last executing test programs: 15.297535019s ago: executing program 0 (id=924): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xffeff038}, {0x6, 0x0, 0x8, 0x7}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r1, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r2, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000200)={0xf0, 0x4d}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 12.708151244s ago: executing program 4 (id=939): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x400c050) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000200)={0x20, 0x17, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x40, 0x2000, 0x300, 0x140, 0xa, 0x6, 0x18, 0x1, {}, {0xd, 0x8000}, {0x4, 0x2, 0x5}, {0x0, 0xffffffff}, 0x0, 0x100, 0x8000, 0x1, 0x1, 0x1ff, 0x2009f6, 0x2, 0x5, 0x803d, 0x1, 0x7, 0x5f, 0x1, 0x1, 0x9}) 12.179642881s ago: executing program 0 (id=940): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x0, 0x11, 0x148, 0x360, 0x0, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x20000000, 0x20000000, 0x3, 0x7, 0x0, 0x40}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x40000}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x5, 0x1ff, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x100}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x32}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x2, 0x4, 0x0, 0x5], 0x0, 0x1}, {0x0, [0x6, 0x4, 0x2, 0x2, 0x982848c96d6a0d38], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 11.929950625s ago: executing program 0 (id=941): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280dd08e}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = memfd_secret(0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000100)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={[&(0x7f0000000140)='!}\x00', &(0x7f0000000200)=':-$[k\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='][-\x0e.\x00', &(0x7f0000000300)='.\x00', &(0x7f0000000340)='{:#\\\x00', &(0x7f0000000380)=']%[]\x00', &(0x7f00000003c0)='./(]@[Y\x00', &(0x7f0000000440)='[+@\xad/\xe9:/\x00', &(0x7f0000000480)='\x00']}, &(0x7f0000000680)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='+].{&\x9b]-,\x00', &(0x7f00000005c0)='}{\xc8/{%[-[&}{.\x00', &(0x7f0000000600)='/-\x00', &(0x7f0000000640)='\x00']}, 0x1000) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r9 = socket(0x27, 0x80000, 0xb) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 9.039401578s ago: executing program 0 (id=952): unshare(0x6a040000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x202080) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20010814}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') writev(r8, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000000c0)={0x5, [[0x8, 0x4, 0x7, 0x2, 0xfffffffc, 0xe, 0x8, 0x1], [0x4, 0x7ff, 0x1000, 0x200, 0x0, 0x1, 0x0, 0x4], [0x39, 0x2, 0x0, 0xffffffff, 0xfffffffa, 0x1, 0xfffffffc, 0x8]], '\x00', [{0x4, 0x4, 0x0, 0x1}, {0x3, 0x166e, 0x0, 0x1, 0x1}, {0x3, 0x6, 0x0, 0x1}, {0x7f, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {0x25f4ba4b, 0x5, 0x0, 0x1, 0x1}, {0x1, 0x9, 0x1, 0x0, 0x0, 0x1}, {0xb237ff16, 0x8000, 0x0, 0x0, 0x1}, {0x6, 0x8000, 0x0, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1}, {0x4, 0x4, 0x0, 0x1, 0x1, 0x1}, {0xc9, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x67, 0x9, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x1}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000005c0)={r3, @remote, @rand_addr=0x64010100}, 0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x68, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040001}, 0x8088) 8.550304508s ago: executing program 4 (id=953): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x4f, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f8603, 0x63, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x10, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d8100090503e8ffffff040009058a0300"], 0x0) 8.441843399s ago: executing program 1 (id=954): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000680)) io_uring_setup(0x7085, &(0x7f0000000140)={0x0, 0xd0a9, 0x2000, 0x2, 0x203c7}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1279, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0], 0x50e) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x5ef901, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16], &(0x7f0000000680)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 8.364077042s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000165000/0x4000)=nil, 0x4000, 0x2, 0x100010, r5, 0x7d905000) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4, 0x0, 0xe00}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 6.724842522s ago: executing program 2 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2000000}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) 6.533984128s ago: executing program 1 (id=957): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001304000200000000fb27307a6566a085bb0000000000000000000001fe8000000000000000000000000000aa00000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000f00000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.041277653s ago: executing program 3 (id=959): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_secret(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 5.844630038s ago: executing program 1 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x34, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)="5919f47cc83e3aa2d03c119156dd1cfc1f0ffde6325be775a4da8af5c19a08a7bba68a5afa0d4243e2aa5888ddca7deae5421c680276218fa870", 0x3a, r0}, 0x68) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x1c, 0xbf, 0xc6, 0x10, 0x5e1, 0x893, 0x702c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x2, 0x10, 0x7f, "", [{{0x9, 0x4, 0x8f, 0x7, 0x0, 0x40, 0x71, 0x4d, 0x90}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async) r2 = eventfd(0x3ff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r2) 5.222336101s ago: executing program 3 (id=961): mq_open(0x0, 0x42, 0x197, 0x0) mlock(&(0x7f0000cba000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000002500000018"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000380)={0x1, 0x0, 0x0, r7, 0x2e}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 4.889170446s ago: executing program 4 (id=962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x9, 0xbffffe0800000007, 0xfa11, 0xefffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x7, 0xeeef0000, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) writev(0xffffffffffffffff, 0x0, 0xffffffffffffff6a) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f00000005c0)="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", 0x1a0) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x300000000000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(r6, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000000, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) close(0xffffffffffffffff) 4.699758118s ago: executing program 3 (id=963): syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0800450000381e0001ac1414aa030090781200183f2500000000000000bb890000ac141400e000000200186371ae9b1c03a39eced17d316414b35b36a2c82b1f773276eecaee59063ec9459949ed5cba09f33457f3fe8b6ef3d0415a91fe8454d03ac973af849c1287395f99e729c7990b"], 0x0) r0 = socket$isdn(0x22, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x8, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x4b, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_connect$uac2(0x1, 0x95, &(0x7f0000005200)=ANY=[@ANYBLOB="12015101000000081e040030400001020301090283000301050008080b010201062004090400000001012000092401164b032300800c2403060004ff03045ff7050924070401000200000524040602090401000001022000090401011101022000090501090800170b05082501030f060600090402000001022000090402010101022000090582094000fd820008250102300900f8"], &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESHEX=r2, @ANYRES8=r3, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xd5, 0x4, 0xf4e, 0x0, 0x6}, &(0x7f00000000c0)=0x14) 4.621462384s ago: executing program 0 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x54) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xecbfb3cf3553beed}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x48475f539e941a1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x14) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.722000218s ago: executing program 2 (id=965): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4000) 3.681990148s ago: executing program 2 (id=966): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() acct(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x3}]}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @multicast1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000025c0)=""/158, &(0x7f0000000000)=0x9e) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="452100340066000006069078ac1414337f0000010000000000000000000000000000000100004e2400004e240000000400000001e977f537ac83db0063e106f423f613"], 0x34) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x9, 0x0, 0x9, 0xc6, 0x68}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @multicast1}}, 0xfffffffe, 0x2, 0x81, 0x4, 0x0, 0xfff, 0x39}, 0x9c) 3.582868212s ago: executing program 1 (id=967): socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x52fa82, 0x33) r3 = socket$inet6(0xa, 0x1, 0x84) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x8042, 0xe0) 3.011924243s ago: executing program 0 (id=968): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xffeff038}, {0x6, 0x0, 0x8, 0x7}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r1, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r2, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000200)={0xf0, 0x4d}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r7, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2.636576548s ago: executing program 2 (id=969): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r7, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)='i', 0x1) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x84000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) 1.949981408s ago: executing program 4 (id=970): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120110013c0c30085e04840210320102030109021b000100004005090489", @ANYRES32], 0x0) 1.880954943s ago: executing program 3 (id=971): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_secret(0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 1.709895364s ago: executing program 2 (id=972): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x4f, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xffffffffff7ffffb, 0x213f8603, 0x63, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x10, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d8100090503e8ffffff040009058a0300"], 0x0) 715.974081ms ago: executing program 1 (id=973): mq_open(0x0, 0x42, 0x197, 0x0) mlock(&(0x7f0000cba000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000002500000018"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000380)={0x1, 0x0, 0x0, r7, 0x2e}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 366.537221ms ago: executing program 4 (id=974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 318.710746ms ago: executing program 4 (id=975): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x32, &(0x7f0000000100)=[{0x20, '\x00', @data=0xf, 0x83d0}, {0x1d, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000000}, {0x2, @uvalue=0xd}, {0x3, @svalue=0x80000001}, {0x1, @svalue=0x81}]}, 0x292c}]}) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000016002507b9409b14ffff00000202be04fd0506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) sendmsg$sock(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0xfffe}, 0x90) inotify_init() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000040)={'veth0_virt_wifi\x00', {0x2, 0x0, @dev}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x4000, @remote, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x11) 178.976964ms ago: executing program 1 (id=976): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x1, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59cf00000000090000000800000006000180"], 0x30}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0xc0105702, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r6, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 96.066902ms ago: executing program 3 (id=977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x4, 0x3093, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x3000000, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x1d, 0x0, 0x3}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370) 0s ago: executing program 3 (id=978): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x2001}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000100"/28], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xffffff41, 0x1, 0xfffffff7, 0x110, 0xffffffffffffffff, 0x3de, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400000000000000000000684794fcf076000000"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r12, &(0x7f0000000240)}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x11, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x488}, @tail_call, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0x1000, &(0x7f0000001700)=""/4096, 0x41100, 0x3a, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xd, 0x401, 0x71ef}, 0x10, 0x1c137, r3, 0x3, &(0x7f0000000ac0)=[r7, r8, r9, r10, r11, r12, r13], &(0x7f0000000b00)=[{0x1, 0x2, 0xa, 0xb}, {0x1, 0x3, 0xf, 0x3}, {0x5, 0x1, 0xe, 0x5}], 0x10, 0x5}, 0x94) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r14, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) kernel console output (not intermixed with test programs): maxpacket 1024 [ 181.253708][ T5863] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 181.301573][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.310193][ T5863] usb 2-1: Product: syz [ 181.317690][ T5863] usb 2-1: Manufacturer: syz [ 181.362658][ T5863] usb 2-1: SerialNumber: syz [ 181.419711][ T5863] usb 2-1: config 0 descriptor?? [ 181.425476][ T7513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.437034][ T5863] hub 2-1:0.0: bad descriptor, ignoring hub [ 181.443224][ T5863] hub 2-1:0.0: probe with driver hub failed with error -5 [ 181.569434][ T7531] overlay: Unknown parameter 'smackfsroot' [ 182.224848][ T29] audit: type=1400 audit(1775284447.414:426): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.387560][ T5870] usb 2-1: USB disconnect, device number 11 [ 182.895875][ T5870] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 182.943802][ T7551] process 'syz.3.467' launched './file1' with NULL argv: empty string added [ 182.983188][ T7551] nfs: Bad value for 'source' [ 182.990696][ T29] audit: type=1400 audit(1775284448.174:427): avc: denied { mounton } for pid=7550 comm="syz.3.467" path="/91/file1" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.119335][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 183.156182][ T5870] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.172111][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.184335][ T5870] usb 2-1: Product: syz [ 183.194857][ T5870] usb 2-1: Manufacturer: syz [ 183.199513][ T5870] usb 2-1: SerialNumber: syz [ 183.220924][ T5870] usb 2-1: config 0 descriptor?? [ 183.227520][ T7513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.292232][ T5870] hub 2-1:0.0: bad descriptor, ignoring hub [ 183.298150][ T5870] hub 2-1:0.0: probe with driver hub failed with error -5 [ 183.690771][ T791] usb 2-1: USB disconnect, device number 12 [ 183.779630][ T7563] binder: 7562:7563 ioctl c0306201 200000000080 returned -14 [ 185.200725][ T29] audit: type=1400 audit(1775284449.824:428): avc: denied { ioctl } for pid=7548 comm="syz.2.466" path="/dev/sg0" dev="devtmpfs" ino=804 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.860650][ T29] audit: type=1400 audit(1775284449.934:429): avc: denied { create } for pid=7570 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 186.356615][ T29] audit: type=1400 audit(1775284449.974:430): avc: denied { sys_admin } for pid=7570 comm="syz.1.474" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 186.401104][ T7586] netlink: 'syz.0.478': attribute type 20 has an invalid length. [ 187.267243][ T7599] binder: 7597:7599 ioctl c0306201 200000000080 returned -14 [ 187.336456][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 187.689095][ T7615] FAULT_INJECTION: forcing a failure. [ 187.689095][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 187.750631][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.3.486 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.750659][ T7615] Tainted: [L]=SOFTLOCKUP [ 187.750664][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.750674][ T7615] Call Trace: [ 187.750679][ T7615] [ 187.750686][ T7615] dump_stack_lvl+0x100/0x190 [ 187.750717][ T7615] should_fail_ex.cold+0x5/0xa [ 187.750740][ T7615] should_failslab+0xc2/0x120 [ 187.750759][ T7615] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 187.750785][ T7615] ? __alloc_skb+0x140/0x710 [ 187.750813][ T7615] __alloc_skb+0x140/0x710 [ 187.750846][ T7615] ? __alloc_skb+0x5b7/0x710 [ 187.750868][ T7615] ? __pfx___alloc_skb+0x10/0x10 [ 187.750896][ T7615] netlink_alloc_large_skb+0x69/0x150 [ 187.750929][ T7615] netlink_sendmsg+0x680/0xda0 [ 187.750959][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.750984][ T7615] ? __might_fault+0x50/0x140 [ 187.751017][ T7615] ____sys_sendmsg+0x9e1/0xb70 [ 187.751034][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.751063][ T7615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.751091][ T7615] ___sys_sendmsg+0x190/0x1e0 [ 187.751111][ T7615] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.751159][ T7615] __sys_sendmsg+0x170/0x220 [ 187.751184][ T7615] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.751224][ T7615] do_syscall_64+0x106/0xf80 [ 187.751251][ T7615] ? clear_bhb_loop+0x40/0x90 [ 187.751274][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.751291][ T7615] RIP: 0033:0x7fd9ee59c819 [ 187.751306][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.751322][ T7615] RSP: 002b:00007fd9ec7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.751340][ T7615] RAX: ffffffffffffffda RBX: 00007fd9ee815fa0 RCX: 00007fd9ee59c819 [ 187.751351][ T7615] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 187.751362][ T7615] RBP: 00007fd9ec7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.751372][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.751381][ T7615] R13: 00007fd9ee816038 R14: 00007fd9ee815fa0 R15: 00007fff40b2e6a8 [ 187.751404][ T7615] [ 188.108382][ T29] audit: type=1400 audit(1775284453.294:431): avc: denied { getopt } for pid=7622 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.474308][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.631008][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.639070][ T5863] usb 3-1: device descriptor read/64, error -71 [ 188.642632][ T7641] binder: 7640:7641 ioctl c0306201 200000000080 returned -14 [ 189.026274][ T5863] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 189.641347][ T5863] usb 3-1: device descriptor read/64, error -71 [ 189.715592][ T7659] lo speed is unknown, defaulting to 1000 [ 189.723455][ T7659] lo speed is unknown, defaulting to 1000 [ 189.742039][ T7659] lo speed is unknown, defaulting to 1000 [ 189.750950][ T5863] usb usb3-port1: attempt power cycle [ 189.775832][ T29] audit: type=1400 audit(1775284454.964:432): avc: denied { lock } for pid=7658 comm="syz.1.502" path="socket:[15862]" dev="sockfs" ino=15862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 189.778932][ T7659] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.855749][ T7659] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 189.977640][ T7659] lo speed is unknown, defaulting to 1000 [ 189.994757][ T7659] lo speed is unknown, defaulting to 1000 [ 190.008503][ T7659] lo speed is unknown, defaulting to 1000 [ 190.019389][ T7659] lo speed is unknown, defaulting to 1000 [ 190.029040][ T7659] lo speed is unknown, defaulting to 1000 [ 190.110738][ T5863] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 190.160759][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 190.373064][ T5863] usb 3-1: device descriptor read/8, error -71 [ 190.600632][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 190.607445][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 190.622913][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 190.643026][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 190.664107][ T7671] xt_hashlimit: size too large, truncated to 1048576 [ 190.670832][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 190.696110][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 190.739379][ T5870] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 191.233852][ T5863] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 191.643013][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.652215][ T5870] usb 4-1: Product: syz [ 191.656380][ T5870] usb 4-1: Manufacturer: syz [ 191.661911][ T5870] usb 4-1: SerialNumber: syz [ 191.672356][ T5863] usb 3-1: device descriptor read/8, error -71 [ 191.792805][ T5863] usb usb3-port1: unable to enumerate USB device [ 191.800932][ T5911] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 191.813229][ T5870] usb 4-1: config 0 descriptor?? [ 191.967064][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.000308][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.013906][ T7688] SET target dimension over the limit! [ 192.201170][ T5911] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 192.210447][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.279763][ T5911] usb 2-1: config 0 descriptor?? [ 192.392900][ T5870] input input6: Device does not respond to id packet M [ 192.766237][ T5911] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 192.786795][ T5911] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 192.805819][ T5911] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 193.005421][ T7699] fuse: Bad value for 'fd' [ 193.170897][ T5863] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 193.359676][ T5911] hid-led 0003:1D34:000A.0006: probe with driver hid-led failed with error -71 [ 193.421115][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 193.428462][ T5870] input input6: Device does not respond to id packet P [ 193.437043][ T5911] usb 2-1: USB disconnect, device number 13 [ 193.442363][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 193.524215][ T5863] usb 1-1: config 0 has an invalid interface number: 137 but max is 0 [ 193.549784][ T5863] usb 1-1: config 0 has no interface number 0 [ 193.608829][ T5870] input input6: Device does not respond to id packet B [ 193.618941][ T5863] usb 1-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 193.639378][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 193.647593][ T5870] input input6: Device does not respond to id packet N [ 193.662007][ T5863] usb 1-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 193.721738][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 193.736548][ T5863] usb 1-1: config 0 interface 137 has no altsetting 0 [ 193.758776][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 193.766745][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 193.997897][ T5863] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 194.029957][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.050870][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 194.057959][ T5863] usb 1-1: Product: syz [ 194.062285][ T5863] usb 1-1: Manufacturer: syz [ 194.066876][ T5863] usb 1-1: SerialNumber: syz [ 194.071548][ T5870] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 194.107636][ T5870] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 194.121992][ T5863] usb 1-1: config 0 descriptor?? [ 194.127348][ T7695] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.167557][ T5863] xbox_remote_probe: Unexpected endpoint_in [ 194.290985][ T5870] usb 4-1: USB disconnect, device number 16 [ 194.747777][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 194.783514][ T7703] kvm: emulating exchange as write [ 194.819075][ T29] audit: type=1400 audit(1775284459.984:433): avc: denied { name_connect } for pid=7702 comm="syz.2.513" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 195.964213][ T791] usb 1-1: USB disconnect, device number 9 [ 196.050691][ T5911] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 196.232138][ T5911] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 196.260522][ T5911] usb 2-1: config 0 has no interface number 0 [ 196.291124][ T5911] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 196.330646][ T5911] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 196.393572][ T5911] usb 2-1: config 0 interface 11 has no altsetting 0 [ 196.413989][ T791] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 196.539438][ T7729] xt_hashlimit: size too large, truncated to 1048576 [ 196.800088][ T5911] usb 2-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 196.979458][ T29] audit: type=1400 audit(1775284461.844:434): avc: denied { module_request } for pid=7724 comm="syz.2.521" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 197.000430][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.049866][ T5911] usb 2-1: config 0 descriptor?? [ 197.109919][ T7711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.121712][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 197.127715][ T5911] keyspan 2-1:0.11: Keyspan 4 port adapter converter detected [ 197.148182][ T791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.160182][ T791] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 197.178380][ T791] usb 1-1: config 0 has no interface number 0 [ 197.189176][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 197.197843][ T791] usb 1-1: config 0 interface 105 has no altsetting 0 [ 197.209116][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 197.229756][ T791] usb 1-1: New USB device found, idVendor=20dc, idProduct=079c, bcdDevice=a6.f5 [ 197.251292][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.262422][ T5911] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 197.295235][ T791] usb 1-1: Product: 펫ꛈ쥭蓳ꈤ゠橶ꯤ釾âµæ‘¿îˆ¤å·ë§ªâˆ¥à¡³ê°¸êŠ¸é¾ƒæ¾â¨œæ†´ï´–äŠå…é‘è´‚ì†ë¹‹î³éˆ’ᯇﺵⶾ묄䅓鎞뺓웶挶♆╚칎샥턦糅âŒã±•à§ƒá˜‚겢郜൲᚟䕓掃ëšîµ±äŽã±ŽìŒáš­ê³¢é– ï·Œê¹“⮹몶躳먊꽟èƒè­­æ°ë»ì­­å€šæ¨ªåš£í†‘๑蒜㇀⛣엎歗ç‹êšæ³‚å†á¸¬ä¹§ê°èž¼ [ 197.351907][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 197.367155][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 197.384449][ T791] usb 1-1: Manufacturer: Ð [ 197.398757][ T5911] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 197.408152][ T791] usb 1-1: SerialNumber: syz [ 197.427352][ T791] usb 1-1: config 0 descriptor?? [ 197.438185][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 197.468033][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 197.523010][ T5911] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 198.017690][ T7721] loop9: detected capacity change from 0 to 524287936 [ 198.093496][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 198.113545][ T5911] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 198.125988][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 198.148161][ T5911] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 198.169236][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.523'. [ 198.264784][ T5911] usb 2-1: USB disconnect, device number 14 [ 198.316536][ T5911] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 198.348762][ T5911] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 198.424616][ T5911] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 198.452063][ T5911] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 198.479492][ T791] usb-storage 1-1:0.105: USB Mass Storage device detected [ 198.520942][ T5911] keyspan 2-1:0.11: device disconnected [ 198.526527][ T5809] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 198.600713][ T791] usb 1-1: USB disconnect, device number 10 [ 198.695531][ T5809] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 198.720238][ T5809] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 198.762729][ T5809] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 198.791153][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.799145][ T5809] usb 3-1: Product: syz [ 199.230502][ T5809] usb 3-1: Manufacturer: syz [ 199.250986][ T5809] usb 3-1: SerialNumber: syz [ 199.288250][ T5809] usb 3-1: config 0 descriptor?? [ 199.780687][ T5809] mos7840 3-1:0.0: required endpoints missing [ 199.788914][ T5809] usb 3-1: USB disconnect, device number 16 [ 200.201127][ T7757] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.585425][ T29] audit: type=1400 audit(1775284465.774:435): avc: denied { connect } for pid=7756 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.204673][ T7772] No such timeout policy "syz1" [ 201.210423][ T7772] No control pipe specified [ 201.215686][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 201.345749][ T29] audit: type=1400 audit(1775284466.534:436): avc: denied { write } for pid=7773 comm="syz.2.532" name="sg0" dev="devtmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.605580][ T7778] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 201.605580][ T7778] program syz.2.532 not setting count and/or reply_len properly [ 201.998366][ T7776] comedi comedi2: aio_aio12_8: I/O port conflict (0x8,32) [ 202.670615][ T5911] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.850655][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 202.857016][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 202.883356][ T5911] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.912111][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.930809][ T791] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.939083][ T5911] usb 2-1: Product: syz [ 202.944551][ T5911] usb 2-1: Manufacturer: syz [ 202.949200][ T5911] usb 2-1: SerialNumber: syz [ 202.958836][ T5911] usb 2-1: config 0 descriptor?? [ 202.969026][ T7776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.970701][ T5928] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 202.985746][ T5911] hub 2-1:0.0: bad descriptor, ignoring hub [ 202.992177][ T5911] hub 2-1:0.0: probe with driver hub failed with error -5 [ 203.047637][ T7790] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1043 sclass=netlink_xfrm_socket pid=7790 comm=syz.0.537 [ 203.093189][ T791] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 203.117804][ T791] usb 5-1: config 0 has no interface number 0 [ 203.128297][ T791] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 203.172176][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 203.184917][ T791] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 203.214089][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 203.237170][ T791] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 203.252363][ T5928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 203.266840][ T791] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 203.279816][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.690692][ T791] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 203.702661][ T5928] usb 3-1: config 0 descriptor?? [ 203.707424][ T5863] usb 2-1: USB disconnect, device number 15 [ 203.713527][ T791] usb 5-1: Product: syz [ 203.713545][ T791] usb 5-1: Manufacturer: syz [ 203.713559][ T791] usb 5-1: SerialNumber: syz [ 