last executing test programs: 11.673979394s ago: executing program 2 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r4 = syz_io_uring_setup(0x8f, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x18f}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) io_uring_enter(r4, 0x20847ba, 0x0, 0xc, 0x0, 0x0) 10.651628041s ago: executing program 2 (id=719): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004000) socket$inet6_tcp(0xa, 0x1, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x8e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10.60572944s ago: executing program 0 (id=720): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff6, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 10.454591183s ago: executing program 0 (id=721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 9.89464912s ago: executing program 1 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) 7.778583844s ago: executing program 0 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r5) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 6.759080458s ago: executing program 4 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x404000, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r4, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000034) 6.256266081s ago: executing program 2 (id=732): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee01) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000bc0)={r3, 0x0, 0x9, 0x8, 0xffffffffffffff1d, 0x4}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local, 0xd9}, {@local, 0x7}, 0x400, "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"}, 0x418, 0x823}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000040)={&(0x7f0000000700)={{@host, 0x2}, {@any, 0x200}, 0x400, "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"}, 0x418, 0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$sndctrl(&(0x7f0000000c40), 0x4000, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x40, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000b40)=['\x19~\x0fw\x01\xab3\xb4\n\x84-\xac\xba\xc3_\x02W\xaf\n\xcc0\x10\xd4d\x9b\xde\xf2\v@\x14\xc1\xf4}\xe7\x82\xd3:\xc2\x99\xe5\x88_?\xb4\t-\x8a\x15:r\xabC\xc1[*\xdd\x11\xee\x88C\xd2\x18\b\xaec\xa6'], 0x42}) 6.203325658s ago: executing program 3 (id=733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f00000083090000000b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close(0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 6.146695239s ago: executing program 1 (id=734): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) memfd_create(0x0, 0x3) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x36}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1, 0x9, 0x0) fcntl$getown(r4, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') 5.279886757s ago: executing program 4 (id=735): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 4.90104847s ago: executing program 0 (id=736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r0 = syz_io_uring_setup(0x498, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000000c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0xb, 0x0, 0x0) 4.771019579s ago: executing program 2 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000540)="a6e2976b5c4383036d32dadd2e144d8645cae01b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f26398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f959918f99bf9c2cb9357cf67f178dc2b3d4936e7f7f0a79f74ba464d83ab4bd9c27743daa5cff471bbc2751b5eae8855acb68d518b137cd0b21e21d8c8e16c81cca9c042da488003fcb6fca3d65238ddd944f4fd73b293001c56779f61597995d47f3c0c792a7860db829a0f182c7c29ab03d4fba5f766f439b616bbc96840a1d2696e1", 0xdf, 0x2000c001, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 3.769276897s ago: executing program 2 (id=738): lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x100000000, 0x105000) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000a80)={0xe, 0x5}) 3.709275372s ago: executing program 4 (id=739): sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@srh={{0x30}, {0x11, 0xbd, 0xb5, 0x4, 0x0, 0x80, 0x40}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00', {0x4}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x80}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 2.72801927s ago: executing program 2 (id=740): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000140)='P') 2.67504029s ago: executing program 0 (id=741): socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.674780399s ago: executing program 3 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000540)="a6e2976b5c4383036d32dadd2e144d8645cae01b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f26398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f959918f99bf9c2cb9357cf67f178dc2b3d4936e7f7f0a79f74ba464d83ab4bd9c27743daa5cff471bbc2751b5eae8855acb68d518b137cd0b21e21d8c8e16c81cca9c042da488003fcb6fca3d65238ddd944f4fd73b293001c56779f61597995d47f3c0c792a7860db829a0f182c7c29ab03d4fba5f766f439b616bbc96", 0xd9, 0x2000c001, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 2.652199417s ago: executing program 4 (id=743): mkdir(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0) 1.876921862s ago: executing program 1 (id=744): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.762551572s ago: executing program 4 (id=745): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = eventfd2(0x800, 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x20, 0x7, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 1.689670104s ago: executing program 3 (id=746): syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x10000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.241577516s ago: executing program 4 (id=747): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x48c0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) read(r1, 0x0, 0x20) syz_open_dev$dri(0x0, 0x8000, 0x1d5500) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d000100000000090400000503001500092105000001220500090581032000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000b80)="e2") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r3}) 1.179067049s ago: executing program 1 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 1.178947249s ago: executing program 3 (id=749): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) setxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="757365722effff"], 0x0, 0x0, 0x1) 1.128858697s ago: executing program 3 (id=750): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18070000000000000000000000000000711095000000000095"], 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 999.22454ms ago: executing program 1 (id=751): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80080, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) 923.028116ms ago: executing program 3 (id=752): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5332, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 30.194392ms ago: executing program 1 (id=753): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 