ T5724] cdc_wdm 6-1:1.0: Unknown control protocol [ 404.696609][T11179] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 404.712811][ T9] usb 6-1: USB disconnect, device number 9 [ 404.820390][ T991] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 404.954311][ T5794] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 405.630681][ T5794] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 405.669399][ T5794] em28xx 8-1:0.0: board has no eeprom [ 406.017952][ T5794] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 406.038776][ T5794] em28xx 8-1:0.0: dvb set to bulk mode. [ 406.050763][ T5724] em28xx 8-1:0.0: Binding DVB extension [ 406.063890][ T5794] usb 8-1: USB disconnect, device number 4 [ 406.084922][ T5794] em28xx 8-1:0.0: Disconnecting em28xx [ 406.147675][T11234] netlink: 'syz.8.1790': attribute type 1 has an invalid length. [ 406.172719][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1790'. [ 406.182528][ T5724] em28xx 8-1:0.0: Registering input extension [ 406.192649][ T5794] em28xx 8-1:0.0: Closing input extension [ 406.242779][ T5794] em28xx 8-1:0.0: Freeing device [ 407.437975][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.448965][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.460371][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.469693][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.477238][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.576766][ T5794] usb 7-1: reset high-speed USB device number 10 using dummy_hcd [ 407.870131][ T30] audit: type=1400 audit(2000000028.960:511): avc: denied { write } for pid=11267 comm="syz.6.1803" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 407.954188][T11273] sctp: [Deprecated]: syz.7.1800 (pid 11273) Use of int in max_burst socket option. [ 407.954188][T11273] Use struct sctp_assoc_value instead [ 408.014849][T11272] netlink: 'syz.8.1804': attribute type 1 has an invalid length. [ 408.230666][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1804'. [ 408.425721][T11274] bond1: (slave bridge1): making interface the new active one [ 408.458805][T11274] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 409.528251][ T5617] Bluetooth: hci2: command tx timeout [ 409.619260][ T5724] usb 7-1: USB disconnect, device number 10 [ 409.702190][T11250] wg1 speed is unknown, defaulting to 1000 [ 409.764165][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1811'. [ 409.920159][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 409.925001][T11305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.475607][T11250] lo speed is unknown, defaulting to 1000 [ 411.148621][ T10] usb 9-1: config index 0 descriptor too short (expected 108, got 45) [ 411.181719][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 411.183550][ T30] audit: type=1400 audit(2000000032.280:512): avc: denied { create } for pid=11315 comm="syz.7.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 411.206532][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.229609][T11319] netlink: 'syz.6.1818': attribute type 1 has an invalid length. [ 411.239353][ T10] usb 9-1: Product: syz [ 411.244344][ T10] usb 9-1: Manufacturer: syz [ 411.253861][ T10] usb 9-1: SerialNumber: syz [ 411.274204][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1818'. [ 411.296854][T11319] bond1: (slave bridge1): making interface the new active one [ 411.310339][T11319] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 411.428226][T11250] lo speed is unknown, defaulting to 1000 [ 411.734889][ T5617] Bluetooth: hci2: command tx timeout [ 411.742951][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 411.766605][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 412.899665][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 412.914324][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 412.952344][ T10] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 412.988425][ T10] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 413.046193][ T10] usb 9-1: USB disconnect, device number 6 [ 413.192487][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.216771][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.224053][T11250] bridge_slave_0: entered allmulticast mode [ 413.239976][T11250] bridge_slave_0: entered promiscuous mode [ 413.258214][T11250] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.276974][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.290643][T11250] bridge_slave_1: entered allmulticast mode [ 413.305961][T11250] bridge_slave_1: entered promiscuous mode [ 413.350318][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.374937][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.423347][T11250] team0: Port device team_slave_0 added [ 413.438759][T11250] team0: Port device team_slave_1 added [ 413.481960][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.488989][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.516076][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.530512][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.537555][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.564325][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.633034][T11358] futex_wake_op: syz.7.1823 tries to shift op by 144; fix this program [ 414.075392][ T5617] Bluetooth: hci2: command tx timeout [ 414.110790][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1823'. [ 414.133341][T11250] hsr_slave_0: entered promiscuous mode [ 414.139697][T11250] hsr_slave_1: entered promiscuous mode [ 414.145672][T11250] debugfs: 'hsr0' already exists in 'hsr' [ 414.151514][T11250] Cannot create hsr debugfs directory [ 414.342669][T11322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.435007][T11250] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 414.517846][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.553759][T11250] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 414.578018][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.590560][T11250] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 414.613535][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.628457][T11250] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 414.653704][T11250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.672971][T11370] netlink: 'syz.7.1829': attribute type 1 has an invalid length. [ 414.790218][T11370] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1829'. [ 414.860753][T11370] bond1: (slave bridge1): making interface the new active one [ 414.886579][ T30] audit: type=1400 audit(2000000035.980:513): avc: denied { bind } for pid=11388 comm="syz.8.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.927451][T11370] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 415.008479][T11250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.042729][T11250] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.058601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.065728][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.076795][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 415.117139][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.124291][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.238214][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.249413][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.272560][ T10] usb 7-1: config 0 descriptor?? [ 415.291500][ T10] cp210x 7-1:0.0: cp210x converter detected [ 416.236409][ T5617] Bluetooth: hci2: command tx timeout [ 416.486408][ T10] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 416.507245][ T10] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 416.521167][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 416.569705][T11250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.710507][ T10] usb 7-1: USB disconnect, device number 11 [ 416.732864][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.779858][ T10] cp210x 7-1:0.0: device disconnected [ 416.866416][T11250] veth0_vlan: entered promiscuous mode [ 416.893330][T11250] veth1_vlan: entered promiscuous mode [ 416.952172][T11250] veth0_macvtap: entered