203.761484][ T791] usb 5-1: config 0 descriptor?? [ 203.935690][ T5928] usb 3-1: string descriptor 0 read error: -71 [ 203.987246][ T5928] ath6kl: Failed to submit usb control message: -71 [ 203.994506][ T5928] ath6kl: unable to send the bmi data to the device: -71 [ 204.012105][ T5928] ath6kl: Unable to send get target info: -71 [ 204.032794][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 204.043392][ T5928] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 204.068495][ T5928] usb 3-1: USB disconnect, device number 17 [ 204.235912][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.276465][ T7800] batadv_slave_0: entered promiscuous mode [ 204.306676][ T7800] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 205.135926][ T1870] usb 5-1: USB disconnect, device number 14 [ 205.241229][ T29] audit: type=1400 audit(1775284470.424:437): avc: denied { execute } for pid=7810 comm="syz.4.544" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 205.374314][ T7816] SET target dimension over the limit! [ 205.724586][ T7818] binder: 7817:7818 ioctl c0306201 200000000080 returned -14 [ 205.906313][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 206.178747][ T7819] (syz.4.544,7819,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 206.210832][ T7819] (syz.4.544,7819,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 206.878776][ T7832] pim6reg1: entered promiscuous mode [ 206.884191][ T7832] pim6reg1: entered allmulticast mode [ 207.303374][ T7839] fuse: Bad value for 'fd' [ 207.315492][ T7839] binder: BINDER_SET_CONTEXT_MGR already set [ 207.321706][ T7839] binder: 7836:7839 ioctl 4018620d 200000004a80 returned -16 [ 207.332238][ T29] audit: type=1400 audit(1775284472.504:438): avc: denied { setopt } for pid=7836 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 207.994274][ T29] audit: type=1400 audit(1775284473.184:439): avc: denied { lock } for pid=7849 comm="syz.1.555" path="socket:[15144]" dev="sockfs" ino=15144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 208.057411][ T7853] fuse: Bad value for 'fd' [ 208.805304][ T29] audit: type=1400 audit(1775284473.744:440): avc: denied { mounton } for pid=7849 comm="syz.1.555" path="/syzcgroup/unified/syz1" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 209.394099][ T7871] vxcan1 speed is unknown, defaulting to 1000 [ 209.462837][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 209.509309][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 209.534582][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 209.941616][ T7871] lo speed is unknown, defaulting to 1000 [ 210.980842][ T29] audit: type=1400 audit(1775284476.074:441): avc: denied { ioctl } for pid=7891 comm="syz.2.566" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.523140][ T5863] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.703891][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.712613][ T5863] usb 1-1: config index 0 descriptor too short (expected 11209, got 96) [ 211.723664][ T5863] usb 1-1: config 140 has too many interfaces: 51, using maximum allowed: 32 [ 211.742326][ T5863] usb 1-1: config 140 has an invalid descriptor of length 126, skipping remainder of the config [ 211.756582][ T5863] usb 1-1: config 140 has 0 interfaces, different from the descriptor's value: 51 [ 211.889065][ T5863] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 211.904075][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.917283][ T5863] usb 1-1: Product: syz [ 211.921745][ T5863] usb 1-1: Manufacturer: syz [ 211.926435][ T5863] usb 1-1: SerialNumber: syz [ 213.107257][ T5870] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 213.270675][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 213.277791][ T5870] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 213.288372][ T5870] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.318283][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 213.331417][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.357004][ T5870] usb 4-1: Product: syz [ 213.374369][ T5870] usb 4-1: Manufacturer: syz [ 213.386778][ T5870] usb 4-1: SerialNumber: syz [ 213.414972][ T5870] usb 4-1: config 0 descriptor?? [ 213.625801][ T7925] netlink: 'syz.0.574': attribute type 3 has an invalid length. [ 213.823013][ T29] audit: type=1400 audit(1775284479.014:442): avc: denied { mount } for pid=7924 comm="syz.0.574" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 213.891117][ T29] audit: type=1400 audit(1775284479.084:443): avc: denied { read write } for pid=7924 comm="syz.0.574" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 213.915106][ T29] audit: type=1400 audit(1775284479.084:444): avc: denied { open } for pid=7924 comm="syz.0.574" path="/114/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 214.000711][ T29] audit: type=1400 audit(1775284479.144:445): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 214.004476][ T5863] usb 1-1: USB disconnect, device number 11 [ 214.067996][ T7938] netlink: 76 bytes leftover after parsing attributes in process `syz.1.576'. [ 214.307193][ T7944] syzkaller0: entered promiscuous mode [ 214.317451][ T7944] syzkaller0: entered allmulticast mode [ 214.890956][ T29] audit: type=1400 audit(1775284480.084:446): avc: denied { write } for pid=7952 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.119180][ T7955] PKCS8: Unsupported PKCS#8 version [ 215.263500][ T7958] netlink: 'syz.1.582': attribute type 12 has an invalid length. [ 215.568281][ T7958] SET target dimension over the limit! [ 216.023448][ T7974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.589'. [ 216.310495][ T7978] No such timeout policy "syz1" [ 216.318603][ T7978] No control pipe specified [ 216.323773][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 217.004862][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 217.077300][ T7987] netlink: 'syz.4.592': attribute type 10 has an invalid length. [ 217.103358][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.117390][ T7987] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.145658][ T7987] loop5: detected capacity change from 0 to 7 [ 217.198812][ T7987] Dev loop5: unable to read RDB block 7 [ 217.204459][ T7987] loop5: AHDI p1 [ 217.208210][ T7987] loop5: partition table partially beyond EOD, truncated [ 217.280662][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 217.599484][ T1870] usb 4-1: USB disconnect, device number 17 [ 217.714044][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 217.729730][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.870917][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.030406][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.066908][ T5870] usb 2-1: Product: syz [ 218.120715][ T5911] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 218.150624][ T5870] usb 2-1: Manufacturer: syz [ 218.165705][ T5870] usb 2-1: SerialNumber: syz [ 218.342773][ T5911] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 218.398277][ T5911] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 218.429024][ T5911] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 218.463657][ T5911] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 218.530691][ T5911] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 218.574779][ T5911] usb 4-1: string descriptor 0 read error: -22 [ 218.581149][ T5911] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 218.600694][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.886669][ T8008] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 219.034472][ T5870] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 219.061828][ T5870] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 219.408465][ T29] audit: type=1400 audit(1775284484.594:447): avc: denied { read } for pid=8012 comm="syz.4.602" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.450774][ T29] audit: type=1400 audit(1775284484.594:448): avc: denied { open } for pid=8012 comm="syz.4.602" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.537882][ T5911] usb 4-1: low speed audio streaming not supported [ 219.590863][ T1870] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 219.686946][ T5911] usb 4-1: low speed audio streaming not supported [ 219.804394][ T5911] usb 4-1: unit 3 not found! [ 219.920032][ T5870] usb 2-1: USB disconnect, device number 16 [ 220.007174][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 220.355675][ T5911] usb 4-1: USB disconnect, device number 18 [ 220.425449][ T8025] loop5: detected capacity change from 0 to 7 [ 220.452118][ T8022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.603'. [ 220.454567][ T8025] Dev loop5: unable to read RDB block 7 [ 220.454589][ T8025] loop5: unable to read partition table [ 220.454675][ T8025] loop5: partition table beyond EOD, truncated [ 220.454685][ T8025] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.485721][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.4.603'. [ 220.497057][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 220.529047][ T29] audit: type=1400 audit(1775284485.714:449): avc: denied { sqpoll } for pid=8023 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 221.058081][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 221.137827][ T8042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 221.858682][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 222.123282][ T8061] comedi comedi2: aio_aio12_8: I/O port conflict (0x8,32) [ 222.461550][ T5928] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 222.644569][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 222.655680][ T5928] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 222.666118][ T1870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.678295][ T5928] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 222.693687][ T5928] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 222.712635][ T5928] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 222.733167][ T5928] usb 4-1: string descriptor 0 read error: -22 [ 222.740975][ T5928] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 222.750106][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.777314][ T5928] usb 4-1: low speed audio streaming not supported [ 222.785616][ T5928] usb 4-1: low speed audio streaming not supported [ 222.794595][ T5928] usb 4-1: unit 3 not found! [ 222.825992][ T1870] usb 5-1: Using ep0 maxpacket: 32 [ 222.856292][ T1870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.909030][ T1870] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.937484][ T1870] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.958709][ T1870] usb 5-1: Product: syz [ 222.984051][ T1870] usb 5-1: Manufacturer: syz [ 222.984222][ T5928] usb 4-1: USB disconnect, device number 19 [ 223.013073][ T1870] usb 5-1: SerialNumber: syz [ 223.038667][ T1870] usb 5-1: config 0 descriptor?? [ 223.073249][ T8061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.096501][ T1870] hub 5-1:0.0: bad descriptor, ignoring hub [ 223.119926][ T1870] hub 5-1:0.0: probe with driver hub failed with error -5 [ 223.215140][ T29] audit: type=1400 audit(1775284488.404:450): avc: denied { watch } for pid=8070 comm="syz.1.619" path="/129/file1" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 223.239887][ T8071] bpf: Bad value for 'uid' [ 223.268333][ T29] audit: type=1400 audit(1775284488.434:451): avc: denied { watch_sb watch_reads } for pid=8070 comm="syz.1.619" path="/129/file1" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 223.335238][ T29] audit: type=1400 audit(1775284488.434:452): avc: denied { read } for pid=8070 comm="syz.1.619" path="socket:[17766]" dev="sockfs" ino=17766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.432990][ T5911] usb 5-1: USB disconnect, device number 15 [ 224.360473][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 224.893928][ T8108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.914351][ T8108] batadv_slave_0: entered promiscuous mode [ 225.332079][ T42] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 225.344602][ T42] usb 4-1: config 0 has no interface number 0 [ 225.355593][ T8108] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 225.420654][ T42] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 225.431734][ T42] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 225.460618][ T42] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 225.497451][ T42] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 225.541102][ T42] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 225.549094][ T42] usb 4-1: Product: syz [ 225.569369][ T42] usb 4-1: Manufacturer: syz [ 225.574638][ T42] usb 4-1: SerialNumber: syz [ 225.585564][ T42] usb 4-1: config 0 descriptor?? [ 225.610665][ T5870] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.636841][ T8114] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.862088][ T5870] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 225.870299][ T5870] usb 1-1: config 0 has no interface number 0 [ 225.876654][ T5870] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 225.963633][ T8122] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 225.971827][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.979416][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.995860][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.002987][ T8122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.010389][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.017514][ T8122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.033594][ T8122] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 226.077242][ T6755] bond0: (slave bridge0): interface is now down [ 226.101362][ T6755] bond0: now running without any active interface! [ 226.525122][ T5870] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 226.537467][ T5870] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 226.558924][ T5870] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 226.570664][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 226.580073][ T5870] usb 1-1: Product: syz [ 226.592905][ T5870] usb 1-1: Manufacturer: syz [ 226.598087][ T5870] usb 1-1: SerialNumber: syz [ 226.618021][ T5870] usb 1-1: config 0 descriptor?? [ 226.789020][ T29] audit: type=1400 audit(1775284491.974:453): avc: denied { create } for pid=8128 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.884508][ T5870] usb 4-1: USB disconnect, device number 20 [ 226.900129][ T29] audit: type=1400 audit(1775284492.084:454): avc: denied { create } for pid=8130 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 227.110787][ T5928] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 227.261119][ T8141] syzkaller1: entered promiscuous mode [ 227.266708][ T8141] syzkaller1: entered allmulticast mode [ 227.272354][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 227.280816][ T5928] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.290228][ T5928] usb 2-1: config 0 has no interface number 0 [ 227.298148][ T5928] usb 2-1: config 0 interface 184 has no altsetting 0 [ 227.310635][ T5928] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.319833][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.328123][ T5928] usb 2-1: Product: syz [ 227.333002][ T5928] usb 2-1: Manufacturer: syz [ 227.338034][ T5928] usb 2-1: SerialNumber: syz [ 227.353429][ T5928] usb 2-1: config 0 descriptor?? [ 227.380792][ T5870] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 227.457829][ T8143] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 227.479735][ T8145] netlink: 88 bytes leftover after parsing attributes in process `syz.4.642'. [ 227.550928][ T5870] usb 3-1: device descriptor read/64, error -71 [ 227.790737][ T5870] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 227.791759][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 227.909656][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 227.919685][ T5928] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 227.971482][ T29] audit: type=1400 audit(1775284493.074:455): avc: denied { setopt } for pid=8148 comm="syz.3.