0s ago: executing program 0 (id=754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_rm_watch(0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) lseek(r3, 0xffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): 108.673278][ T5815] Tainted: [L]=SOFTLOCKUP [ 108.673286][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.673297][ T5815] Workqueue: hci4 hci_rx_work [ 108.673323][ T5815] Call Trace: [ 108.673329][ T5815] [ 108.673336][ T5815] dump_stack_lvl+0x100/0x190 [ 108.673371][ T5815] sysfs_warn_dup.cold+0x1c/0x28 [ 108.673397][ T5815] sysfs_create_dir_ns+0x24b/0x2b0 [ 108.673427][ T5815] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 108.673457][ T5815] ? find_held_lock+0x2b/0x80 [ 108.673482][ T5815] ? kobject_add_internal+0x25f/0x930 [ 108.673512][ T5815] ? kobject_add_internal+0x25f/0x930 [ 108.673543][ T5815] ? do_raw_spin_unlock+0x145/0x1e0 [ 108.673566][ T5815] kobject_add_internal+0x2c8/0x930 [ 108.673599][ T5815] kobject_add+0x16a/0x1e0 [ 108.673617][ T5815] ? __pfx_kobject_add+0x10/0x10 [ 108.673633][ T5815] ? preempt_schedule_thunk+0x16/0x30 [ 108.673664][ T5815] ? kobject_put+0xb9/0x640 [ 108.673690][ T5815] ? _raw_spin_unlock+0x3e/0x50 [ 108.673720][ T5815] device_add+0x294/0x1950 [ 108.673742][ T5815] ? __pfx_dev_set_name+0x10/0x10 [ 108.673767][ T5815] ? __pfx_device_add+0x10/0x10 [ 108.673787][ T5815] ? mgmt_send_event_skb+0x2fb/0x460 [ 108.673817][ T5815] hci_conn_add_sysfs+0x1a3/0x260 [ 108.673844][ T5815] le_conn_complete_evt+0x11cb/0x1f40 [ 108.673872][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 108.673903][ T5815] hci_le_conn_complete_evt+0x23c/0x3a0 [ 108.673926][ T5815] ? skb_pull_data+0x15f/0x1e0 [ 108.673947][ T5815] hci_le_meta_evt+0x34a/0x5f0 [ 108.673978][ T5815] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 108.674004][ T5815] hci_event_packet+0x682/0x11c0 [ 108.674027][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 108.674052][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 108.674078][ T5815] ? kcov_remote_start+0x374/0x660 [ 108.674106][ T5815] ? lockdep_hardirqs_on+0x78/0x100 [ 108.674140][ T5815] hci_rx_work+0x451/0xfc0 [ 108.674163][ T5815] ? process_one_work+0x999/0x19a0 [ 108.674187][ T5815] process_one_work+0xa23/0x19a0 [ 108.674218][ T5815] ? __pfx_process_one_work+0x10/0x10 [ 108.674247][ T5815] ? __pfx_hci_rx_work+0x10/0x10 [ 108.674271][ T5815] worker_thread+0x5ef/0xe50 [ 108.674301][ T5815] ? kthread+0x13a/0x450 [ 108.674319][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 108.674338][ T5815] kthread+0x370/0x450 [ 108.674356][ T5815] ? __pfx_kthread+0x10/0x10 [ 108.674376][ T5815] ret_from_fork+0x754/0xd80 [ 108.674398][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 108.674418][ T5815] ? rcu_is_watching+0x12/0xc0 [ 108.674440][ T5815] ? __switch_to+0x7b4/0x1120 [ 108.674464][ T5815] ? __pfx_kthread+0x10/0x10 [ 108.674484][ T5815] ret_from_fork_asm+0x1a/0x30 [ 108.674519][ T5815] [ 108.674596][ T5815] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.680902][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.687174][ T5815] Bluetooth: hci4: failed to register connection device [ 108.988197][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.015871][ T30] audit: type=1400 audit(1774303994.560:328): avc: denied { listen } for pid=6677 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.044989][ T6683] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.093016][ T6405] block nbd64: NBD_DISCONNECT [ 110.160905][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 110.190565][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.205100][ T5864] usb 4-1: config 0 has no interface number 0 [ 110.215326][ T5864] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.229911][ T5864] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.260603][ T5864] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 110.280713][ T5796] udevd[5796]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 110.300570][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.329445][ T5864] usb 4-1: config 0 descriptor?? [ 110.742954][ T30] audit: type=1400 audit(1774303996.650:329): avc: denied { create } for pid=6692 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.363928][ T30] audit: type=1400 audit(1774303996.880:330): avc: denied { ioctl } for pid=6692 comm="syz.4.164" path="socket:[10810]" dev="sockfs" ino=10810 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.364024][ T5864] uclogic 0003:28BD:0071.0002: pen parameters not found [ 111.453941][ T5864] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 111.481176][ T5864] usb 4-1: USB disconnect, device number 3 [ 111.696361][ T6702] netlink: 88 bytes leftover after parsing attributes in process `syz.0.167'. [ 111.744951][ T6704] netlink: 76 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.767564][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 111.780061][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 111.910414][ T6711] fuse: Bad value for 'rootmode' [ 111.983732][ T30] audit: type=1400 audit(1774303997.850:331): avc: denied { listen } for pid=6696 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 112.004164][ T30] audit: type=1400 audit(1774303997.860:332): avc: denied { mount } for pid=6696 comm="syz.1.166" name="/" dev="hugetlbfs" ino=10851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 112.957788][ T30] audit: type=1400 audit(1774303998.850:333): avc: denied { append } for pid=6715 comm="syz.4.173" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.067021][ T30] audit: type=1400 audit(1774303998.850:334): avc: denied { write } for pid=6715 comm="syz.4.173" path="socket:[10861]" dev="sockfs" ino=10861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.126618][ T6722] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.142565][ T6722] tipc: Started in network mode [ 113.147497][ T6722] tipc: Node identity 02e0f97f8097, cluster identity 4711 [ 113.155227][ T6722] tipc: Enabled bearer , priority 10 [ 113.173327][ T6721] tipc: Disabling bearer [ 113.733166][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.740490][ T30] audit: type=1400 audit(1774303999.270:335): avc: denied { create } for pid=6724 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 113.764001][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 113.866136][ T30] audit: type=1400 audit(1774303999.770:336): avc: denied { read } for pid=6718 comm="syz.2.174" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 113.921367][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 113.930706][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.945788][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.956773][ T5864] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 113.968935][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.018798][ T5864] usb 1-1: config 0 descriptor?? [ 114.071050][ T793] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.301656][ T793] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 