promiscuous mode [ 416.976152][T11250] veth1_macvtap: entered promiscuous mode [ 416.999539][T11250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.010495][T11250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.031475][T10623] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.056480][T10623] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.207750][ T30] audit: type=1400 audit(2000000038.230:514): avc: denied { mount } for pid=11431 comm="syz.8.1845" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 417.469959][T10623] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.490771][T10623] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.662448][T11447] netlink: 'syz.7.1849': attribute type 1 has an invalid length. [ 417.690657][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1849'. [ 417.729881][T11447] bond2: (slave bridge2): making interface the new active one [ 417.742053][T11447] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 417.905155][T11460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.983626][T11395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.080710][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.096475][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.098542][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 418.188198][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.206465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.269467][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 418.286897][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 418.303485][ T30] audit: type=1400 audit(2000000039.400:515): avc: denied { bind } for pid=11473 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.325462][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 418.337324][ T30] audit: type=1400 audit(2000000039.400:516): avc: denied { node_bind } for pid=11473 comm="syz.3.1861" saddr=fe88::104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 418.372678][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 418.399988][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.432109][ T10] usb 8-1: Product: syz [ 418.444594][ T10] usb 8-1: Manufacturer: syz [ 418.452346][ T10] usb 8-1: SerialNumber: syz [ 418.463352][ T10] usb 8-1: config 0 descriptor?? [ 418.478443][ T10] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 418.489887][ T10] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 419.078993][ T10] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 419.085488][ T10] em28xx 8-1:0.0: Config register raw data: 0x41 [ 419.675338][ T30] audit: type=1400 audit(2000000040.770:517): avc: denied { mount } for pid=11511 comm="syz.3.1873" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 419.699462][ T30] audit: type=1400 audit(2000000040.800:518): avc: denied { mounton } for pid=11511 comm="syz.3.1873" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 419.738042][ T30] audit: type=1400 audit(2000000040.820:519): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 419.994336][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 420.874756][ T991] usb 8-1: USB disconnect, device number 5 [ 420.887699][ T991] em28xx 8-1:0.0: Disconnecting em28xx [ 420.894552][ T991] em28xx 8-1:0.0: Freeing device [ 421.500733][ T5617] Bluetooth: hci2: unexpected subevent 0x03 length: 3 < 9 [ 421.697996][T11495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.888600][ T5794] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 422.062541][ T5794] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.067184][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 422.076404][ T5794] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 422.089910][ T5794] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 422.110097][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.123663][ T5794] usb 10-1: config 0 descriptor?? [ 422.158128][ T5794] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 422.164794][ T5794] dvb-usb: bulk message failed: -22 (3/0) [ 422.182018][ T5794] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 422.192729][ T5794] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 422.203992][ T5794] usb 10-1: media controller created [ 422.205399][ T30] audit: type=1400 audit(2000000043.300:520): avc: denied { setopt } for pid=11575 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 422.211690][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.249991][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 422.272554][ T5794] dvb-usb: bulk message failed: -22 (6/0) [ 422.293346][ T10] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 422.305014][ T10] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 422.307311][ T5794] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 422.323787][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.338376][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 422.352601][ T5794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input30 [ 422.362352][T11548] dibusb: i2c wr: len=514 is too big! [ 422.362352][T11548] [ 422.374165][ T10] usb 8-1: config 0 has no interface number 0 [ 422.386438][ T5794] dvb-usb: schedule remote query interval to 150 msecs. [ 422.387534][ T10] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 422.426950][ T5794] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 422.435826][ T5737] IPVS: starting estimator thread 0... [ 422.459911][ T5794] usb 10-1: USB disconnect, device number 2 [ 422.460466][ T10] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 422.477568][ T10] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.488286][ T10] usb 8-1: config 0 interface 125 has no altsetting 0 [ 422.498709][ T10] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 422.513244][ T5794] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 422.519697][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.529931][ T10] usb 8-1: Product: syz [ 422.534109][ T10] usb 8-1: Manufacturer: syz [ 422.542424][ T10] usb 8-1: SerialNumber: syz [ 422.553209][ T10] usb 8-1: config 0 descriptor?? [ 422.566801][T11584] IPVS: using max 45 ests per chain, 108000 per kthread [ 423.005438][ T30] audit: type=1400 audit(2000000044.100:521): avc: denied { create } for pid=11595 comm="syz.3.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.906394][ T991] usb 8-1: USB disconnect, device number 6 [ 425.326705][ T991] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 425.488750][T11639] kvm: kvm [11638]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 425.500984][T11639] kvm: kvm [11638]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 425.509425][T11639] kvm: kvm [11638]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 425.527776][ T991] usb 8-1: Using ep0 maxpacket: 8 [ 425.548254][ T991] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 425.565338][ T991] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.583142][ T991] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.604284][ T991] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.625564][ T991] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.656061][ T991] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.676418][ T991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.941252][ T991] usb 8-1: usb_control_msg returned -32 [ 425.948104][ T991] usbtmc 8-1:16.0: can't read capabilities [ 425.984310][ T991] usb 8-1: USB disconnect, device number 7 [ 426.796955][ T30] audit: type=1400 audit(2000000047.830:522): avc: denied { write } for pid=11653 comm="syz.9.1927" path="socket:[33853]" dev="sockfs" ino=33853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 426.861210][ T991] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 427.042443][ T30] audit: type=1400 audit(2000000047.840:523): avc: denied { write } for pid=11653 comm="syz.9.