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.990989][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.643'. [ 227.996704][ T1870] usb 1-1: USB disconnect, device number 13 [ 228.037891][ T5928] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 228.120668][ T5870] usb 3-1: device descriptor read/64, error -71 [ 228.240939][ T5870] usb usb3-port1: attempt power cycle [ 228.381086][ T8157] No such timeout policy "syz1" [ 228.386800][ T8157] No control pipe specified [ 228.391967][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 228.590684][ T5870] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 228.611163][ T5870] usb 3-1: device descriptor read/8, error -71 [ 228.740635][ T5911] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 228.851650][ T5870] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 228.893080][ T5870] usb 3-1: device descriptor read/8, error -71 [ 228.912195][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 228.926362][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 228.940399][ T5911] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 228.955340][ T5911] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 229.000675][ T5911] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 229.000921][ T5870] usb usb3-port1: unable to enumerate USB device [ 229.163346][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 229.163436][ T5911] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 229.163450][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.176514][ T5911] usb 5-1: low speed audio streaming not supported [ 229.176533][ T5911] usb 5-1: low speed audio streaming not supported [ 229.176587][ T5911] usb 5-1: unit 3 not found! [ 229.264808][ T8172] 9p: Bad value for 'rfdno' [ 229.270816][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.282182][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.671351][ T5911] usb 5-1: USB disconnect, device number 16 [ 229.679029][ T29] audit: type=1400 audit(1775284494.854:456): avc: denied { mount } for pid=8173 comm="syz.0.650" name="/" dev="ramfs" ino=18003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 229.923305][ T8182] vxcan1 speed is unknown, defaulting to 1000 [ 230.169807][ T8184] FAULT_INJECTION: forcing a failure. [ 230.169807][ T8184] name failslab, interval 1, probability 0, space 0, times 0 [ 230.183596][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.2.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.183622][ T8184] Tainted: [L]=SOFTLOCKUP [ 230.183628][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 230.183637][ T8184] Call Trace: [ 230.183643][ T8184] [ 230.183650][ T8184] dump_stack_lvl+0x100/0x190 [ 230.183683][ T8184] should_fail_ex.cold+0x5/0xa [ 230.183708][ T8184] should_failslab+0xc2/0x120 [ 230.183727][ T8184] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 230.183753][ T8184] ? skb_clone+0x190/0x400 [ 230.183785][ T8184] skb_clone+0x190/0x400 [ 230.183811][ T8184] netlink_deliver_tap+0xaed/0xcc0 [ 230.183843][ T8184] netlink_unicast+0x650/0x870 [ 230.183875][ T8184] ? __pfx_netlink_unicast+0x10/0x10 [ 230.183913][ T8184] netlink_sendmsg+0x8b0/0xda0 [ 230.183945][ T8184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.183972][ T8184] ? __might_fault+0x50/0x140 [ 230.184006][ T8184] ____sys_sendmsg+0x9e1/0xb70 [ 230.184023][ T8184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.184053][ T8184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.184084][ T8184] ___sys_sendmsg+0x190/0x1e0 [ 230.184105][ T8184] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.184158][ T8184] __sys_sendmsg+0x170/0x220 [ 230.184184][ T8184] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.184217][ T8184] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 230.184252][ T8184] do_syscall_64+0x106/0xf80 [ 230.184278][ T8184] ? clear_bhb_loop+0x40/0x90 [ 230.184301][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.184318][ T8184] RIP: 0033:0x7ff1c099c819 [ 230.184334][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.184350][ T8184] RSP: 002b:00007ff1c1908028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.184373][ T8184] RAX: ffffffffffffffda RBX: 00007ff1c0c15fa0 RCX: 00007ff1c099c819 [ 230.184384][ T8184] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 230.184394][ T8184] RBP: 00007ff1c1908090 R08: 0000000000000000 R09: 0000000000000000 [ 230.184404][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.184414][ T8184] R13: 00007ff1c0c16038 R14: 00007ff1c0c15fa0 R15: 00007ffd8b872e18 [ 230.184439][ T8184] [ 230.496723][ T5911] usb 2-1: USB disconnect, device number 17 [ 230.673816][ T8197] netlink: 'syz.4.657': attribute type 3 has an invalid length. [ 230.710687][ T8198] SET target dimension over the limit! [ 231.022871][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 231.312785][ T8209] loop5: detected capacity change from 0 to 7 [ 231.318235][ T8210] Bluetooth: MGMT ver 1.23 [ 231.324864][ T8182] lo speed is unknown, defaulting to 1000 [ 231.336846][ T8209] Dev loop5: unable to read RDB block 7 [ 231.353892][ T8209] loop5: unable to read partition table [ 231.365675][ T8209] loop5: partition table beyond EOD, truncated [ 231.420746][ T8209] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.618107][ T8225] macvtap1: entered promiscuous mode [ 231.623592][ T8225] macvtap1: entered allmulticast mode [ 232.030189][ T8231] comedi comedi2: aio_aio12_8: I/O port conflict (0x8,32) [ 232.227355][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.235773][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.247145][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.258380][ T8236] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 232.277625][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.285022][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.292236][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.299435][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.306676][ T8236] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.354990][ T8237] vxcan1 speed is unknown, defaulting to 1000 [ 232.780954][ T5870] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 232.809291][ T8237] lo speed is unknown, defaulting to 1000 [ 232.816051][ T8237] virt_wifi0 speed is unknown, defaulting to 1000 [ 233.473431][ T5870] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.498827][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.513845][ T5870] usb 4-1: Product: syz [ 233.522274][ T5870] usb 4-1: Manufacturer: syz [ 233.540671][ T5870] usb 4-1: SerialNumber: syz [ 233.556591][ T5870] usb 4-1: config 0 descriptor?? [ 233.861295][ T8264] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 233.861295][ T8264] program syz.4.680 not setting count and/or reply_len properly [ 234.295799][ T5870] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.410673][ T791] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 234.563381][ T29] audit: type=1400 audit(1775284499.744:457): avc: denied { ioctl } for pid=8265 comm="syz.1.681" path="socket:[17212]" dev="sockfs" ino=17212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.125425][ T791] usb 3-1: Using ep0 maxpacket: 16 [ 235.190940][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.364419][ T791] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 235.418750][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.434569][ T791] usb 3-1: Product: syz [ 235.446623][ T5818] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 235.454709][ T791] usb 3-1: Manufacturer: syz [ 235.463402][ T791] usb 3-1: SerialNumber: syz [ 235.473489][ T791] usb 3-1: config 0 descriptor?? [ 235.514602][ T791] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 235.539604][ T8285] vxcan1 speed is unknown, defaulting to 1000 [ 235.774553][ T29] audit: type=1400 audit(1775284500.844:458): avc: denied { setopt } for pid=8292 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 236.059481][ T29] audit: type=1400 audit(1775284501.244:459): avc: denied { name_connect } for pid=8301 comm="syz.4.691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 236.082952][ T5870] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 236.150818][ T29] audit: type=1400 audit(1775284501.304:460): avc: denied { getopt } for pid=8252 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.193337][ T29] audit: type=1400 audit(1775284501.324:461): avc: denied { listen } for pid=8301 comm="syz.4.691" lport=46651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.384086][ T5911] usb 4-1: USB disconnect, device number 21 [ 236.393654][ T791] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 236.541412][ T13] usb 3-1: Failed to submit usb control message: -110 [ 236.548465][ T13] usb 3-1: unable to send the bmi data to the device: -110 [ 236.559789][ T13] usb 3-1: unable to get target info from device [ 236.570560][ T13] usb 3-1: could not get target info (-110) [ 236.571351][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 236.583231][ T13] usb 3-1: could not probe fw (-110) [ 236.594193][ T791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.603120][ T791] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 236.612735][ T791] usb 5-1: can't read configurations, error -22 [ 236.741421][ T791] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 236.951084][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 237.080789][ T791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.103147][ T791] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 237.111213][ T791] usb 5-1: can't read configurations, error -22 [ 237.117662][ T791] usb usb5-port1: attempt power cycle [ 237.160718][ T8285] lo speed is unknown, defaulting to 1000 [ 237.251467][ T8285] virt_wifi0 speed is unknown, defaulting to 1000 [ 237.867520][ T791] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 237.903039][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 237.917379][ T791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.927318][ T791] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 237.935896][ T791] usb 5-1: can't read configurations, error -22 [ 238.074096][ T791] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 238.441681][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 238.464824][ T791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.493802][ T791] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 238.507807][ T791] usb 5-1: can't read configurations, error -22 [ 238.541560][ T791] usb usb5-port1: unable to enumerate USB device [ 238.699509][ T5818] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 238.723104][ T42] usb 3-1: USB disconnect, device number 22 [ 238.755811][ T29] audit: type=1400 audit(1775284503.944:462): avc: denied { associate } for pid=8326 comm="syz.0.697" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 238.797749][ T8333] netlink: 'syz.3.696': attribute type 30 has an invalid length. [ 238.897334][ T8341] netlink: 'syz.3.696': attribute type 30 has an invalid length. [ 239.357030][ T29] audit: type=1400 audit(1775284504.124:463): avc: denied { bind } for pid=8335 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.397976][ T29] audit: type=1400 audit(1775284504.544:464): avc: denied { bind } for pid=8325 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.418306][ T29] audit: type=1400 audit(1775284504.544:465): avc: denied { setopt } for pid=8325 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.916003][ T8358] vxcan1 speed is unknown, defaulting to 1000 [ 240.429237][ T8365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.851337][ T5870] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 241.427325][ T5870] usb 4-1: config 0 has an invalid interface number: 139 but max is 0 [ 241.440773][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.162580][ T5870] usb 4-1: config 0 has no interface number 0 [ 242.169166][ T29] audit: type=1400 audit(1775284506.954:466): avc: denied { accept } for pid=8371 comm="syz.1.707" lport=37196 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.207570][ T5870] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 242.225932][ T8358] lo speed is unknown, defaulting to 1000 [ 242.227832][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.255932][ T5870] usb 4-1: Product: syz [ 242.268926][ T5870] usb 4-1: Manufacturer: syz [ 242.273823][ T5870] usb 4-1: SerialNumber: syz [ 242.285011][ T8358] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.305959][ T29] audit: type=1400 audit(1775284506.964:467): avc: denied { getopt } for pid=8371 comm="syz.1.707" lport=37196 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.307291][ T5870] usb 4-1: config 0 descriptor?? [ 242.537362][ T8391] xt_hashlimit: size too large, truncated to 1048576 [ 242.560748][ T8391] xt_hashlimit: max too large, truncated to 1048576 [ 242.670046][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.681717][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.692136][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.702930][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.705906][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.769085][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.787390][ T5870] mct_u232 4-1:0.139: MCT U232 converter detected [ 242.913129][ T5870] mct_u232 ttyUSB0: expected endpoint missing [ 242.944622][ T5870] usb 4-1: USB disconnect, device number 22 [ 243.421127][ T5870] mct_u232 4-1:0.139: device disconnected [ 243.941263][ T791] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.949840][ T29] audit: type=1400 audit(1775284509.124:468): avc: denied { read } for pid=8407 comm="syz.4.716" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 243.994209][ T29] audit: type=1400 audit(1775284509.124:469): avc: denied { open } for pid=8407 comm="syz.4.716" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 244.040781][ T5911] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 244.095364][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 244.141299][ T791] usb 2-1: Using ep0 maxpacket: 8 [ 244.206327][ T791] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 244.239755][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.267633][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.307182][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.360448][ T791] usb 2-1: config 0 descriptor?? [ 244.375182][ T29] audit: type=1400 audit(1775284509.174:470): avc: denied { ioctl } for pid=8407 comm="syz.4.716" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 244.377281][ T5911] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.403272][ T29] audit: type=1400 audit(1775284509.274:471): avc: denied { mount } for pid=8403 comm="syz.0.715" name="/" dev="hugetlbfs" ino=18393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 244.411577][ T5809] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 244.451266][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 244.502599][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.512191][ T791] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 244.531252][ T5911] usb 3-1: SerialNumber: syz [ 244.541647][ T791] usb 2-1: Detected SIO [ 244.550288][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 244.582865][ T791] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 244.648491][ T791] usb 2-1: USB disconnect, device number 18 [ 244.714103][ T791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 244.734402][ T5809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 