114.318364][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.331070][ T793] usb 2-1: Product: syz [ 114.335362][ T793] usb 2-1: Manufacturer: syz [ 114.340468][ T793] usb 2-1: SerialNumber: syz [ 114.494930][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.517155][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.536820][ T6741] netlink: 88 bytes leftover after parsing attributes in process `syz.4.182'. [ 114.697460][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.707367][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.075933][ T793] usb 2-1: USB disconnect, device number 4 [ 115.575615][ T6751] geneve2: entered promiscuous mode [ 115.580966][ T6751] geneve2: entered allmulticast mode [ 115.715742][ T5864] hid_parser_main: 28 callbacks suppressed [ 115.715762][ T5864] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 115.731091][ T5864] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 115.745452][ T30] audit: type=1400 audit(1774304001.650:337): avc: denied { read write } for pid=6746 comm="syz.3.183" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.051517][ T5864] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 116.087110][ T5864] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -5 [ 116.119653][ T6754] fuse: Unknown parameter 'use00000000000000000000' [ 116.131982][ T30] audit: type=1400 audit(1774304001.650:338): avc: denied { open } for pid=6746 comm="syz.3.183" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.060068][ T5864] usb 1-1: USB disconnect, device number 3 [ 117.415825][ T30] audit: type=1400 audit(1774304003.310:339): avc: denied { create } for pid=6762 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.871132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.280913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.372226][ T6769] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.187'. [ 118.381313][ T6769] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.187'. [ 118.666596][ T30] audit: type=1400 audit(1774304004.570:340): avc: denied { write } for pid=6762 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.668769][ T6763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.736084][ T5864] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.805035][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.840072][ T6776] Cannot find set identified by id 0 to match [ 118.957880][ T30] audit: type=1400 audit(1774304004.860:341): avc: denied { read write } for pid=6777 comm="syz.2.190" name="mouse0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.152251][ T30] audit: type=1400 audit(1774304004.860:342): avc: denied { open } for pid=6777 comm="syz.2.190" path="/dev/input/mouse0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.159464][ T5864] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 119.641083][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.649121][ T5864] usb 1-1: Product: syz [ 119.658609][ T5864] usb 1-1: Manufacturer: syz [ 119.701595][ T5864] usb 1-1: SerialNumber: syz [ 119.711615][ T5864] usb 1-1: config 0 descriptor?? [ 119.740276][ T5864] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 119.925396][ T6792] trusted_key: encrypted_key: insufficient parameters specified [ 119.978542][ T6793] netlink: 88 bytes leftover after parsing attributes in process `syz.4.194'. [ 120.174727][ T5864] (null): failure reading functionality [ 120.246222][ T6801] netlink: 88 bytes leftover after parsing attributes in process `syz.1.196'. [ 120.653403][ T5864] i2c i2c-1: connected i2c-tiny-usb device [ 120.827906][ T5864] usb 1-1: USB disconnect, device number 4 [ 121.043213][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.199'. [ 121.197941][ T6808] loop2: detected capacity change from 0 to 7 [ 121.205113][ T6808] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 121.221237][ T6808] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 121.227952][ T6808] Dev loop2: unable to read RDB block 7 [ 121.312178][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.335120][ T30] audit: type=1400 audit(1774304007.210:343): avc: denied { append } for pid=6804 comm="syz.4.199" name="cec4" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.424346][ T6808] loop2: unable to read partition table [ 121.532236][ T6808] loop2: partition table beyond EOD, truncated [ 121.638744][ T6808] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 122.637208][ T30] audit: type=1400 audit(1774304008.540:345): avc: denied { create } for pid=6820 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.337130][ T30] audit: type=1400 audit(1774304008.540:344): avc: denied { write } for pid=6815 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.434148][ T6816] syzkaller0: entered promiscuous mode [ 123.439743][ T6816] syzkaller0: entered allmulticast mode [ 123.500881][ T6838] syz.3.205 uses obsolete (PF_INET,SOCK_PACKET) [ 124.183726][ T6841] Invalid ELF header magic: != ELF [ 124.350405][ T6847] loop8: detected capacity change from 0 to 8 [ 124.368594][ T5796] Dev loop8: unable to read RDB block 8 [ 124.405383][ T5796] loop8: unable to read partition table [ 124.441083][ T5796] loop8: partition table beyond EOD, truncated [ 124.467636][ T6847] Dev loop8: unable to read RDB block 8 [ 124.482661][ T6847] loop8: unable to read partition table [ 124.565626][ T6847] loop8: partition table beyond EOD, truncated [ 124.576542][ T6847] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 124.793608][ T6854] netlink: 88 bytes leftover after parsing attributes in process `syz.0.209'. [ 124.883831][ T6856] deleting an unspecified loop device is not supported. [ 124.894523][ T30] audit: type=1400 audit(1774304010.780:346): avc: denied { write } for pid=6855 comm="syz.4.211" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 124.955477][ T30] audit: type=1400 audit(1774304010.780:347): avc: denied { open } for pid=6855 comm="syz.4.211" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.012143][ T30] audit: type=1400 audit(1774304010.800:348): avc: denied { ioctl } for pid=6855 comm="syz.4.211" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.329639][ T6868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.213'. [ 125.880934][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.040992][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 126.059839][ T29] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 126.111401][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.158888][ T29] usb 2-1: config 0 has no interface number 0 [ 126.198053][ T29] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.533823][ T29] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 126.607694][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.694734][ T29] usb 2-1: Product: syz [ 126.798984][ T29] usb 2-1: Manufacturer: syz [ 126.925822][ T29] usb 2-1: SerialNumber: syz [ 127.525445][ T6882] Invalid ELF header magic: != ELF [ 