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 427.153263][ T5715] IPVS: starting estimator thread 0... [ 427.159306][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 427.165740][ T991] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 427.174857][ T991] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.186268][ T991] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.194787][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.205491][ T991] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 427.214868][ T991] usb 4-1: config 0 has no interface number 0 [ 427.222051][ T991] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 427.233170][ T991] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 427.243126][ T991] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.246587][T11673] IPVS: using max 45 ests per chain, 108000 per kthread [ 427.253073][ T991] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.273530][ T991] usb 4-1: config 0 interface 125 has no altsetting 0 [ 427.282903][ T991] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 427.292226][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.329683][ T991] usb 4-1: Product: syz [ 427.339431][ T991] usb 4-1: Manufacturer: syz [ 427.349834][ T991] usb 4-1: SerialNumber: syz [ 427.381545][ T991] usb 4-1: config 0 descriptor?? [ 429.506700][ T5794] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 429.676577][ T5794] usb 10-1: Using ep0 maxpacket: 16 [ 429.683604][ T5794] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 429.693597][ T5794] usb 10-1: config 1 has no interface number 0 [ 429.699899][ T5794] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 429.710053][ T5794] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 429.727255][ T5794] usb 10-1: config 1 interface 105 has no altsetting 0 [ 429.741482][ T5794] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 429.758334][ T5794] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 429.771887][ T5794] usb 10-1: Product: syz [ 429.776197][ T5794] usb 10-1: Manufacturer: syz [ 429.785900][ T5794] usb 10-1: SerialNumber: syz [ 429.797563][T11713] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 429.810238][T11713] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 431.028288][ T24] usb 4-1: USB disconnect, device number 58 [ 432.440766][ T5794] aqc111 10-1:1.105: probe with driver aqc111 failed with error -71 [ 432.482576][ T5794] usb 10-1: USB disconnect, device number 3 [ 434.408080][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.417973][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.286603][ T5613] Bluetooth: hci7: command 0x1003 tx timeout [ 435.288726][ T5617] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 436.615124][ T30] audit: type=1326 audit(2000000057.710:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.712998][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 436.726316][ T30] audit: type=1326 audit(2000000057.710:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.754468][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 436.764133][ T30] audit: type=1326 audit(2000000057.750:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.764208][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 436.825310][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 436.834326][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 436.877130][ T30] audit: type=1326 audit(2000000057.750:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.908298][ T30] audit: type=1326 audit(2000000057.750:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.935231][ T30] audit: type=1326 audit(2000000057.750:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.962407][ T30] audit: type=1326 audit(2000000057.750:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 436.989974][ T30] audit: type=1326 audit(2000000057.750:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 437.061153][ T30] audit: type=1326 audit(2000000057.750:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 437.450667][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 437.583205][ T30] audit: type=1326 audit(2000000057.750:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.9.1979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93ff99ce59 code=0x7ffc0000 [ 437.879659][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1987'. [ 437.894204][T11826] wg1 speed is unknown, defaulting to 1000 [ 438.363684][T11800] wg1 speed is unknown, defaulting to 1000 [ 438.380044][T11826] lo speed is unknown, defaulting to 1000 [ 438.959421][ T5613] Bluetooth: hci7: command tx timeout [ 439.276683][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 439.404071][T11800] lo speed is unknown, defaulting to 1000 [ 439.411664][T11826] lo speed is unknown, defaulting to 1000 [ 439.458697][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 439.474141][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 439.507477][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 439.527242][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 439.534263][ T10] usb 4-1: config 220 has no interface number 2 [ 439.549705][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 439.606868][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 439.614846][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 439.622150][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 439.631514][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 439.640856][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.649081][ T10] usb 4-1: Product: syz [ 439.653301][ T10] usb 4-1: Manufacturer: syz [ 439.658444][ T10] usb 4-1: SerialNumber: syz [ 440.625076][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 440.665454][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 440.697814][ T10] usb 4-1: selecting invalid altsetting 0 [ 440.761657][T11800] lo speed is unknown, defaulting to 1000 [ 440.772069][ T10] usb 4-1: selecting invalid altsetting 0 [ 440.789276][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 440.857916][ T10] usb 4-1: USB disconnect, device number 59 [ 441.049818][ T51] Bluetooth: hci7: command tx timeout [ 441.879533][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.908849][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.946136][T11800] bridge_slave_0: entered allmulticast mode [ 441.979221][T11800] bridge_slave_0: entered promiscuous mode [ 442.005683][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.023311][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.033442][T11919] binder_alloc: 11918: pid 11918 spamming oneway? 1 buffers allocated for a total size of 4096 [ 442.044617][T11800] bridge_slave_1: entered allmulticast mode [ 442.051159][T11919] binder_alloc: 11918: pid 11918 spamming oneway? 2 buffers allocated for a total size of 5120 [ 442.073676][T11800] bridge_slave_1: entered promiscuous mode [ 442.127874][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.195823][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.339337][T11800] team0: Port device team_slave_0 added [ 442.371633][T11800] team0: Port device team_slave_1 added [ 442.390841][T11931] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2024'. [ 442.411698][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.419242][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.448939][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.475078][T11923] wg1 speed is unknown, defaulting to 1000 [ 443.704548][ T51] Bluetooth: hci7: command tx timeout [ 443.879221][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.888590][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.934140][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.049170][T11800] hsr_slave_0: entered promiscuous mode [ 444.072849][T11800] hsr_slave_1: entered promiscuous mode [ 444.088597][T11800] debugfs: 'hsr0' already exists in 'hsr' [ 444.094421][T11800] Cannot create hsr debugfs directory [ 444.331967][T11923] lo speed is unknown, defaulting to 1000 [ 444.829969][T11923] lo speed is unknown, defaulting to 1000 [ 445.122616][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 445.122632][ T30] audit: type=1400 audit(2000000066.220:572): avc: denied { write } for pid=11950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.331708][ T30] audit: type=1400 audit(2000000066.430:573): avc: denied { write } for pid=11973 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.236379][ T51] Bluetooth: hci7: command tx timeout [ 446.548705][ T5730] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 446.801341][ T5730] usb 4-1: not running at top speed; connect to a high speed hub [ 446.836711][ T5730] usb 4-1: config 1 has an invalid interface number: 162 but max is 0 [ 446.869319][ T5730] usb 4-1: config 1 has no interface number 0 [ 446.895255][ T5730] usb 4-1: New USB device found, idVendor=0846, idProduct=9018, bcdDevice=73.f3 [ 446.928043][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.958893][ T5730] usb 4-1: Product: syz [ 446.981830][ T5730] usb 4-1: Manufacturer: syz [ 447.000818][ T5730] usb 4-1: SerialNumber: syz [ 447.165046][ T30] audit: type=1400 audit(2000000068.260:574): avc: denied { write } for pid=11982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.294754][ T5730] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 447.328879][ T5730] usb 4-1: USB disconnect, device number 60 [ 447.390563][ T30] audit: type=1400 audit(2000000068.490:575): avc: denied { write } for pid=11998 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.463169][T11800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.486206][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.503874][T11800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.517457][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.535641][T11800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.546814][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.554838][T11800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 447.587599][T11800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.726798][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 447.735600][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.797721][T11800] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.839324][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.846480][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.901041][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 447.913090][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 447.925632][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.942438][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.949599][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.989401][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 448.004154][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.026737][ T10] usb 7-1: Product: syz [ 448.033934][ T10] usb 7-1: Manufacturer: syz [ 448.049520][ T10] usb 7-1: SerialNumber: syz [ 448.074728][ T10] usb 7-1: config 0 descriptor?? [ 448.082673][ T30] audit: type=1400 audit(2000000069.190:576): avc: denied { write } for pid=12003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.110176][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 448.150787][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 448.324336][ T30] audit: type=1400 audit(2000000069.420:577): avc: denied { write } for pid=12035 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.640882][T11800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.683202][ T30] audit: type=1400 audit(2000000069.780:578): avc: denied { write } for pid=12041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.718098][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 448.719580][T11800] veth0_vlan: entered promiscuous mode [ 448.732173][ T10] em28xx 7-1:0.0: Config register raw data: 0x65 [ 448.737172][T11800] veth1_vlan: entered promiscuous mode [ 448.748266][ T10] em28xx 7-1:0.0: I2S Audio (1 sample rate(s)) [ 448.767491][ T10] em28xx 7-1:0.0: No AC97 audio processor [ 448.781513][T11800] veth0_macvtap: entered promiscuous mode [ 448.794414][T11800] veth1_macvtap: entered promiscuous mode [ 448.823465][T11800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.838967][T11800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.855897][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2048'. [ 448.866233][ T30] audit: type=1400 audit(2000000069.950:579): avc: denied { write } for pid=12058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.893125][ T5915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.904929][ T5915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.942338][ T5915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.985890][ T5915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.127752][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.133783][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.138703][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.153597][T12064] ubi: mtd0 is already attached to ubi0 [ 449.161271][ T10] usb 7-1: USB disconnect, device number 12 [ 449.168825][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.283781][T12070] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2050'. [ 449.517641][ T30] audit: type=1400 audit(2000000070.560:580): avc: denied { create } for pid=12074 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 449.600006][ T30] audit: type=1400 audit(2000000070.570:581): avc: denied { bind } for pid=12074 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 449.725503][T12078] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2051'. [ 449.980239][T12082] wg1 speed is unknown, defaulting to 1000 [ 450.320695][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 450.320709][ T30] audit: type=1400 audit(2000000071.420:587): avc: denied { write } for pid=12096 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.982700][T12082] lo speed is unknown, defaulting to 1000 [ 451.575829][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 451.604230][ T30] audit: type=1400 audit(2000000072.700:588): avc: denied { write } for pid=12102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.606225][T12125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2060'. [ 451.646620][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 451.670949][T12082] lo speed is unknown, defaulting to 1000 [ 451.792812][ T30] audit: type=1400 audit(2000000072.890:589): avc: denied { write } for pid=12128 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.879615][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 451.901010][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.948529][ T10] usb 10-1: Product: syz [ 451.975676][ T10] usb 10-1: Manufacturer: syz [ 452.011719][ T10] usb 10-1: SerialNumber: syz [ 452.237149][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 452.406700][ T24] usb 8-1: device descriptor read/64, error -71 [ 452.732199][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 452.830749][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 452.845905][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 453.016639][ T24] usb 8-1: device descriptor read/64, error -71 [ 453.126821][ T24] usb usb8-port1: attempt power cycle [ 453.506807][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 453.628312][ T24] usb 8-1: device descriptor read/8, error -71 [ 453.792991][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 453.813434][ T30] audit: type=1400 audit(2000000074.910:590): avc: denied { write } for pid=12133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.817681][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 453.889505][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 453.928552][ T10] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 454.049536][ T30] audit: type=1400 audit(2000000075.150:591): avc: denied { write } for pid=12173 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.067475][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 454.108187][ T24] usb 8-1: device descriptor read/8, error -71 [ 454.229450][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2072'. [ 454.559661][ T24] usb usb8-port1: unable to enumerate USB device [ 454.869147][ T10] usb 10-1: USB disconnect, device number 4 [ 455.210650][ T30] audit: type=1400 audit(2000000076.310:592): avc: denied { write } for pid=12185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.421565][ T30] audit: type=1400 audit(2000000076.520:593): avc: denied { write } for pid=12220 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.448296][T12218] syzkaller0: entered promiscuous mode [ 455.456468][T12218] syzkaller0: entered allmulticast mode [ 455.576676][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 455.737706][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 455.762904][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 455.802817][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 455.817366][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.840731][ T10] usb 10-1: Product: syz [ 455.847265][ T10] usb 10-1: Manufacturer: syz [ 455.852090][ T10] usb 10-1: SerialNumber: syz [ 455.874210][ T10] usb 10-1: config 0 descriptor?? [ 455.886167][ T10] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 455.908442][ T10] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 455.958727][ T5715] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 455.989065][ T30] audit: type=1400 audit(2000000077.080:594): avc: denied { write } for pid=12227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.123793][ T30] audit: type=1400 audit(2000000077.220:595): avc: denied { write } for pid=12252 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.172344][ T5715] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 456.186621][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.216561][ T5715] usb 1-1: Product: syz [ 456.222243][T12241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.232292][ T5715] usb 1-1: Manufacturer: syz [ 456.232314][ T5715] usb 1-1: SerialNumber: syz [ 456.501327][ T10] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 456.589203][ T30] audit: type=1400 audit(2000000077.690:596): avc: denied { write } for pid=12259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.678133][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 456.715727][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 456.741973][ T30] audit: type=1400 audit(2000000077.840:597): avc: denied { write } for pid=12276 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.390251][ T10] em28xx 10-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 457.398994][ T10] em28xx 10-1:0.0: failed to read eeprom (err=-5) [ 457.405479][ T10] em28xx 10-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 457.486595][ T10] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 457.494659][ T10] em28xx 10-1:0.0: dvb set to bulk mode. [ 457.500588][T12066] em28xx 10-1:0.0: Binding DVB extension [ 457.528036][ T10] usb 10-1: USB disconnect, device number 5 [ 457.542304][ T10] em28xx 10-1:0.0: Disconnecting em28xx [ 457.560500][T12066] em28xx 10-1:0.0: Registering input extension [ 457.569349][ T10] em28xx 10-1:0.0: Closing input extension [ 457.593895][ T10] em28xx 10-1:0.0: Freeing device [ 457.810833][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 457.822943][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 457.833565][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 457.849681][ T5715] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 458.610254][T12296] wg1 speed is unknown, defaulting to 1000 [ 458.753580][T12302] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2101'. [ 458.884150][ T5715] usb 1-1: USB disconnect, device number 54 [ 458.924609][ T30] audit: type=1400 audit(2000000080.020:598): avc: denied { write } for pid=12289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.182928][ T30] audit: type=1400 audit(2000000080.280:599): avc: denied { write } for pid=12316 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.223506][T12296] lo speed is unknown, defaulting to 1000 [ 459.647001][T12296] lo speed is unknown, defaulting to 1000 [ 459.964851][ T30] audit: type=1400 audit(2000000081.060:600): avc: denied { write } for pid=12320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.150639][ T30] audit: type=1400 audit(2000000081.250:601): avc: denied { write } for pid=12349 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.377483][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 460.491136][ T30] audit: type=1400 audit(2000000081.580:602): avc: denied { write } for pid=12356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.550108][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 460.562674][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.583633][ T10] usb 7-1: Product: syz [ 460.593665][ T30] audit: type=1400 audit(2000000081.700:603): avc: denied { write } for pid=12367 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.618974][ T10] usb 7-1: Manufacturer: syz [ 460.623680][ T10] usb 7-1: SerialNumber: syz [ 461.052862][T12375] overlay: ./file0 is not a directory [ 461.092857][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 461.169609][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 462.300282][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 462.378281][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 462.405169][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 462.426623][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 462.573698][T12399] wg1 speed is unknown, defaulting to 1000 [ 462.663798][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2124'. [ 462.746872][T12399] lo speed is unknown, defaulting to 1000 [ 463.026535][T12411] overlay: ./file0 is not a directory [ 463.492672][ T24] usb 7-1: USB disconnect, device number 13 [ 464.085802][T12399] lo speed is unknown, defaulting to 1000 [ 464.569284][T12439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.116582][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 466.375886][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 466.390940][ T10] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 466.402273][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 466.415190][ T10] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 466.424988][ T10] usb 4-1: config 0 has no interface number 1 [ 466.436762][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 466.458856][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 466.485150][ T10] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 466.518198][ T5708] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 466.526626][ T10] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.563100][ T10] usb 4-1: config 0 interface 125 has no altsetting 0 [ 466.572140][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 466.581401][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.589860][ T10] usb 4-1: Product: syz [ 466.594076][ T10] usb 4-1: Manufacturer: syz [ 466.598876][ T10] usb 4-1: SerialNumber: syz [ 466.770364][ T10] usb 4-1: config 0 descriptor?? [ 466.880423][ T30] audit: type=1326 audit(2000000087.950:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.167170][ T30] audit: type=1326 audit(2000000087.950:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.200542][ T5708] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 467.216017][ T5708] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.227663][ T5708] usb 8-1: Product: syz [ 467.231845][ T5708] usb 8-1: Manufacturer: syz [ 467.235634][ T30] audit: type=1326 audit(2000000087.950:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.236442][ T5708] usb 8-1: SerialNumber: syz [ 467.296659][ T30] audit: type=1326 audit(2000000087.950:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.324935][ T30] audit: type=1326 audit(2000000087.950:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.353000][ T30] audit: type=1326 audit(2000000087.950:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.380530][ T30] audit: type=1326 audit(2000000087.950:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.418367][ T30] audit: type=1326 audit(2000000087.950:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.445234][ T30] audit: type=1326 audit(2000000087.950:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.474036][ T30] audit: type=1326 audit(2000000087.950:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.6.2144" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0095b9ce59 