244.754547][ T791] ftdi_sio 2-1:0.0: device disconnected [ 244.765367][ T5809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 244.780361][ T5809] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 244.806525][ T5809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 244.828793][ T5809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 244.841093][ T5911] usb 3-1: 0:2 : does not exist [ 244.846775][ T5911] usb 3-1: unit 5: unexpected type 0x03 [ 244.854927][ T5809] usb 4-1: string descriptor 0 read error: -22 [ 244.872785][ T5809] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 244.895400][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.914812][ T5911] usb 3-1: USB disconnect, device number 23 [ 244.946168][ T5809] usb 4-1: low speed audio streaming not supported [ 244.956043][ T5809] usb 4-1: low speed audio streaming not supported [ 244.966356][ T8032] udevd[8032]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.985421][ T5809] usb 4-1: unit 3 not found! [ 245.005628][ T8421] netlink: 64 bytes leftover after parsing attributes in process `syz.0.719'. [ 245.182223][ T5911] usb 4-1: USB disconnect, device number 23 [ 245.253015][ T8429] siw: device registration error -23 [ 245.423924][ T8434] cgroup2: Unknown parameter 'memory_h:etlb_accounting' [ 245.431725][ T29] audit: type=1400 audit(1775284510.614:472): avc: denied { mounton } for pid=8433 comm="syz.0.722" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 245.947895][ T5818] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 246.430371][ T8441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.597354][ T8441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.655073][ T8441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.753048][ T8441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.799900][ T8441] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.824277][ T8441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.841663][ T8441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.861018][ T8441] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.888160][ T8441] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.909798][ T8441] 8021q: adding VLAN 0 to HW filter on device bond10 [ 247.166534][ T8441] 8021q: adding VLAN 0 to HW filter on device bond11 [ 247.262126][ T8441] 8021q: adding VLAN 0 to HW filter on device bond12 [ 248.100646][ T8474] ubi: mtd0 is already attached to ubi31 [ 249.188219][ T29] audit: type=1400 audit(1775284514.374:473): avc: denied { allowed } for pid=8468 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 249.248644][ T29] audit: type=1400 audit(1775284514.404:474): avc: denied { create } for pid=8477 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.314787][ T29] audit: type=1400 audit(1775284514.404:475): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.542143][ T29] audit: type=1400 audit(1775284514.404:476): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.693160][ T8489] vxcan1 speed is unknown, defaulting to 1000 [ 249.776375][ T29] audit: type=1400 audit(1775284514.404:477): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.821050][ T5818] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 249.904812][ T29] audit: type=1400 audit(1775284514.404:478): avc: denied { write } for pid=8477 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 250.010106][ T29] audit: type=1400 audit(1775284514.494:479): avc: denied { read } for pid=8480 comm="syz.3.730" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.064131][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.087916][ T29] audit: type=1400 audit(1775284514.494:480): avc: denied { open } for pid=8480 comm="syz.3.730" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.135595][ T29] audit: type=1400 audit(1775284514.614:481): avc: denied { create } for pid=8480 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.165998][ T29] audit: type=1400 audit(1775284514.624:482): avc: denied { write } for pid=8480 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 250.214556][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 250.226011][ T8506] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 250.236261][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.243915][ T8506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 250.251239][ T1035] bond0: (slave batadv0): interface is now down [ 250.261199][ T1035] bond0: now running without any active interface! [ 250.635465][ T8493] vxcan1 speed is unknown, defaulting to 1000 [ 250.654557][ T8489] lo speed is unknown, defaulting to 1000 [ 250.679875][ T8489] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.861662][ T8511] erspan0: entered promiscuous mode [ 250.893324][ T8493] lo speed is unknown, defaulting to 1000 [ 251.370507][ T8515] mkiss: ax0: crc mode is auto. [ 251.376130][ T8493] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.844927][ T42] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 252.387365][ T42] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 252.401569][ T42] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 252.413252][ T42] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 252.446139][ T42] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 252.457411][ T42] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 252.480460][ T42] usb 1-1: string descriptor 0 read error: -22 [ 252.495517][ T42] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 252.508042][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.566139][ T42] usb 1-1: low speed audio streaming not supported [ 252.607644][ T42] usb 1-1: low speed audio streaming not supported [ 252.616042][ T42] usb 1-1: unit 3 not found! [ 252.967109][ T42] usb 1-1: USB disconnect, device number 14 [ 254.116559][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 254.762489][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 254.762504][ T29] audit: type=1400 audit(1775284519.954:529): avc: denied { create } for pid=8565 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 254.835556][ T8566] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 254.987349][ T29] audit: type=1400 audit(1775284520.174:530): avc: denied { ioctl } for pid=8571 comm="syz.0.758" path="socket:[18783]" dev="sockfs" ino=18783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.106647][ T981] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.156328][ T8572] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.167552][ T29] audit: type=1400 audit(1775284520.354:531): avc: denied { mounton } for pid=8562 comm="syz.2.755" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 255.250194][ T29] audit: type=1400 audit(1775284520.434:532): avc: denied { create } for pid=8575 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.629926][ T29] audit: type=1400 audit(1775284520.784:533): avc: denied { setopt } for pid=8575 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.650968][ T29] audit: type=1400 audit(1775284520.784:534): avc: denied { write } for pid=8575 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.991612][ T5810] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 256.054214][ T8581] vxcan1 speed is unknown, defaulting to 1000 [ 256.135191][ T8581] lo speed is unknown, defaulting to 1000 [ 256.141604][ T8581] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.208106][ T29] audit: type=1400 audit(1775284520.814:535): avc: denied { create } for pid=8580 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.240205][ T8584] vxcan1 speed is unknown, defaulting to 1000 [ 256.279296][ T8590] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1043 sclass=netlink_xfrm_socket pid=8590 comm=syz.2.763 [ 256.296785][ T29] audit: type=1400 audit(1775284520.814:536): avc: denied { getopt } for pid=8580 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.372232][ T29] audit: type=1400 audit(1775284521.484:537): avc: denied { read } for pid=8591 comm="syz.1.764" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 256.372265][ T29] audit: type=1400 audit(1775284521.484:538): avc: denied { open } for pid=8591 comm="syz.1.764" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 256.747117][ T8584] lo speed is unknown, defaulting to 1000 [ 256.846248][ T5809] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 256.882277][ T8584] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.180633][ T5810] Bluetooth: hci5: command 0xfc11 tx timeout [ 257.331596][ T5818] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 257.404039][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 257.420832][ T5809] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 257.439006][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.481169][ T5809] usb 5-1: config 0 has no interface number 0 [ 257.493305][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 257.497390][ T5809] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.514631][ T8611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8611 comm=syz.0.771 [ 257.548271][ T5809] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.639057][ T5809] usb 5-1: config 0 interface 196 has no altsetting 0 [ 257.671816][ T5809] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 257.683180][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.695581][ T5809] usb 5-1: Product: syz [ 257.703225][ T5809] usb 5-1: Manufacturer: syz [ 257.715821][ T5809] usb 5-1: SerialNumber: syz [ 257.735582][ T5809] usb 5-1: config 0 descriptor?? [ 257.830487][ T8614] loop6: detected capacity change from 0 to 2640 [ 257.848316][ T8614] buffer_io_error: 6 callbacks suppressed [ 257.848330][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.876308][ T8618] loop6: detected capacity change from 2640 to 524288000 [ 257.901889][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.932029][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.959362][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.985526][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.997967][ T5809] ipheth 5-1:0.196: Unable to find endpoints [ 258.024472][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.043112][ T5809] usb 5-1: USB disconnect, device number 21 [ 258.058311][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.076416][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.101101][ T8614] ldm_validate_partition_table(): Disk read failed. [ 258.108002][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.117016][ T8614] Buffer I/O error on dev loop6, logical block 0, async page read [ 258.125499][ T8614] Dev loop6: unable to read RDB block 0 [ 258.132262][ T8614] loop6: unable to read partition table [ 258.138078][ T8614] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 258.565162][ T8629] FAULT_INJECTION: forcing a failure. [ 258.565162][ T8629] name failslab, interval 1, probability 0, space 0, times 0 [ 258.577919][ T8629] CPU: 0 UID: 0 PID: 8629 Comm: syz.3.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.577944][ T8629] Tainted: [L]=SOFTLOCKUP [ 258.577950][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.577960][ T8629] Call Trace: [ 258.577966][ T8629] [ 258.577972][ T8629] dump_stack_lvl+0x100/0x190 [ 258.578005][ T8629] should_fail_ex.cold+0x5/0xa [ 258.578029][ T8629] should_failslab+0xc2/0x120 [ 258.578048][ T8629] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 258.578079][ T8629] ? skb_clone+0x190/0x400 [ 258.578109][ T8629] skb_clone+0x190/0x400 [ 258.578134][ T8629] netlink_deliver_tap+0xaed/0xcc0 [ 258.578166][ T8629] netlink_unicast+0x70c/0x870 [ 258.578195][ T8629] ? __pfx_netlink_unicast+0x10/0x10 [ 258.578220][ T8629] ? __alloc_skb+0x5b7/0x710 [ 258.578251][ T8629] netlink_ack+0x655/0xb80 [ 258.578285][ T8629] netlink_rcv_skb+0x333/0x420 [ 258.578301][ T8629] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 258.578323][ T8629] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.578351][ T8629] ? ns_capable+0xd2/0xf0 [ 258.578375][ T8629] nfnetlink_rcv+0x1b3/0x440 [ 258.578396][ T8629] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 258.578417][ T8629] ? netlink_deliver_tap+0x1ae/0xcc0 [ 258.578448][ T8629] netlink_unicast+0x5aa/0x870 [ 258.578477][ T8629] ? __pfx_netlink_unicast+0x10/0x10 [ 258.578512][ T8629] netlink_sendmsg+0x8b0/0xda0 [ 258.578540][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.578565][ T8629] ? __might_fault+0x50/0x140 [ 258.578599][ T8629] ____sys_sendmsg+0x9e1/0xb70 [ 258.578616][ T8629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.578642][ T8629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.578672][ T8629] ___sys_sendmsg+0x190/0x1e0 [ 258.578692][ T8629] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.578742][ T8629] __sys_sendmsg+0x170/0x220 [ 258.578767][ T8629] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.578807][ T8629] do_syscall_64+0x106/0xf80 [ 258.578834][ T8629] ? clear_bhb_loop+0x40/0x90 [ 258.578857][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.578875][ T8629] RIP: 0033:0x7fd9ee59c819 [ 258.578890][ T8629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.578907][ T8629] RSP: 002b:00007fd9ec7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.578925][ T8629] RAX: ffffffffffffffda RBX: 00007fd9ee815fa0 RCX: 00007fd9ee59c819 [ 258.578936][ T8629] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 258.578946][ T8629] RBP: 00007fd9ec7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.578956][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.578966][ T8629] R13: 00007fd9ee816038 R14: 00007fd9ee815fa0 R15: 00007fff40b2e6a8 [ 258.578990][ T8629] [ 259.815376][ T8638] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.777'. [ 259.826327][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 259.826339][ T29] audit: type=1400 audit(1775284524.564:552): avc: denied { create } for pid=8631 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.877244][ T29] audit: type=1400 audit(1775284524.564:553): avc: denied { getopt } for pid=8631 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.896725][ T29] audit: type=1400 audit(1775284524.564:554): avc: denied { map } for pid=8631 comm="syz.3.778" path="socket:[19787]" dev="sockfs" ino=19787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.920112][ T29] audit: type=1400 audit(1775284524.574:555): avc: denied { read } for pid=8631 comm="syz.3.778" path="socket:[19787]" dev="sockfs" ino=19787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.980884][ T8638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.777'. [ 260.267282][ T29] audit: type=1400 audit(1775284525.204:556): avc: denied { read } for pid=8630 comm="syz.2.777" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 260.290451][ T29] audit: type=1400 audit(1775284525.214:557): avc: denied { open } for pid=8630 comm="syz.2.777" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 260.328161][ T29] audit: type=1400 audit(1775284525.294:558): avc: denied { ioctl } for pid=8630 comm="syz.2.777" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 260.930652][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 261.016873][ T29] audit: type=1400 audit(1775284526.204:559): avc: denied { read write } for pid=8651 comm="syz.1.784" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 261.048992][ T8655] tc_dump_action: action bad kind [ 261.107207][ T29] audit: type=1400 audit(1775284526.204:560): avc: denied { open } for pid=8651 comm="syz.1.784" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 261.147603][ T29] audit: type=1400 audit(1775284526.204:561): avc: denied { ioctl } for pid=8651 comm="syz.1.784" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 261.199341][ T5870] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 261.253435][ T5870] usb 1-1: config 0 has no interface number 0 [ 261.323236][ T5870] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 261.390318][ T5870] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 261.461306][ T5870] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 261.478877][ T5870] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 261.492134][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 261.492156][ T5870] usb 1-1: Product: syz [ 261.492171][ T5870] usb 1-1: Manufacturer: syz [ 261.492185][ T5870] usb 1-1: SerialNumber: syz [ 261.524043][ T5870] usb 1-1: config 0 descriptor?? [ 261.813335][ T8669] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 261.910658][ T5870] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 262.101988][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 262.144895][ T5870] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 262.152908][ T5870] usb 3-1: config 0 has no interface number 0 [ 262.161219][ T5870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.219466][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.246363][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 262.266157][ T5870] usb 3-1: Product: syz [ 262.276913][ T5870] usb 3-1: config 0 descriptor?? [ 262.293669][ T5870] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 262.510618][ T5870] usb 3-1: USB disconnect, device number 24 [ 262.580643][ T5809] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 262.731954][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.747463][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 262.778532][ T5809] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 262.811593][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.860070][ T5809] usb 2-1: config 0 descriptor?? [ 263.089089][ T5809] ath6kl: Failed to submit usb control message: -71 [ 263.128993][ T5809] ath6kl: unable to send the bmi data to the device: -71 [ 263.158586][ T5809] ath6kl: Unable to send get target info: -71 [ 263.179930][ T5809] ath6kl: Failed to init ath6kl core: -71 [ 263.188393][ T5809] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 263.290037][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 263.468172][ T5863] usb 1-1: USB disconnect, device number 15 [ 263.532746][ T5809] usb 2-1: USB disconnect, device number 19 [ 263.994655][ T8706] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 263.994655][ T8706] program syz.3.800 not setting count and/or reply_len properly [ 264.390638][ T5863] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 264.552305][ T5863] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 264.640681][ T5863] usb 1-1: config 0 has no interface number 0 [ 264.881006][ T5863] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 264.950904][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.967695][ T5863] usb 1-1: Product: syz [ 264.972403][ T5863] usb 1-1: Manufacturer: syz [ 264.987711][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 264.987724][ T29] audit: type=1400 audit(1775284530.174:578): avc: denied { ioctl } for pid=8711 comm="syz.3.802" path="/dev/sg0" dev="devtmpfs" ino=804 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 264.990618][ T5863] usb 1-1: SerialNumber: syz [ 265.290677][ T5863] usb 1-1: config 0 descriptor?? [ 265.304823][ T8715] xt_CT: No such helper "snmp_trap" [ 265.387389][ T29] audit: type=1400 audit(1775284530.574:579): avc: denied { bind } for pid=8718 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.414656][ T29] audit: type=1400 audit(1775284530.574:580): avc: denied { setopt } for pid=8718 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.544124][ T29] audit: type=1400 audit(1775284530.574:581): avc: denied { accept } for pid=8718 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.566907][ T29] audit: type=1400 audit(1775284530.574:582): avc: denied { write } for pid=8718 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.604953][ T29] audit: type=1400 audit(1775284530.624:583): avc: denied { read } for pid=8718 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.960709][ T5877] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 266.046992][ T5863] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 266.094081][ T5863] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 266.106774][ T29] audit: type=1400 audit(1775284531.284:584): avc: denied { create } for pid=8728 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.135658][ T5863] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 266.157695][ T5863] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 266.167180][ T5877] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 266.180633][ T5877] usb 3-1: config 0 has no interface number 0 [ 266.191487][ T5863] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 266.204688][ T5877] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 266.213640][ T29] audit: type=1400 audit(1775284531.344:585): avc: denied { bind } for pid=8728 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.299168][ T5863] usb 1-1: USB disconnect, device number 16 [ 266.310890][ T5877] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 266.348875][ T5863] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 266.349439][ T5863] keyspan 1-1:0.133: device disconnected [ 266.368699][ T8737] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 266.385496][ T5877] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 266.388646][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 266.388671][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 266.388689][ T5877] usb 3-1: Product: syz [ 266.388703][ T5877] usb 3-1: Manufacturer: syz [ 266.388716][ T5877] usb 3-1: SerialNumber: syz [ 266.390427][ T29] audit: type=1400 audit(1775284531.574:586): avc: denied { mount } for pid=8736 comm="syz.1.810" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 266.432745][ T5877] usb 3-1: config 0 descriptor?? [ 266.538161][ T29] audit: type=1400 audit(1775284531.724:587): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 266.619493][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.813'. [ 266.713967][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 267.969158][ T8755] 9p: Could not find request transport: fdÓãfdnæ¤Ug?’\`ÄŸÈoj0x00000000000000bb [ 268.687051][ T5911] usb 3-1: USB disconnect, device number 25 [ 268.880216][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 268.946132][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.966883][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.176101][ T8778] fuse: Unknown parameter '0x0000000000000005' [ 271.641755][ T8810] netlink: 'syz.4.828': attribute type 12 has an invalid length. [ 271.662307][ T8810] SET target dimension over the limit! [ 272.040452][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 272.040489][ T29] audit: type=1400 audit(1775284537.224:609): avc: denied { read } for pid=8821 comm="syz.0.830" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 272.323430][ T29] audit: type=1400 audit(1775284537.324:610): avc: denied { open } for pid=8821 comm="syz.0.830" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 272.358929][ T29] audit: type=1400 audit(1775284537.544:611): avc: denied { ioctl } for pid=8821 comm="syz.0.830" path="socket:[20530]" dev="sockfs" ino=20530 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.480676][ T29] audit: type=1400 audit(1775284537.634:612): avc: denied { add_name } for pid=8789 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.598991][ T29] audit: type=1400 audit(1775284537.634:613): avc: denied { create } for pid=8789 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.701827][ T29] audit: type=1400 audit(1775284537.634:614): avc: denied { write } for pid=8789 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=5852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.730643][ T8833] xt_hashlimit: size too large, truncated to 1048576 [ 272.786911][ T8839] binder: 8838:8839 ioctl c0306201 200000000080 returned -14 [ 272.802100][ T29] audit: type=1400 audit(1775284537.634:615): avc: denied { append } for pid=8789 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=5852 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.858030][ T8839] binder: BINDER_SET_CONTEXT_MGR already set [ 272.881623][ T8839] binder: 8838:8839 ioctl 4018620d 200000000040 returned -16 [ 272.908579][ T29] audit: type=1400 audit(1775284537.814:616): avc: denied { read write } for pid=8831 comm="syz.3.834" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 272.941803][ T8839] binder: 8838:8839 ioctl c0306201 0 returned -14 [ 273.139645][ T29] audit: type=1400 audit(1775284537.814:617): avc: denied { open } for pid=8831 comm="syz.3.834" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 273.248354][ T29] audit: type=1400 audit(1775284537.814:618): avc: denied { ioctl } for pid=8831 comm="syz.3.834" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 274.283119][ T8869] siw: device registration error -23 [ 274.295108][ T8869] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 276.060621][ T5870] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 276.262728][ T8859] No such timeout policy "syz1" [ 276.268625][ T8859] No control pipe specified [ 276.273868][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 276.461031][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 276.486966][ T5870] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 276.507478][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.531854][ T5870] usb 5-1: config 0 descriptor?? [ 276.687381][ T8891] x_tables: duplicate underflow at hook 1 [ 276.721373][ T791] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 276.768264][ T8896] binder: 8895:8896 ioctl c0306201 200000000080 returned -14 [ 276.782087][ T8896] binder: BINDER_SET_CONTEXT_MGR already set [ 276.788069][ T8896] binder: 8895:8896 ioctl 4018620d 200000000040 returned -16 [ 276.812899][ T8896] binder: 8895:8896 ioctl c0306201 0 returned -14 [ 276.872861][ T8898] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 276.898624][ T5870] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 276.931788][ T791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.941782][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.957891][ T791] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.979703][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.005562][ T791] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 277.010852][ T5870] usb 5-1: media controller created [ 277.030322][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.035237][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.362545][ T791] usb 4-1: config 0 descriptor?? [ 277.402725][ T791] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 277.419259][ T791] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 277.433263][ T5870] az6027: usb out operation failed. (-71) [ 277.471222][ T5870] az6027: usb out operation failed. (-71) [ 277.476983][ T5870] stb0899_attach: Driver disabled by Kconfig [ 277.564166][ T5870] az6027: no front-end attached [ 277.564166][ T5870] [ 277.592154][ T5870] az6027: usb out operation failed. (-71) [ 277.608086][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 277.687687][ T8916] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 277.687687][ T8916] program syz.2.855 not setting count and/or reply_len properly [ 278.035681][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 278.056892][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 278.056905][ T29] audit: type=1400 audit(1775284543.244:629): avc: denied { read } for pid=5165 comm="acpid" name="event4" dev="devtmpfs" ino=3175 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.086942][ T5870] dvb-usb: schedule remote query interval to 400 msecs. [ 278.093592][ T29] audit: type=1400 audit(1775284543.244:630): avc: denied { open } for pid=5165 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3175 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.141667][ T8918] vxcan1 speed is unknown, defaulting to 1000 [ 278.170621][ T5870] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.211945][ T5870] usb 5-1: USB disconnect, device number 22 [ 278.220484][ T8919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.854'. [ 278.313414][ T29] audit: type=1400 audit(1775284543.244:631): avc: denied { ioctl } for pid=5165 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3175 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.396567][ T29] audit: type=1400 audit(1775284543.314:632): avc: denied { name_bind } for pid=8879 comm="syz.3.843" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 278.506328][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 278.526393][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 278.650754][ T29] audit: type=1400 audit(1775284543.314:633): avc: denied { node_bind } for pid=8879 comm="syz.3.843" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 278.652797][ T5870] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 278.748914][ T8918] lo speed is unknown, defaulting to 1000 [ 278.755445][ T8918] virt_wifi0 speed is unknown, defaulting to 1000 [ 278.790668][ T29] audit: type=1400 audit(1775284543.324:634): avc: denied { write } for pid=8879 comm="syz.3.843" path="socket:[21568]" dev="sockfs" ino=21568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.854747][ T29] audit: type=1400 audit(1775284543.404:635): avc: denied { create } for pid=8913 comm="syz.1.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 278.936321][ T8932] binder: 8931:8932 ioctl c0306201 200000000080 returned -14 [ 279.116013][ T8932] binder: 8931:8932 ioctl c0306201 0 returned -14 [ 279.272840][ T5870] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.290200][ T42] usb 4-1: USB disconnect, device number 24 [ 279.710753][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 279.719002][ T5870] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 279.734720][ T5870] usb 5-1: config 0 has no interface number 0 [ 279.741964][ T5870] usb 5-1: config 0 interface 184 has no altsetting 0 [ 279.784034][ T8950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.862'. [ 279.806741][ T8950] netlink: 'syz.0.862': attribute type 10 has an invalid length. [ 279.824195][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.837495][ T8950] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 279.898345][ T8950] netlink: 'syz.0.862': attribute type 10 has an invalid length. [ 279.906147][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 279.915082][ T8950] batadv0: entered promiscuous mode [ 279.920303][ T8950] batadv0: entered allmulticast mode [ 279.974863][ T8950] bond0: (slave batadv0): Releasing backup interface [ 280.289913][ T8950] bridge0: port 3(batadv0) entered blocking state [ 280.296395][ T8950] bridge0: port 3(batadv0) entered disabled state [ 280.312608][ T5870] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 280.336963][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.350649][ T5870] usb 5-1: Product: syz [ 280.432040][ T5870] usb 5-1: Manufacturer: syz [ 280.438126][ T5870] usb 5-1: SerialNumber: syz [ 280.451098][ T5870] usb 5-1: config 0 descriptor?? [ 280.770644][ T42] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 280.779538][ T29] audit: type=1400 audit(1775284545.964:636): avc: denied { bind } for pid=8958 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 280.806350][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 280.815761][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 280.938301][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 280.948301][ T42] usb 4-1: too many configurations: 63, using maximum allowed: 8 [ 280.967656][ T42] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 280.976615][ T42] usb 4-1: can't read configurations, error -61 [ 281.687149][ T5877] IPVS: starting estimator thread 0... [ 281.810483][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 281.832791][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 281.840488][ T29] audit: type=1400 audit(1775284546.604:637): avc: denied { setopt } for pid=8958 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.870609][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 282.046712][ T8966] IPVS: using max 39 ests per chain, 93600 per kthread [ 282.120630][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 282.126265][ T42] usb 4-1: too many configurations: 63, using maximum allowed: 8 [ 282.135878][ T42] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 282.144186][ T42] usb 4-1: can't read configurations, error -61 [ 282.151613][ T42] usb usb4-port1: attempt power cycle [ 282.643841][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 282.655129][ T42] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 283.117066][ T8973] sp0: Synchronizing with TNC [ 283.119227][ T8975] syz_tun: left promiscuous mode [ 283.133809][ T8975] batadv_slave_0: left promiscuous mode [ 283.143635][ T8975] bond1: left promiscuous mode [ 283.148380][ T8975] bond2: left promiscuous mode [ 283.192543][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 283.218106][ T791] lo speed is unknown, defaulting to 1000 [ 283.255233][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 283.338552][ T5870] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 283.380867][ T42] usb 4-1: device descriptor read/8, error -71 [ 283.423842][ T8983] binder: 8982:8983 ioctl c0306201 200000000080 returned -14 [ 283.452399][ T8983] binder: BINDER_SET_CONTEXT_MGR already set [ 283.468596][ T8983] binder: 8982:8983 ioctl 4018620d 200000000040 returned -16 [ 283.855918][ T791] usb 5-1: USB disconnect, device number 23 [ 284.031068][ T29] audit: type=1400 audit(1775284549.214:638): avc: denied { write } for pid=8986 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.229051][ T29] audit: type=1400 audit(1775284550.414:639): avc: denied { write } for pid=9016 comm="syz.4.883" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 285.277814][ T29] audit: type=1400 audit(1775284550.414:640): avc: denied { accept } for pid=9016 comm="syz.4.883" lport=37853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 285.310649][ T5809] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 285.450643][ T791] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 285.523409][ T5809] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 285.534881][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.018890][ T1870] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 286.021260][ T5809] usb 4-1: config 0 descriptor?? [ 286.155930][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.175443][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.191669][ T791] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 286.193986][ T1870] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 286.202130][ T791] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 286.223716][ T1870] usb 3-1: config 0 has no interface number 0 [ 286.232666][ T1870] usb 3-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 286.244989][ T791] usb 1-1: Manufacturer: syz [ 286.367738][ T9030] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 286.432010][ T1870] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 286.443513][ T1870] usb 3-1: config 0 interface 137 has no altsetting 0 [ 286.584109][ T791] usb 1-1: config 0 descriptor?? [ 286.645427][ T1870] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 286.654695][ T1870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.686395][ T9027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.700687][ T1870] usb 3-1: Product: syz [ 286.702498][ T9027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.704964][ T1870] usb 3-1: Manufacturer: syz [ 286.727216][ T5809] usb 4-1: Cannot set autoneg [ 286.732355][ T5809] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 286.774126][ T1870] usb 3-1: SerialNumber: syz [ 286.778808][ T9036] xt_hashlimit: size too large, truncated to 1048576 [ 286.780941][ T5809] usb 4-1: USB disconnect, device number 29 [ 286.800913][ T9036] xt_hashlimit: max too large, truncated to 1048576 [ 286.821489][ T1870] usb 3-1: config 0 descriptor?? [ 286.831258][ T9038] binder: 9037:9038 ioctl c0306201 200000000080 returned -14 [ 286.864950][ T9022] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 286.942629][ T1870] xbox_remote_probe: Unexpected endpoint_in [ 287.392659][ T9045] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 287.701088][ T5809] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 287.751625][ T791] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 287.751654][ T791] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 287.751664][ T791] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 287.751687][ T791] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 287.751729][ T791] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 287.755448][ T791] usb 1-1: USB disconnect, device number 17 [ 287.932339][ T5809] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 287.932365][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.932384][ T5809] usb 2-1: Product: syz [ 287.932397][ T5809] usb 2-1: Manufacturer: syz [ 287.932411][ T5809] usb 2-1: SerialNumber: syz [ 287.934407][ T5809] usb 2-1: config 0 descriptor?? [ 288.301441][ T1870] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 288.448265][ T5809] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 288.450133][ T5809] usb 2-1: USB disconnect, device number 20 [ 288.452356][ T1870] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 288.452379][ T1870] usb 5-1: config 0 has no interface number 0 [ 288.452412][ T1870] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 288.452438][ T1870] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 288.452462][ T1870] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 288.454849][ T1870] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 288.454874][ T1870] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 288.454894][ T1870] usb 5-1: Product: syz [ 288.454909][ T1870] usb 5-1: Manufacturer: syz [ 288.454923][ T1870] usb 5-1: SerialNumber: syz [ 288.471823][ T1870] usb 5-1: config 0 descriptor?? [ 288.567958][ T1870] usb 3-1: USB disconnect, device number 26 [ 288.672003][ T9069] binder: 9068:9069 ioctl c0306201 200000000080 returned -14 [ 288.700868][ T9070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.897'. [ 288.710090][ T9070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.897'. [ 288.775370][ T9070] netlink: 'syz.3.897': attribute type 7 has an invalid length. [ 288.859309][ T9070] netlink: 'syz.3.897': attribute type 8 has an invalid length. [ 288.867847][ T9070] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.897'. [ 289.092387][ T9079] ubi: mtd0 is already attached to ubi31 [ 290.073279][ T9092] netlink: 'syz.2.904': attribute type 8 has an invalid length. [ 290.132365][ T1870] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 290.219378][ T9094] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 290.243488][ T9094] syz_tun: entered promiscuous mode [ 290.258305][ T9094] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 290.298654][ T1870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.317645][ T1870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.361668][ T1870] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 290.390636][ T1870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.176708][ T5809] usb 5-1: USB disconnect, device number 24 [ 291.244400][ T1870] usb 4-1: Product: syz [ 291.261124][ T1870] usb 4-1: Manufacturer: syz [ 291.270972][ T1870] usb 4-1: SerialNumber: syz [ 291.283818][ T1870] usb 4-1: config 0 descriptor?? [ 291.298931][ T1870] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 291.316875][ T1870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.342359][ T1870] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 291.367732][ T1870] usb 4-1: media controller created [ 291.398831][ T1870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.417376][ T9105] binder: 9104:9105 ioctl c0306201 200000000080 returned -14 [ 291.470749][ T42] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 291.515715][ T1870] DVB: Unable to find symbol tda10046_attach() [ 291.536854][ T1870] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 291.555886][ T1870] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 291.576296][ T1870] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 291.610271][ T1870] usb 4-1: USB disconnect, device number 30 [ 291.633104][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 291.679753][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 291.699759][ T42] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 291.731111][ T42] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 291.751903][ T42] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 291.788330][ T42] usb 3-1: string descriptor 0 read error: -22 [ 291.795527][ T42] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 291.828373][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.871307][ T42] usb 3-1: low speed audio streaming not supported [ 291.889231][ T42] usb 3-1: low speed audio streaming not supported [ 291.911988][ T42] usb 3-1: unit 3 not found! [ 292.119052][ T42] usb 3-1: USB disconnect, device number 27 [ 292.341187][ T1870] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 292.535478][ T1870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 292.554618][ T1870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 293.422952][ T9127] netlink: 76 bytes leftover after parsing attributes in process `syz.3.915'. [ 293.583295][ T1870] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 293.594764][ T1870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.613017][ T1870] usb 2-1: Product: syz [ 293.619702][ T1870] usb 2-1: Manufacturer: syz [ 293.638048][ T1870] usb 2-1: SerialNumber: syz [ 293.723489][ T1870] usb 2-1: config 0 descriptor?? [ 293.761226][ T1870] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 294.817344][ T9143] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 294.817344][ T9143] program syz.0.920 not setting count and/or reply_len properly [ 295.039498][ T9148] random: crng reseeded on system resumption [ 295.417465][ T1870] usb 2-1: USB disconnect, device number 21 [ 295.430333][ T29] audit: type=1400 audit(1775284560.224:641): avc: denied { write } for pid=9111 comm="syz.1.912" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.491291][ T29] audit: type=1400 audit(1775284560.224:642): avc: denied { open } for pid=9111 comm="syz.1.912" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.536141][ T9150] binder: 9149:9150 ioctl c0306201 200000000080 returned -14 [ 296.099583][ T29] audit: type=1400 audit(1775284561.284:643): avc: denied { write } for pid=9166 comm="syz.3.927" name="ip_mr_cache" dev="proc" ino=4026533038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 296.550786][ T9173] erspan0: entered promiscuous mode [ 297.004975][ T9184] ubi: mtd0 is already attached to ubi31 [ 297.400308][ T9186] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 297.721802][ T1870] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 297.940614][ T1870] usb 3-1: Using ep0 maxpacket: 8 [ 297.952281][ T1870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 297.972919][ T29] audit: type=1400 audit(1775284563.154:644): avc: denied { bind } for pid=9201 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.994976][ T1870] usb 3-1: config 5 has an invalid interface number: 18 but max is 0 [ 298.003504][ T1870] usb 3-1: config 5 has no interface number 0 [ 298.010810][ T29] audit: type=1400 audit(1775284563.154:645): avc: denied { setopt } for pid=9201 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.033325][ T1870] usb 3-1: config 5 interface 18 has no altsetting 0 [ 298.049191][ T1870] usb 3-1: New USB device found, idVendor=157e, idProduct=3205, bcdDevice=c9.b4 [ 298.059781][ T1870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.096751][ T1870] usb 3-1: Product: syz [ 298.110039][ T29] audit: type=1400 audit(1775284563.154:646): avc: denied { read write } for pid=9201 comm="syz.1.937" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 298.146259][ T1870] usb 3-1: Manufacturer: syz [ 298.169090][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.171241][ T1870] usb 3-1: SerialNumber: syz [ 298.206470][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.215861][ T9205] xt_CT: No such helper "snmp_trap" [ 298.221523][ T29] audit: type=1400 audit(1775284563.154:647): avc: denied { open } for pid=9201 comm="syz.1.937" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 298.285190][ T29] audit: type=1400 audit(1775284563.294:648): avc: denied { open } for pid=9207 comm="syz.1.938" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 298.326176][ T29] audit: type=1400 audit(1775284563.334:649): avc: denied { getopt } for pid=9207 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.410670][ T5809] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.414266][ T29] audit: type=1400 audit(1775284563.354:650): avc: denied { append } for pid=9207 comm="syz.1.938" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 298.488517][ T1870] usb 3-1: Could not find all expected endpoints [ 298.511505][ T1870] usb 3-1: USB disconnect, device number 28 [ 298.571313][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 298.584824][ T5809] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.595566][ T5809] usb 2-1: config 179 has no interface number 0 [ 298.650645][ T5870] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 298.658152][ T5809] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 298.691394][ T5809] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 298.726702][ T5809] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.758277][ T5809] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 298.794003][ T5809] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 298.824127][ T5870] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 298.833524][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.837564][ T5809] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 298.897466][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.927725][ T5870] usb 5-1: Product: syz [ 298.945656][ T5870] usb 5-1: Manufacturer: syz [ 298.945734][ T9217] xt_hashlimit: size too large, truncated to 1048576 [ 298.952004][ T5870] usb 5-1: SerialNumber: syz [ 298.967435][ T9209] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 299.032956][ T9217] xt_hashlimit: max too large, truncated to 1048576 [ 299.415748][ T9208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.444024][ T9208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.452758][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 299.530801][ T9223] SET target dimension over the limit! [ 299.581835][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 300.158439][ T9233] netlink: 88 bytes leftover after parsing attributes in process `syz.2.944'. [ 300.167468][ T9233] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'. [ 301.030033][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 301.246341][ T5809] usb 2-1: USB disconnect, device number 22 [ 301.252337][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 301.252377][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 301.688654][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 302.414092][ T9215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.434499][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 302.434511][ T29] audit: type=1400 audit(1775284567.624:654): avc: denied { connect } for pid=9254 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.525814][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 302.567992][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 302.604052][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 302.634279][ T5870] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 302.651628][ T9258] vxcan1 speed is unknown, defaulting to 1000 [ 302.762453][ T29] audit: type=1400 audit(1775284567.624:655): avc: denied { name_connect } for pid=9254 comm="syz.2.951" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 302.791626][ T5870] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 302.957329][ T5870] usb 5-1: USB disconnect, device number 25 [ 304.430632][ T5870] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 304.593702][ T5870] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 304.617891][ T5870] usb 5-1: config 0 has no interface number 0 [ 304.637588][ T5870] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 304.673556][ T5870] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 304.704829][ T5870] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 304.739073][ T5870] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 304.768222][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 304.793396][ T5870] usb 5-1: Product: syz [ 304.807677][ T5870] usb 5-1: Manufacturer: syz [ 304.823182][ T5870] usb 5-1: SerialNumber: syz [ 304.843486][ T5870] usb 5-1: config 0 descriptor?? [ 304.985141][ T9258] lo speed is unknown, defaulting to 1000 [ 305.027273][ T9258] virt_wifi0 speed is unknown, defaulting to 1000 [ 305.780859][ T42] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 305.950806][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 306.161084][ T1870] usb 5-1: USB disconnect, device number 26 [ 306.179278][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.194991][ T42] usb 2-1: config 2 has an invalid interface number: 143 but max is 0 [ 306.230184][ T42] usb 2-1: config 2 has no interface number 0 [ 306.301992][ T42] usb 2-1: config 2 interface 143 has no altsetting 0 [ 306.320984][ T42] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=70.2c [ 306.340637][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.356035][ T42] usb 2-1: Product: syz [ 306.370313][ T42] usb 2-1: Manufacturer: syz [ 306.392972][ T42] usb 2-1: SerialNumber: syz [ 306.654561][ T42] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 306.670308][ T42] usb 2-1: selecting invalid altsetting 1 [ 306.685914][ T29] audit: type=1400 audit(1775284571.874:656): avc: denied { kexec_image_load } for pid=9299 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 306.735815][ T791] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 306.770925][ T9304] vxcan1 speed is unknown, defaulting to 1000 [ 306.819500][ T9305] fuse: Bad value for 'fd' [ 307.194573][ T9304] lo speed is unknown, defaulting to 1000 [ 307.209735][ T9304] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.216462][ T42] gspca_stk014: reg_r err -71 [ 307.226424][ T42] stk014 2-1:2.143: probe with driver stk014 failed with error -71 [ 307.269526][ T42] usb 2-1: USB disconnect, device number 23 [ 307.372084][ T791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 307.383195][ T791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 307.406701][ T791] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 307.481554][ T791] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 307.499437][ T791] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 307.518640][ T791] usb 4-1: string descriptor 0 read error: -22 [ 307.525166][ T791] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 307.717405][ T9319] sg_write: data in/out 26076/10 bytes for SCSI command 0x0-- guessing data in; [ 307.717405][ T9319] program syz.2.966 not setting count and/or reply_len properly [ 308.042328][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.067128][ T29] audit: type=1400 audit(1775284573.254:657): avc: denied { shutdown } for pid=9314 comm="syz.1.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.100330][ T791] usb 4-1: low speed audio streaming not supported [ 308.106931][ T791] usb 4-1: low speed audio streaming not supported [ 308.124211][ T791] usb 4-1: unit 3 not found! [ 309.036761][ T791] usb 4-1: USB disconnect, device number 31 [ 309.400655][ T791] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 309.572376][ T791] usb 5-1: config 0 has an invalid interface number: 137 but max is 0 [ 309.662198][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.701454][ T791] usb 5-1: config 0 has no interface number 0 [ 309.713798][ T791] usb 5-1: too many endpoints for config 0 interface 137 altsetting 255: 255, using maximum allowed: 30 [ 309.742303][ T791] usb 5-1: config 0 interface 137 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 309.764539][ T791] usb 5-1: config 0 interface 137 has no altsetting 0 [ 309.780267][ T791] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 309.792511][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.808042][ T791] usb 5-1: Product: syz [ 309.816255][ T791] usb 5-1: Manufacturer: syz [ 309.825009][ T791] usb 5-1: SerialNumber: syz [ 309.843513][ T791] usb 5-1: config 0 descriptor?? [ 309.901309][ T5911] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 310.052374][ T5911] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 310.072627][ T5911] usb 3-1: config 0 has no interface number 0 [ 310.085452][ T5911] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 310.098251][ T791] usb 5-1: USB disconnect, device number 27 [ 310.169249][ T5911] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 310.196532][ T5911] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 310.221254][ T5911] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 310.230859][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 310.247068][ T5911] usb 3-1: Product: syz [ 310.260385][ T5911] usb 3-1: Manufacturer: syz [ 310.285244][ T5911] usb 3-1: SerialNumber: syz [ 310.303642][ T5911] usb 3-1: config 0 descriptor?? [ 310.729334][ T9342] binder: 9341:9342 ioctl c0306201 200000000080 returned -14 [ 310.786040][ T9344] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 310.857727][ T29] audit: type=1400 audit(1775284576.044:658): avc: denied { ioctl } for pid=9343 comm="syz.4.975" path="socket:[22453]" dev="sockfs" ino=22453 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.054211][ T29] audit: type=1400 audit(1775284576.244:659): avc: denied { create } for pid=9353 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.060933][ T9354] smc: removing ib device syz2 [ 311.537420][ T9354] ------------[ cut here ]------------ [ 311.542891][ T9354] !xa_empty(&pool->xa) [ 311.542901][ T9354] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.3.978/9354 [ 311.558145][ T9354] Modules linked in: [ 311.562133][ T9354] CPU: 1 UID: 0 PID: 9354 Comm: syz.3.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.573125][ T9354] Tainted: [L]=SOFTLOCKUP [ 311.577426][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 311.587737][ T9354] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 311.593235][ T9354] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 f7 4e f9 5b c3 cc cc cc cc e8 eb f7 4e f9 90 <0f> 0b 90 e8 e2 f7 4e f9 5b c3 cc cc cc cc e8 17 88 bb f9 eb d0 0f [ 311.612835][ T9354] RSP: 0018:ffffc9000d9771a0 EFLAGS: 00010246 [ 311.618888][ T9354] RAX: 0000000000080000 RBX: ffff888036ead3b8 RCX: ffffc9000e082000 [ 311.626850][ T9354] RDX: 0000000000080000 RSI: ffffffff88ba0535 RDI: ffff888036ead438 [ 311.634813][ T9354] RBP: ffffffff88b867c0 R08: 0000000000000005 R09: 0000000000000001 [ 311.642786][ T9354] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888036eac6b0 [ 311.650761][ T9354] R13: ffff888036eabfe0 R14: ffff888036eabfe0 R15: ffff888036ead118 [ 311.658726][ T9354] FS: 00007fd9ec7f66c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 311.667641][ T9354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.674424][ T9354] CR2: 0000001b2fd0cff8 CR3: 000000007c113000 CR4: 00000000003526f0 [ 311.682533][ T9354] Call Trace: [ 311.685790][ T9354] [ 311.688697][ T9354] rxe_dealloc+0x25/0xc0 [ 311.692943][ T9354] ib_dealloc_device+0x49/0x230 [ 311.697789][ T9354] __ib_unregister_device+0x396/0x480 [ 311.703170][ T9354] ib_unregister_device_and_put+0x5a/0x80 [ 311.708871][ T9354] nldev_dellink+0x226/0x320 [ 311.713449][ T9354] ? __pfx_nldev_dellink+0x10/0x10 [ 311.718567][ T9354] ? rcu_is_watching+0x12/0xc0 [ 311.723325][ T9354] ? cap_capable+0x107/0x460 [ 311.727895][ T9354] ? bpf_lsm_capable+0x9/0x10 [ 311.732571][ T9354] ? security_capable+0x80/0x260 [ 311.737485][ T9354] ? ns_capable+0xd2/0xf0 [ 311.741965][ T9354] ? __pfx_nldev_dellink+0x10/0x10 [ 311.747054][ T9354] rdma_nl_rcv_msg+0x38a/0x6e0 [ 311.751816][ T9354] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 311.757080][ T9354] ? __lock_acquire+0x4a5/0x2630 [ 311.762021][ T9354] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 311.768421][ T9354] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 311.775584][ T9354] ? netlink_deliver_tap+0x1ae/0xcc0 [ 311.781030][ T9354] netlink_unicast+0x5aa/0x870 [ 311.785784][ T9354] ? __pfx_netlink_unicast+0x10/0x10 [ 311.791071][ T9354] netlink_sendmsg+0x8b0/0xda0 [ 311.795821][ T9354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.801098][ T9354] ? __might_fault+0x50/0x140 [ 311.805776][ T9354] ____sys_sendmsg+0x9e1/0xb70 [ 311.810527][ T9354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.815823][ T9354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.821106][ T9354] ? __pfx_futex_wake_mark+0x10/0x10 [ 311.826378][ T9354] ___sys_sendmsg+0x190/0x1e0 [ 311.831061][ T9354] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.836256][ T9354] __sys_sendmsg+0x170/0x220 [ 311.840847][ T9354] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.845940][ T9354] ? __pfx___seccomp_filter+0x10/0x10 [ 311.851308][ T9354] do_syscall_64+0x106/0xf80 [ 311.855879][ T9354] ? clear_bhb_loop+0x40/0x90 [ 311.860534][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.866433][ T9354] RIP: 0033:0x7fd9ee59c819 [ 311.870837][ T9354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.890768][ T9354] RSP: 002b:00007fd9ec7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.899174][ T9354] RAX: ffffffffffffffda RBX: 00007fd9ee815fa0 RCX: 00007fd9ee59c819 [ 311.907299][ T9354] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000002 [ 311.915262][ T9354] RBP: 00007fd9ee632c91 R08: 0000000000000000 R09: 0000000000000000 [ 311.923218][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.931183][ T9354] R13: 00007fd9ee816038 R14: 00007fd9ee815fa0 R15: 00007fff40b2e6a8 [ 311.939134][ T9354] [ 311.942158][ T9354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.949413][ T9354] CPU: 1 UID: 0 PID: 9354 Comm: syz.3.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.960153][ T9354] Tainted: [L]=SOFTLOCKUP [ 311.964448][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 311.974479][ T9354] Call Trace: [ 311.977735][ T9354] [ 311.980644][ T9354] dump_stack_lvl+0x100/0x190 [ 311.985304][ T9354] vpanic+0x552/0x970 [ 311.989261][ T9354] ? __pfx_vpanic+0x10/0x10 [ 311.993741][ T9354] panic+0xd1/0xe0 [ 311.997447][ T9354] ? __pfx_panic+0x10/0x10 [ 312.001847][ T9354] check_panic_on_warn.cold+0x19/0x34 [ 312.007193][ T9354] ? rxe_pool_cleanup+0x46/0x60 [ 312.012019][ T9354] __warn.cold+0x191/0x348 [ 312.016411][ T9354] __report_bug+0x296/0x3d0 [ 312.020895][ T9354] ? rxe_pool_cleanup+0x46/0x60 [ 312.025733][ T9354] ? __pfx___report_bug+0x10/0x10 [ 312.030769][ T9354] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 312.036578][ T9354] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 312.042391][ T9354] ? __flush_workqueue+0x426/0x1200 [ 312.047568][ T9354] ? __mutex_unlock_slowpath+0x15c/0x790 [ 312.053176][ T9354] ? rxe_pool_cleanup+0x46/0x60 [ 312.058005][ T9354] report_bug+0xb2/0x220 [ 312.062229][ T9354] ? rxe_pool_cleanup+0x46/0x60 [ 312.067071][ T9354] handle_bug+0x16a/0x2a0 [ 312.071377][ T9354] exc_invalid_op+0x17/0x50 [ 312.075856][ T9354] asm_exc_invalid_op+0x1a/0x20 [ 312.080685][ T9354] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 312.086147][ T9354] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 f6 f7 4e f9 5b c3 cc cc cc cc e8 eb f7 4e f9 90 <0f> 0b 90 e8 e2 f7 4e f9 5b c3 cc cc cc cc e8 17 88 bb f9 eb d0 0f [ 312.105729][ T9354] RSP: 0018:ffffc9000d9771a0 EFLAGS: 00010246 [ 312.111775][ T9354] RAX: 0000000000080000 RBX: ffff888036ead3b8 RCX: ffffc9000e082000 [ 312.119725][ T9354] RDX: 0000000000080000 RSI: ffffffff88ba0535 RDI: ffff888036ead438 [ 312.127671][ T9354] RBP: ffffffff88b867c0 R08: 0000000000000005 R09: 0000000000000001 [ 312.135615][ T9354] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888036eac6b0 [ 312.143564][ T9354] R13: ffff888036eabfe0 R14: ffff888036eabfe0 R15: ffff888036ead118 [ 312.151523][ T9354] ? __pfx_rxe_dealloc+0x10/0x10 [ 312.156445][ T9354] ? rxe_pool_cleanup+0x45/0x60 [ 312.161284][ T9354] rxe_dealloc+0x25/0xc0 [ 312.165531][ T9354] ib_dealloc_device+0x49/0x230 [ 312.170361][ T9354] __ib_unregister_device+0x396/0x480 [ 312.175727][ T9354] ib_unregister_device_and_put+0x5a/0x80 [ 312.181434][ T9354] nldev_dellink+0x226/0x320 [ 312.186031][ T9354] ? __pfx_nldev_dellink+0x10/0x10 [ 312.191150][ T9354] ? rcu_is_watching+0x12/0xc0 [ 312.195891][ T9354] ? cap_capable+0x107/0x460 [ 312.200463][ T9354] ? bpf_lsm_capable+0x9/0x10 [ 312.205115][ T9354] ? security_capable+0x80/0x260 [ 312.210041][ T9354] ? ns_capable+0xd2/0xf0 [ 312.214359][ T9354] ? __pfx_nldev_dellink+0x10/0x10 [ 312.219447][ T9354] rdma_nl_rcv_msg+0x38a/0x6e0 [ 312.224200][ T9354] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 312.229484][ T9354] ? __lock_acquire+0x4a5/0x2630 [ 312.234409][ T9354] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 312.240803][ T9354] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 312.247723][ T9354] ? netlink_deliver_tap+0x1ae/0xcc0 [ 312.252999][ T9354] netlink_unicast+0x5aa/0x870 [ 312.257756][ T9354] ? __pfx_netlink_unicast+0x10/0x10 [ 312.263027][ T9354] netlink_sendmsg+0x8b0/0xda0 [ 312.267775][ T9354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.273039][ T9354] ? __might_fault+0x50/0x140 [ 312.277711][ T9354] ____sys_sendmsg+0x9e1/0xb70 [ 312.282465][ T9354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.287746][ T9354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.293010][ T9354] ? __pfx_futex_wake_mark+0x10/0x10 [ 312.298278][ T9354] ___sys_sendmsg+0x190/0x1e0 [ 312.302946][ T9354] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.308158][ T9354] __sys_sendmsg+0x170/0x220 [ 312.312730][ T9354] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.317819][ T9354] ? __pfx___seccomp_filter+0x10/0x10 [ 312.323174][ T9354] do_syscall_64+0x106/0xf80 [ 312.327747][ T9354] ? clear_bhb_loop+0x40/0x90 [ 312.332400][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.338266][ T9354] RIP: 0033:0x7fd9ee59c819 [ 312.342656][ T9354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.362236][ T9354] RSP: 002b:00007fd9ec7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.370627][ T9354] RAX: ffffffffffffffda RBX: 00007fd9ee815fa0 RCX: 00007fd9ee59c819 [ 312.378572][ T9354] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000002 [ 312.386526][ T9354] RBP: 00007fd9ee632c91 R08: 0000000000000000 R09: 0000000000000000 [ 312.394498][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.402445][ T9354] R13: 00007fd9ee816038 R14: 00007fd9ee815fa0 R15: 00007fff40b2e6a8 [ 312.410409][ T9354] [ 312.413674][ T9354] Kernel Offset: disabled [ 312.417977][ T9354] Rebooting in 86400 seconds..