127.541843][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.548136][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.625984][ T29] usb 2-1: config 0 descriptor?? [ 127.636183][ T29] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input8 [ 129.013126][ T793] IPVS: starting estimator thread 0... [ 130.070226][ T30] audit: type=1400 audit(1774304015.970:349): avc: denied { create } for pid=6869 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.311157][ T6934] IPVS: using max 38 ests per chain, 91200 per kthread [ 130.435977][ T30] audit: type=1400 audit(1774304016.250:350): avc: denied { write } for pid=6869 comm="syz.1.214" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 131.202128][ T6976] netlink: 88 bytes leftover after parsing attributes in process `syz.3.226'. [ 133.518397][ T5871] usb 2-1: USB disconnect, device number 5 [ 134.675001][ T7023] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 135.774176][ T7028] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 135.943845][ T7023] tipc: Enabled bearer , priority 0 [ 136.014390][ T7022] tipc: Disabling bearer [ 136.919519][ T7042] netlink: 88 bytes leftover after parsing attributes in process `syz.0.239'. [ 137.329985][ T7059] warning: `syz.0.246' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.466509][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.585366][ T7067] syz.4.247 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.641682][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 137.940786][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.964197][ T5871] usb 3-1: config 0 descriptor?? [ 137.986416][ T5871] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 138.001035][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.066828][ T7070] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 138.118952][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.154986][ T29] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.166138][ T29] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.176058][ T29] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.185133][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.202063][ T7059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 138.314547][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.348450][ T7073] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 138.760846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 139.153003][ T7076] ubi: mtd0 is already attached to ubi0 [ 139.672598][ T30] audit: type=1400 audit(1774304025.580:351): avc: denied { mounton } for pid=7057 comm="syz.0.246" path="/53/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 139.927911][ T29] usb 1-1: USB disconnect, device number 5 [ 140.434423][ T7089] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 140.472908][ T5871] usb 3-1: USB disconnect, device number 6 [ 140.556245][ T7089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.694114][ T7092] vlan2: entered allmulticast mode [ 140.727540][ T7092] veth0_to_bond: entered allmulticast mode [ 140.784214][ T7092] bond1: (slave vlan2): making interface the new active one [ 140.826267][ T7092] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 141.053477][ T7096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.256'. [ 141.085332][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 141.158317][ T7105] xt_connbytes: Forcing CT accounting to be enabled [ 141.165198][ T7105] Cannot find set identified by id 0 to match [ 141.531003][ T30] audit: type=1400 audit(1774304027.370:352): avc: denied { write } for pid=7093 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.560022][ T30] audit: type=1400 audit(1774304027.370:353): avc: denied { name_connect } for pid=7093 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 141.581569][ T30] audit: type=1400 audit(1774304027.380:354): avc: denied { accept } for pid=7093 comm="syz.1.255" lport=42585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.602552][ T5864] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.660975][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.696149][ T30] audit: type=1400 audit(1774304027.380:355): avc: denied { write } for pid=7093 comm="syz.1.255" lport=42585 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 141.809647][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 141.861019][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 142.010739][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.030376][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.044754][ T29] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 142.050985][ T5864] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 142.060863][ T29] usb 4-1: config 0 has no interface number 0 [ 142.068142][ T29] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.079109][ T30] audit: type=1400 audit(1774304027.700:356): avc: denied { bind } for pid=7119 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.080875][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.157619][ T29] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.167778][ T30] audit: type=1400 audit(1774304027.700:357): avc: denied { name_bind } for pid=7119 comm="syz.0.261" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 142.190676][ T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 142.199832][ T29] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 142.208130][ T30] audit: type=1400 audit(1774304027.700:358): avc: denied { node_bind } for pid=7119 comm="syz.0.261" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 142.211439][ T5864] usb 3-1: config 0 descriptor?? [ 142.241254][ T29] usb 4-1: Product: syz [ 142.250077][ T29] usb 4-1: SerialNumber: syz [ 142.272840][ T29] usb 4-1: config 0 descriptor?? [ 142.278367][ T30] audit: type=1400 audit(1774304027.780:359): avc: denied { read } for pid=7119 comm="syz.0.261" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.311071][ T29] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 142.318936][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 142.360919][ T30] audit: type=1400 audit(1774304027.780:360): avc: denied { setattr } for pid=7119 comm="syz.0.261" path="socket:[12378]" dev="sockfs" ino=12378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.515568][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 142.600845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 143.471092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 143.592241][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.600258][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.607366][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.614482][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.621633][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.628774][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.635916][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.643127][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.650211][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.657317][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 