code=0x7ffc0000 [ 467.533914][T12457] Process accounting resumed [ 467.656929][T12470] tc action pedit offset must be on 32 bit boundaries [ 467.705556][ T5708] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 467.721384][ T5708] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 467.910179][T12484] wg1 speed is unknown, defaulting to 1000 [ 467.950303][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2155'. [ 468.140017][T12484] lo speed is unknown, defaulting to 1000 [ 468.255315][T12484] lo speed is unknown, defaulting to 1000 [ 469.141316][ T5737] usb 4-1: USB disconnect, device number 61 [ 469.291801][ T5708] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 469.929737][ T5708] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 469.984952][ T5708] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 470.043025][ T5708] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 470.186892][ T5737] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 470.370538][ T5737] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 470.383441][ T24] usb 8-1: USB disconnect, device number 12 [ 470.389573][ T5737] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 470.412174][ T5737] usb 4-1: config 150 has no interface number 0 [ 470.440861][ T5737] usb 4-1: config 150 interface 204 has no altsetting 0 [ 470.485030][ T5737] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 470.513356][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.544103][ T5737] usb 4-1: Product: syz [ 470.582142][ T5737] usb 4-1: Manufacturer: syz [ 470.606377][ T5737] usb 4-1: SerialNumber: syz [ 470.721195][T12522] wg1 speed is unknown, defaulting to 1000 [ 470.754624][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2167'. [ 470.889263][ T5737] xr_serial 4-1:150.204: skipping garbage [ 470.909323][ T5737] xr_serial 4-1:150.204: xr_serial converter detected [ 471.207600][ T5708] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 471.459654][ T5708] usb 10-1: Using ep0 maxpacket: 16 [ 471.489667][ T5708] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.535937][ T5708] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.557258][ T5708] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 471.562854][T12522] lo speed is unknown, defaulting to 1000 [ 471.577768][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.594651][ T5708] usb 10-1: config 0 descriptor?? [ 471.788522][ T5737] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 472.163733][ T5737] usb 4-1: USB disconnect, device number 62 [ 472.178028][ T5737] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 472.188347][ T5737] xr_serial 4-1:150.204: device disconnected [ 472.247893][T12522] lo speed is unknown, defaulting to 1000 [ 473.068539][T12562] program syz.6.2177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.260793][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 473.650468][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 473.659833][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.668174][ T10] usb 4-1: Product: syz [ 473.672462][ T10] usb 4-1: Manufacturer: syz [ 473.677279][ T10] usb 4-1: SerialNumber: syz [ 473.992964][ T5708] usb 10-1: USB disconnect, device number 6 [ 474.116073][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 474.144773][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 474.447699][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 474.447715][ T30] audit: type=1400 audit(2000000095.540:679): avc: denied { getopt } for pid=12585 comm="syz.9.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 474.574414][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2186'. [ 475.201700][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 475.219553][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 475.230278][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 475.251845][T12589] wg1 speed is unknown, defaulting to 1000 [ 475.324863][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 475.469004][ T51] Bluetooth: hci5: unexpected event for opcode 0x100c [ 475.621886][T12589] lo speed is unknown, defaulting to 1000 [ 475.749963][T12589] lo speed is unknown, defaulting to 1000 [ 475.827167][ T5794] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 476.032441][ T5794] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.083191][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.127484][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 476.141968][ T5794] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.145375][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 476.155873][ T5794] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.173074][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.196274][ T5794] usb 1-1: config 0 descriptor?? [ 476.225093][ T24] usb 4-1: USB disconnect, device number 63 [ 476.316967][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 477.500325][ T30] audit: type=1400 audit(2000000097.960:680): avc: denied { getopt } for pid=12618 comm="syz.3.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 477.528125][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.549576][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 477.570333][ T10] usb 7-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 477.589103][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.606782][ T10] usb 7-1: Product: syz [ 477.617158][ T10] usb 7-1: Manufacturer: syz [ 477.627318][ T10] usb 7-1: SerialNumber: syz [ 477.655774][ T10] usb 7-1: config 0 descriptor?? [ 477.664479][ T10] go7007 7-1:0.0: probe with driver go7007 failed with error -12 [ 477.745857][ T5794] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 478.086256][ T30] audit: type=1400 audit(2000000099.170:681): avc: denied { setopt } for pid=12605 comm="syz.6.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 478.427210][ T24] usb 7-1: USB disconnect, device number 14 [ 478.822043][ T30] audit: type=1400 audit(2000000099.910:682): avc: denied { setopt } for pid=12645 comm="syz.9.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 479.136744][T12066] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 479.540566][ T24] usb 1-1: USB disconnect, device number 55 [ 479.830179][T12066] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 479.840009][T12066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.848696][T12066] usb 10-1: Product: syz [ 479.852996][T12066] usb 10-1: Manufacturer: syz [ 479.858172][T12066] usb 10-1: SerialNumber: syz [ 480.304521][T12066] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 480.316677][T12066] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 481.075546][T12681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 481.905030][T12680] wg1 speed is unknown, defaulting to 1000 [ 482.042485][T12066] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 482.065044][T12066] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 482.095278][T12066] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 482.210210][T12066] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 482.709655][T12680] lo speed is unknown, defaulting to 1000 [ 483.153066][T12726] syzkaller0: entered promiscuous mode [ 483.158710][T12726] syzkaller0: entered allmulticast mode [ 483.181108][T12066] usb 10-1: USB disconnect, device number 7 [ 484.251320][ T30] audit: type=1400 audit(2000000105.350:683): avc: denied { map } for pid=12729 comm="syz.7.2233" path="socket:[37088]" dev="sockfs" ino=37088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 484.320221][ T30] audit: type=1400 audit(2000000105.350:684): avc: denied { read } for pid=12729 comm="syz.7.2233" path="socket:[37088]" dev="sockfs" ino=37088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 484.470287][T12680] lo speed is unknown, defaulting to 1000 [ 484.593287][ T30] audit: type=1400 audit(2000000105.690:685): avc: denied { read } for pid=12744 comm="syz.0.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.668690][ T30] audit: type=1400 audit(2000000106.770:686): avc: denied { getopt } for pid=12755 comm="syz.9.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.975736][ T30] audit: type=1400 audit(2000000106.960:687): avc: denied { mount } for pid=12758 comm="syz.7.2242" name="/" dev="ramfs" ino=38094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 487.692147][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 490.772708][ T30] audit: type=1800 audit(2000000111.870:688): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2256" name="/" dev="fuse" ino=1 res=0 errno=0 [ 490.808040][T12802] wg1 speed is unknown, defaulting to 1000 [ 490.835162][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'. [ 491.002738][T12814] syzkaller0: entered promiscuous mode [ 491.013879][T12814] syzkaller0: entered allmulticast mode [ 491.149863][T12817] overlay: ./file0 is not a directory [ 491.816086][T12802] lo speed is unknown, defaulting to 1000 [ 491.907364][T12833] tmpfs: Bad value for 'mpol' [ 492.808592][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 493.198654][T12802] lo speed is unknown, defaulting to 1000 [ 493.204697][T12852] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 493.223285][T12852] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 494.058818][T12889] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2288'. [ 494.068245][T12889] batadv0: entered promiscuous mode [ 494.888314][ T5613] Bluetooth: hci6: command 0x0406 tx timeout [ 495.855042][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.863785][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.205582][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2307'. [ 497.229464][ T30] audit: type=1400 audit(2000000118.330:689): avc: denied { open } for pid=12946 comm="syz.3.2311" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 497.280614][T12949] netlink: 'syz.7.2312': attribute type 5 has an invalid length. [ 497.321176][T12949] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2312'. [ 497.378527][T12949] ip6erspan0: entered promiscuous mode [ 501.338282][ T5708] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 501.416583][T12066] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 501.509804][ T5708] usb 7-1: no configurations [ 501.520452][ T5708] usb 7-1: can't read configurations, error -22 [ 501.590574][T12066] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.606912][ T31] INFO: task syz.4.1473:10105 blocked for more than 143 seconds. [ 501.609371][T12066] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 501.616007][ T31] Tainted: G L syzkaller #0 [ 501.643169][T12066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.657281][ T5708] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 501.659000][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.675879][ T31] task:syz.4.1473 state:D stack:26152 pid:10105 tgid:10104 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 501.688040][ T31] Call Trace: [ 501.691344][ T31] [ 501.692731][T12066] usb 4-1: Product: syz [ 501.699996][T12066] usb 4-1: Manufacturer: syz [ 501.703929][ T31] __schedule+0x1295/0x67a0 [ 501.704672][T12066] usb 4-1: SerialNumber: syz [ 501.715884][ T31] ? __pfx___schedule+0x10/0x10 [ 501.721767][T12066] usb 4-1: config 0 descriptor?? [ 501.726864][ T31] ? find_held_lock+0x2b/0x80 [ 501.731795][ T31] ? schedule+0x2bf/0x390 [ 501.736261][ T31] schedule+0xdd/0x390 [ 501.743898][T12066] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 501.747810][ T31] schedule_preempt_disabled+0x13/0x30 [ 501.756085][ T31] __mutex_lock+0xced/0x1b10 [ 501.760784][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 501.770181][ T31] ? kasan_save_stack+0x3f/0x50 [ 501.775038][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 501.780138][ T31] ? netlink_dump+0x194/0xd00 [ 501.784834][ T31] ? __netlink_dump_start+0x6d6/0x990 [ 501.790237][ T31] ? genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 501.796133][ T31] ? netlink_rcv_skb+0x159/0x420 [ 501.801148][ T31] ? genl_rcv+0x28/0x40 [ 501.805322][ T31] ? netlink_unicast+0x585/0x850 [ 501.811300][ T31] ? ___sys_sendmsg+0x190/0x1e0 [ 501.816179][ T31] ? __sys_sendmsg+0x170/0x220 [ 501.821255][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 501.827597][ T31] nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 501.833594][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 501.840141][ T31] ? rcu_is_watching+0x12/0xc0 [ 501.844931][ T31] ? trace_kmalloc+0xe3/0x110 [ 501.849471][ T5708] usb 7-1: no configurations [ 501.849744][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 501.855350][ T5708] usb 7-1: can't read configurations, error -22 [ 501.860315][ T31] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 501.866250][ T5708] usb usb7-port1: attempt power cycle [ 501.873033][ T31] ? __alloc_skb+0x185/0x710 [ 501.882801][ T31] ? trace_kmem_cache_alloc+0xc1/0x100 [ 501.889881][ T31] ? __kasan_kfree_large+0x70/0x80 [ 501.895011][ T31] ? kmalloc_reserve+0xf9/0x350 [ 501.899899][ T31] ? __asan_memset+0x23/0x50 [ 501.904486][ T31] ? __alloc_skb+0x4e9/0x710 [ 501.909102][ T31] ? __alloc_skb+0x5b7/0x710 [ 501.914183][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 501.919437][ T31] genl_dumpit+0x125/0x230 [ 501.923880][ T31] netlink_dump+0x532/0xd00 [ 501.928408][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 501.933437][ T31] ? __asan_memset+0x23/0x50 [ 501.938234][ T31] ? genl_start+0x67a/0x970 [ 501.942770][ T31] __netlink_dump_start+0x6d6/0x990 [ 501.948060][ T5794] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 501.955744][ T31] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 501.961569][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 501.968854][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 501.975056][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 501.980469][ T31] ? __pfx_genl_get_cmd+0x10/0x10 [ 501.985498][ T31] ? __pfx_genl_start+0x10/0x10 [ 501.990393][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 501.995331][ T31] ? __pfx_genl_done+0x10/0x10 [ 502.000215][ T31] ? __alloc_skb+0x185/0x710 [ 502.004823][ T31] ? netlink_alloc_large_skb+0x69/0x150 [ 502.011313][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 502.017046][ T31] genl_rcv_msg+0x471/0x800 [ 502.021762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.026810][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 502.033313][ T31] ? __lock_acquire+0x4a5/0x2630 [ 502.038723][ T31] netlink_rcv_skb+0x159/0x420 [ 502.043505][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.048721][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.054025][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 502.065606][ T31] genl_rcv+0x28/0x40 [ 502.072309][ T31] netlink_unicast+0x585/0x850 [ 502.080031][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 502.085554][ T31] netlink_sendmsg+0x8b0/0xda0 [ 502.090842][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.096363][ T31] ? __might_fault+0x30/0x140 [ 502.101878][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 502.107199][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.112570][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.118419][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 502.123769][ T31] ___sys_sendmsg+0x190/0x1e0 [ 502.128963][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.134305][ T31] __sys_sendmsg+0x170/0x220 [ 502.139469][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.144673][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 502.150820][ T31] ? rcu_is_watching+0x12/0xc0 [ 502.155655][ T31] do_syscall_64+0x10b/0xf80 [ 502.156522][ T5794] usb 1-1: Using ep0 maxpacket: 32 [ 502.161766][ T31] ? clear_bhb_loop+0x40/0x90 [ 502.166978][ T5794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.189406][ T5794] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 502.190614][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.200271][ T5794] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 502.204690][ T31] RIP: 0033:0x7fcea459ce59 [ 502.213391][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.217997][ T5708] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 502.218561][ T31] RSP: 002b:00007fcea5524028 EFLAGS: 00000246 [ 502.226398][ T5794] usb 1-1: Product: syz [ 502.234282][ T31] ORIG_RAX: 000000000000002e [ 502.239642][ T5794] usb 1-1: Manufacturer: syz [ 502.239664][ T5794] usb 1-1: SerialNumber: syz [ 502.243412][ T5794] usb 1-1: config 0 descriptor?? [ 502.244745][ T31] RAX: ffffffffffffffda RBX: 00007fcea4815fa0 RCX: 00007fcea459ce59 [ 502.253642][ T5794] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 502.258235][ T5708] usb 7-1: no configurations [ 502.286396][ T5708] usb 7-1: can't read configurations, error -22 [ 502.286544][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 502.300685][ T31] RBP: 00007fcea4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 502.308836][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.316848][ T31] R13: 00007fcea4816038 R14: 00007fcea4815fa0 R15: 00007fff61cca9c8 [ 502.325298][ T31] [ 502.328694][ T31] [ 502.328694][ T31] Showing all locks held in the system: [ 502.336436][ T31] 1 lock held by khungtaskd/31: [ 502.343162][ T31] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 502.351204][T12066] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 502.353149][ T31] 2 locks held by getty/5370: [ 502.361298][T12066] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 502.368803][ T31] #0: ffff888033e110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 502.377640][T12066] usb 4-1: USB disconnect, device number 64 [ 502.391516][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 502.404520][ T31] 1 lock held by udevd/5600: [ 502.409944][ T31] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 502.416615][ T5708] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 502.419918][ T31] 3 locks held by kworker/u9:4/5613: [ 502.433362][ T31] #0: ffff8880382fa940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 502.443737][ T31] #1: ffffc90002667d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 502.447576][ T5708] usb 7-1: no configurations [ 502.455760][ T31] #2: ffff88803725cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 502.470288][ T31] 3 locks held by kworker/0:4/5708: [ 502.475516][ T31] 2 locks held by kworker/1:6/5724: [ 502.480273][ T5708] usb 7-1: can't read configurations, error -22 [ 502.481033][ T31] #0: [ 502.488411][ T5708] usb usb7-port1: unable to enumerate USB device [ 502.504036][ T31] ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 502.514598][ T31] #1: ffffc90004ec7d08 (p9_poll_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 502.524999][ T31] 2 locks held by syz.2.1327/9596: [ 502.530424][ T31] #0: ffffffff906baec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 502.539049][ T31] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 502.549717][ T31] 3 locks held by syz.4.1473/10105: [ 502.554979][ T31] #0: ffffffff906baec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 502.564511][ T31] #1: ffff8880226de6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 502.578772][ T31] #2: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb7/0x1200 [ 502.590101][ T31] 1 lock held by syz.0.2340/13018: [ 502.595275][ T31] #0: ffff888034ba58f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 502.609763][ T31] [ 502.612104][ T31] ============================================= [ 502.612104][ T31] [ 502.621975][ T31] NMI backtrace for cpu 0 [ 502.621991][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 502.622015][ T31] Tainted: [L]=SOFTLOCKUP [ 502.622020][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.622029][ T31] Call Trace: [ 502.622035][ T31] [ 502.622041][ T31] dump_stack_lvl+0x100/0x190 [ 502.622060][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 502.622074][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 502.622088][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 502.622102][ T31] sys_info+0x141/0x190 [ 502.622117][ T31] watchdog+0xcb1/0x1030 [ 502.622133][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 502.622146][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.622159][ T31] ? __kthread_parkme+0x18c/0x230 [ 502.622171][ T31] ? kthread+0x13a/0x450 [ 502.622182][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.622198][ T31] kthread+0x370/0x450 [ 502.622210][ T31] ? __pfx_kthread+0x10/0x10 [ 502.622223][ T31] ret_from_fork+0x72b/0xd50 [ 502.622237][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.622251][ T31] ? __switch_to+0x800/0x1100 [ 502.622267][ T31] ? __pfx_kthread+0x10/0x10 [ 502.622280][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.622300][ T31] [ 502.622305][ T31] Sending NMI from CPU 0 to CPUs 1: [ 502.755889][ C1] NMI backtrace for cpu 1 [ 502.755905][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.755924][ C1] Tainted: [L]=SOFTLOCKUP [ 502.755929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.755936][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 502.755958][ C1] Code: c6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 e1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 502.755973][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 502.755985][ C1] RAX: 000000000113d65b RBX: ffff88801e2c2500 RCX: ffffffff8b8ab095 [ 502.755994][ C1] RDX: 0000000000000000 RSI: ffffffff8df21e52 RDI: ffffffff8c1c3800 [ 502.756002][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 502.756010][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 502.756018][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d7c150 [ 502.756028][ C1] FS: 0000000000000000(0000) GS:ffff888124470000(0000) knlGS:0000000000000000 [ 502.756041][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.756050][ C1] CR2: 00007f80ec1d4ff8 CR3: 000000007fad2000 CR4: 00000000003526f0 [ 502.756059][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 502.756067][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 502.756075][ C1] Call Trace: [ 502.756080][ C1] [ 502.756085][ C1] default_idle+0x9/0x10 [ 502.756104][ C1] default_idle_call+0x6c/0xb0 [ 502.756115][ C1] do_idle+0x464/0x590 [ 502.756130][ C1] ? __pfx_do_idle+0x10/0x10 [ 502.756142][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 502.756159][ C1] cpu_startup_entry+0x4f/0x60 [ 502.756171][ C1] start_secondary+0x21d/0x2d0 [ 502.756187][ C1] ? __pfx_start_secondary+0x10/0x10 [ 502.756204][ C1] common_startup_64+0x13e/0x148 [ 502.756227][ C1] [ 502.762292][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 502.762308][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 502.762330][ T31] Tainted: [L]=SOFTLOCKUP [ 502.762335][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.762344][ T31] Call Trace: [ 502.762349][ T31] [ 502.762356][ T31] dump_stack_lvl+0x100/0x190 [ 502.762378][ T31] vpanic+0x552/0x970 [ 502.762394][ T31] ? __pfx_vpanic+0x10/0x10 [ 502.762408][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 502.762427][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 502.762447][ T31] panic+0xd1/0xe0 [ 502.762461][ T31] ? __pfx_panic+0x10/0x10 [ 502.762478][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 502.762494][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 502.762511][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 502.762527][ T31] ? watchdog.cold+0x1ec/0x234 [ 502.762544][ T31] ? watchdog+0xcc1/0x1030 [ 502.762563][ T31] watchdog.cold+0x1fd/0x234 [ 502.762585][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 502.762604][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.762623][ T31] ? __kthread_parkme+0x18c/0x230 [ 502.762641][ T31] ? kthread+0x13a/0x450 [ 502.762658][ T31] ? __pfx_watchdog+0x10/0x10 [ 502.762675][ T31] kthread+0x370/0x450 [ 502.762692][ T31] ? __pfx_kthread+0x10/0x10 [ 502.762712][ T31] ret_from_fork+0x72b/0xd50 [ 502.762732][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 502.762752][ T31] ? __switch_to+0x800/0x1100 [ 502.762775][ T31] ? __pfx_kthread+0x10/0x10 [ 502.762794][ T31] ret_from_fork_asm+0x1a/0x30 [ 502.762826][ T31] [ 503.110354][ T31] Kernel Offset: disabled [ 503.114649][ T31] Rebooting in 86400 seconds..