143.670842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.710847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 143.743643][ T29] usb 4-1: USB disconnect, device number 4 [ 143.749492][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 143.782948][ T29] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 143.784157][ T5864] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 143.871462][ T5864] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 143.915302][ T7130] ip6t_srh: unknown srh match flags 4000 [ 143.991755][ T5864] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 144.192885][ T5864] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 144.344241][ T7132] fuse: Unknown parameter 'f' [ 144.394788][ T5864] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 144.443443][ T5864] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 144.671163][ T5871] usb 3-1: USB disconnect, device number 7 [ 144.885660][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 144.885690][ T30] audit: type=1400 audit(1774304030.790:366): avc: denied { ioctl } for pid=7142 comm="syz.3.268" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.139699][ T30] audit: type=1400 audit(1774304031.040:367): avc: denied { create } for pid=7142 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.175907][ T30] audit: type=1400 audit(1774304031.080:368): avc: denied { write } for pid=7142 comm="syz.3.268" path="socket:[12477]" dev="sockfs" ino=12477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.245153][ T30] audit: type=1400 audit(1774304031.110:369): avc: denied { map } for pid=7142 comm="syz.3.268" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.293985][ T30] audit: type=1400 audit(1774304031.110:370): avc: denied { execute } for pid=7142 comm="syz.3.268" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.381330][ T7151] netlink: 104 bytes leftover after parsing attributes in process `syz.1.270'. [ 145.462979][ T7153] loop8: detected capacity change from 0 to 8 [ 145.470566][ T7153] Dev loop8: unable to read RDB block 8 [ 145.476534][ T7153] loop8: unable to read partition table [ 145.531126][ T7153] loop8: partition table beyond EOD, truncated [ 145.531397][ T5871] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 145.549967][ T7153] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 145.595110][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 145.821175][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 145.849781][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.864328][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 145.882141][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.911403][ T7160] netlink: 76 bytes leftover after parsing attributes in process `syz.2.274'. [ 145.920898][ T5871] usb 4-1: Product: syz [ 145.928196][ T5871] usb 4-1: Manufacturer: syz [ 145.936173][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 145.953167][ T5871] usb 4-1: SerialNumber: syz [ 145.964929][ T7159] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 145.982604][ T5871] usb 4-1: config 0 descriptor?? [ 145.990816][ T7146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.991155][ T7159] team0 (unregistering): Port device team_slave_0 removed [ 146.010410][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 146.019213][ T5871] port100 4-1:0.0: NFC: Could not get supported command types [ 146.043714][ T7159] team0 (unregistering): Failed to send options change via netlink (err -105) [ 146.074991][ T7159] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 146.096177][ T7159] team0 (unregistering): Port device team_slave_1 removed [ 146.242279][ T5871] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 146.312933][ T7174] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 146.342821][ T30] audit: type=1400 audit(1774304032.250:371): avc: denied { setopt } for pid=7142 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 146.364505][ T5864] usb 4-1: USB disconnect, device number 5 [ 146.446683][ T5871] usb 1-1: device descriptor read/64, error -71 [ 146.530982][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.782935][ T7174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.916629][ T5871] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 147.081166][ T5871] usb 1-1: device descriptor read/64, error -71 [ 147.274127][ T5871] usb usb1-port1: attempt power cycle [ 147.289182][ T29] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 147.300858][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.309499][ T29] usb 5-1: Product: syz [ 147.316703][ T29] usb 5-1: Manufacturer: syz [ 147.321411][ T29] usb 5-1: SerialNumber: syz [ 147.328424][ T29] usb 5-1: config 0 descriptor?? [ 147.336060][ T29] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 007 [ 147.736620][ T5871] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 147.775012][ T5871] usb 1-1: device descriptor read/8, error -71 [ 147.952693][ T29] (null): failure reading functionality [ 147.982894][ T29] i2c i2c-1: connected i2c-tiny-usb device [ 148.030920][ T5871] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 148.071300][ T5871] usb 1-1: device descriptor read/8, error -71 [ 148.177318][ T5864] usb 5-1: USB disconnect, device number 7 [ 148.186236][ T5871] usb usb1-port1: unable to enumerate USB device [ 148.380946][ T5871] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.542267][ T5871] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.559520][ T5871] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.571238][ T5871] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.582757][ T5871] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 149.366693][ T7215] Invalid ELF header magic: != ELF [ 149.467363][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.515763][ T7206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.673755][ T7221] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.767028][ T7221] tipc: Started in network mode [ 149.772174][ T7221] tipc: Node identity ba6937210e1d, cluster identity 4711 [ 149.779500][ T7221] tipc: Enabled bearer , priority 0 [ 149.807204][ T7220] tipc: Disabling bearer [ 150.335597][ T5871] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 150.346231][ T5871] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 150.380234][ T5871] usb 4-1: USB disconnect, device number 6 [ 150.386229][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 150.731170][ T30] audit: type=1400 audit(1774304036.620:372): avc: denied { ioctl } for pid=7229 comm="syz.0.296" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 152.929599][ T7251] netlink: 104 bytes leftover after parsing attributes in process `syz.2.301'. [ 153.190899][ T30] audit: type=1400 audit(1774304039.090:373): avc: denied { mount } for pid=7247 comm="syz.4.302" name="/" dev="ramfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 153.376817][ T7257] netlink: 88 bytes leftover after parsing attributes in process `syz.0.303'. [ 153.860982][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.172265][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 154.272719][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.304717][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 154.436764][ T7276] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 154.444643][ T7276] netlink: 224 bytes leftover after parsing attributes in process `syz.3.308'. [ 154.640077][ T29] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 154.661263][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.679683][ T29] usb 5-1: Product: syz [ 154.696798][ T29] usb 5-1: Manufacturer: syz [ 154.720097][ T29] usb 5-1: SerialNumber: syz [ 154.751569][ T29] usb 5-1: config 0 descriptor?? [ 154.991032][ T3091] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.188781][ T3091] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.207711][ T5813] usb 5-1: USB disconnect, device number 8 [ 155.209277][ T3091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.224289][ T3091] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.233488][ T3091] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.256404][ T3091] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.267788][ T3091] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.276624][ T3091] usb 1-1: Product: syz [ 155.401271][ T3091] usb 1-1: Manufacturer: syz [ 155.423703][ T3091] cdc_wdm 1-1:1.0: skipping garbage [ 155.428945][ T3091] cdc_wdm 1-1:1.0: skipping garbage [ 155.443302][ T3091] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 155.453461][ T30] audit: type=1400 audit(1774304041.350:374): avc: denied { execute } for pid=7289 comm="syz.3.312" name="file0" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.453819][ T3091] cdc_wdm 1-1:1.0: Unknown control protocol [ 155.507290][ T30] audit: type=1400 audit(1774304041.350:375): avc: denied { execute_no_trans } for pid=7289 comm="syz.3.312" path="/65/file0" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.507336][ T30] audit: type=1400 audit(1774304041.390:376): avc: denied { mount } for pid=7289 comm="syz.3.312" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 155.507367][ T30] audit: type=1400 audit(1774304041.390:377): avc: denied { accept } for pid=7289 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.624570][ T30] audit: type=1400 audit(1774304041.530:378): avc: denied { read write } for pid=7271 comm="syz.0.307" name="cdc-wdm0" dev="devtmpfs" ino=2924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 155.624817][ T30] audit: type=1400 audit(1774304041.530:379): avc: denied { open } for pid=7271 comm="syz.0.307" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 155.632043][ T30] audit: type=1400 audit(1774304041.530:380): avc: denied { setopt } for pid=7271 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.832274][ T7298] netlink: 88 bytes leftover after parsing attributes in process `syz.1.315'. [ 155.870346][ T30] audit: type=1400 audit(1774304041.770:381): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 156.014867][ T30] audit: type=1400 audit(1774304041.920:382): avc: denied { write } for pid=7303 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.051269][ T30] audit: type=1400 audit(1774304041.950:383): avc: denied { read } for pid=7303 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.249412][ T7308] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 156.293997][ T30] audit: type=1400 audit(1774304042.190:384): avc: denied { name_connect } for pid=7301 comm="syz.2.316" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 156.655205][ T30] audit: type=1400 audit(1774304042.200:385): avc: denied { write } for pid=7301 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.692586][ T7308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.757741][ T30] audit: type=1400 audit(1774304042.200:386): avc: denied { read } for pid=7301 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.836786][ T7319] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 156.858337][ T7319] team0 (unregistering): Port device team_slave_0 removed [ 156.878974][ T7319] team0 (unregistering): Failed to send options change via netlink (err -105) [ 156.901675][ T7319] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 156.924967][ T30] audit: type=1400 audit(1774304042.830:387): avc: denied { ioctl } for pid=7320 comm="syz.3.321" path="socket:[12964]" dev="sockfs" ino=12964 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.938248][ T7319] team0 (unregistering): Port device team_slave_1 removed [ 157.074822][ T7325] fuse: Unknown parameter '0x0000000000000003' [ 157.166443][ T30] audit: type=1400 audit(1774304043.030:388): avc: denied { create } for pid=7322 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.166917][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 157.474488][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 157.535784][ T7335] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 157.551464][ T7335] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.325'. [ 157.602749][ T29] usb 1-1: USB disconnect, device number 10 [ 157.687642][ T7339] netlink: 88 bytes leftover after parsing attributes in process `syz.4.327'. [ 157.867936][ T30] audit: type=1400 audit(1774304043.770:389): avc: denied { create } for pid=7352 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.891689][ T7350] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 157.918736][ T7356] xt_connbytes: Forcing CT accounting to be enabled [ 157.925517][ T7356] Cannot find set identified by id 0 to match [ 157.981483][ T30] audit: type=1400 audit(1774304043.870:390): avc: denied { connect } for pid=7352 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.208797][ T7350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.210996][ T7359] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 158.242110][ T7367] tipc: Started in network mode [ 158.242475][ T7367] tipc: Node identity aeaa343bcb7a, cluster identity 4711 [ 158.243245][ T7367] tipc: Enabled bearer , priority 10 [ 158.385979][ T7358] tipc: Disabling bearer [ 158.926496][ T7386] netlink: 88 bytes leftover after parsing attributes in process `syz.3.339'. [ 159.583626][ T5857] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.597925][ T7391] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 159.770206][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 160.321043][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 160.351136][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.374042][ T5857] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.384438][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.390695][ T7402] fuse: Bad value for 'fd' [ 160.768539][ T5857] usb 3-1: config 0 descriptor?? [ 160.987514][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 160.987531][ T30] audit: type=1400 audit(1774304046.890:394): avc: denied { create } for pid=7408 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.024254][ T5857] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.047590][ T29] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 161.101353][ T30] audit: type=1400 audit(1774304046.920:395): avc: denied { write } for pid=7408 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.187383][ T30] audit: type=1400 audit(1774304046.920:396): avc: denied { read } for pid=7408 comm="syz.1.345" path="socket:[13097]" dev="sockfs" ino=13097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.225961][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 161.238024][ T7416] kvm: kvm [7415]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x6 [ 161.247444][ T5857] usb 3-1: USB disconnect, device number 8 [ 161.279368][ T30] audit: type=1400 audit(1774304047.120:397): avc: denied { write } for pid=7387 comm="syz.2.340" name="iowarrior0" dev="devtmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.416079][ T29] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 161.429547][ T29] usb 4-1: config 0 has no interface number 0 [ 161.442245][ T29] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 161.470903][ T29] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 161.482793][ T29] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 161.499768][ T29] usb 4-1: config 0 interface 2 has no altsetting 0 [ 161.690691][ T29] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 161.720906][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.744497][ T29] usb 4-1: Product: syz [ 161.758504][ T29] usb 4-1: Manufacturer: syz [ 161.778884][ T29] usb 4-1: SerialNumber: syz [ 161.807096][ T29] usb 4-1: config 0 descriptor?? [ 161.822074][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 161.836744][ T7405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 161.869973][ T7405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 162.145971][ T30] audit: type=1400 audit(1774304048.050:398): avc: denied { mounton } for pid=7395 comm="syz.3.343" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 162.483151][ T3091] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.653461][ T3091] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.668130][ T3091] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 162.735888][ T7432] xt_connbytes: Forcing CT accounting to be enabled [ 162.743080][ T7432] Cannot find set identified by id 0 to match [ 162.760173][ T3091] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 162.787135][ T3091] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 162.844997][ T3091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.858299][ T3091] usb 3-1: Product: syz [ 162.878841][ T3091] usb 3-1: Manufacturer: syz [ 162.884314][ T3091] usb 3-1: SerialNumber: syz [ 163.584473][ T7442] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 163.597872][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 164.349007][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.443152][ T3091] usb 3-1: Can't get UAC3 power state for id 10 [ 164.465472][ T29] usb 4-1: USB disconnect, device number 7 [ 164.486760][ T3091] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 164.613371][ T3091] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 165.841132][ T7465] Invalid ELF header magic: != ELF [ 165.981066][ T3091] usb 3-1: USB disconnect, device number 9 [ 166.444803][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 166.954008][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 167.474243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 168.137307][ T7527] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 168.177976][ T7529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.372'. [ 168.193865][ T7527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.531147][ T5857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.541737][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 168.541792][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.949685][ T7546] netlink: 76 bytes leftover after parsing attributes in process `syz.1.377'. [ 168.969221][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 169.061939][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 169.068849][ T5857] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.078666][ T5857] usb 4-1: config 0 has no interface number 0 [ 169.088071][ T5857] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.101072][ T5857] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.110859][ T5857] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 169.119891][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.663091][ T7556] Cannot find set identified by id 0 to match [ 169.676797][ T5857] usb 4-1: config 0 descriptor?? [ 170.075665][ T7593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.969826][ T7599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'. [ 171.299844][ T5857] uclogic 0003:28BD:0071.0005: pen parameters not found [ 171.306949][ T5857] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 171.583433][ T5857] usb 4-1: USB disconnect, device number 8 [ 171.747722][ T7602] loop8: detected capacity change from 0 to 8 [ 171.766260][ T7602] Dev loop8: unable to read RDB block 8 [ 171.780954][ T7602] loop8: unable to read partition table [ 172.248138][ T7602] loop8: partition table beyond EOD, truncated [ 172.279139][ T7602] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 172.758411][ T7612] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 172.835621][ T7612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.163490][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 173.269807][ T30] audit: type=1400 audit(1774304059.170:399): avc: denied { setopt } for pid=7616 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 173.658730][ T7647] IPv6: NLM_F_REPLACE set, but no existing node found! [ 174.220855][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.2.395'. [ 174.397948][ T5992] Bluetooth: (null): Invalid header checksum [ 174.500945][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.546741][ T6002] Bluetooth: (null): Invalid header checksum [ 174.634630][ T5992] Bluetooth: (null): Invalid header checksum [ 174.710409][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.544933][ T5989] Bluetooth: (null): Invalid header checksum [ 175.557902][ T5989] Bluetooth: (null): Invalid header checksum [ 175.564068][ T5989] Bluetooth: (null): Invalid header checksum [ 175.570116][ T5989] Bluetooth: (null): Invalid header checksum [ 175.580894][ T5989] Bluetooth: (null): Invalid header checksum [ 175.582160][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 175.586945][ T5989] Bluetooth: (null): Invalid header checksum [ 175.963805][ T29] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 175.975170][ T5989] Bluetooth: (null): Invalid header checksum [ 176.009210][ T5989] Bluetooth: (null): Invalid header checksum [ 176.015926][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.040933][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 176.049957][ T29] usb 3-1: config 0 descriptor?? [ 176.051587][ T5857] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.076362][ T5857] usb 1-1: config 0 has no interface number 0 [ 176.094922][ T5857] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.130912][ T5857] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.200873][ T5857] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 176.235774][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.264937][ T5857] usb 1-1: config 0 descriptor?? [ 176.303805][ T7644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.395'. [ 176.348193][ T30] audit: type=1400 audit(1774304062.250:400): avc: denied { watch } for pid=7643 comm="syz.2.395" path="/82" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.380474][ T30] audit: type=1400 audit(1774304062.250:401): avc: denied { watch_sb watch_reads } for pid=7643 comm="syz.2.395" path="/82" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.407886][ T29] ath6kl: Failed to submit usb control message: -71 [ 176.420998][ T29] ath6kl: unable to send the bmi data to the device: -71 [ 176.439429][ T29] ath6kl: Unable to send get target info: -71 [ 176.457990][ T29] ath6kl: Failed to init ath6kl core: -71 [ 176.463610][ T5864] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.465336][ T29] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 176.507328][ T29] usb 3-1: USB disconnect, device number 10 [ 176.625345][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 176.634471][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.643128][ T5864] usb 5-1: config 86 has an invalid interface number: 149 but max is 0 [ 176.652241][ T5864] usb 5-1: config 86 has no interface number 0 [ 176.660382][ T5864] usb 5-1: config 86 interface 149 has no altsetting 0 [ 176.671430][ T793] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 176.682033][ T5864] usb 5-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c [ 176.692352][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.700438][ T5864] usb 5-1: Product: syz [ 176.712625][ T5864] usb 5-1: Manufacturer: syz [ 176.719555][ T5864] usb 5-1: SerialNumber: syz [ 176.822284][ T793] usb 2-1: No LPM exit latency info found, disabling LPM. [ 176.843460][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.863212][ T793] usb 2-1: string descriptor 0 read error: -22 [ 176.869455][ T793] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 176.894536][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.905288][ T5857] uclogic 0003:28BD:0071.0006: pen parameters not found [ 176.912264][ T5857] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 176.945712][ T793] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 176.958202][ T5864] belkin_sa 5-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 176.983309][ T5864] usb 5-1: bcdDevice: 0a5c, bfc: 0 [ 177.002302][ T5864] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 177.046959][ T5864] usb 5-1: USB disconnect, device number 9 [ 177.082358][ T5864] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 177.094532][ T7668] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 177.118984][ T7668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.126348][ T793] usb 1-1: USB disconnect, device number 11 [ 177.277609][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.429109][ T5864] belkin_sa 5-1:86.149: device disconnected [ 177.431683][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.474767][ T5857] usb 2-1: USB disconnect, device number 6 [ 177.689453][ T7674] xt_connbytes: Forcing CT accounting to be enabled [ 177.696507][ T7674] Cannot find set identified by id 0 to match [ 178.008901][ T7676] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 178.112762][ T7676] team0 (unregistering): Port device team_slave_0 removed [ 178.130277][ T7676] team0 (unregistering): Failed to send options change via netlink (err -105) [ 178.140118][ T7676] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 178.152368][ T7676] team0 (unregistering): Port device team_slave_1 removed [ 178.162648][ T7684] capability: warning: `syz.4.405' uses 32-bit capabilities (legacy support in use) [ 178.173493][ T7683] loop2: detected capacity change from 0 to 7 [ 178.183519][ T7683] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 178.209887][ T7683] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.219391][ T7683] Dev loop2: unable to read RDB block 7 [ 178.226227][ T7683] loop2: unable to read partition table [ 178.233304][ T7683] loop2: partition table beyond EOD, truncated [ 178.252100][ T7683] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 178.319013][ T5176] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 178.340789][ T5176] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.376746][ T5176] Dev loop2: unable to read RDB block 7 [ 178.386805][ T5176] loop2: unable to read partition table [ 178.395006][ T5176] loop2: partition table beyond EOD, truncated [ 179.057533][ T30] audit: type=1400 audit(1774304064.960:402): avc: denied { mount } for pid=7685 comm="syz.4.407" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 179.283257][ T30] audit: type=1400 audit(1774304065.190:403): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 179.567573][ T7702] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 179.900072][ T7702] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.551085][ T7721] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 180.634774][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 180.641201][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 180.642722][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 180.649808][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 180.655554][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 180.761071][ T5864] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.254174][ T5864] usb 1-1: config 0 has no interfaces? [ 181.262330][ T5864] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 181.301353][ T7728] netlink: 76 bytes leftover after parsing attributes in process `syz.4.420'. [ 181.310853][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 181.443630][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.464907][ T5864] usb 1-1: config 0 descriptor?? [ 181.721224][ T30] audit: type=1400 audit(1774304067.480:404): avc: denied { getopt } for pid=7730 comm="syz.4.421" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.267583][ T7735] comedi comedi3: pcl816: I/O port conflict (0x3fd,16) [ 182.885520][ T7743] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 182.916697][ T793] usb 1-1: USB disconnect, device number 12 [ 183.198691][ T7749] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 183.818422][ T7749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.066735][ T7768] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 184.161151][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 184.311203][ T793] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.500900][ T793] usb 5-1: Using ep0 maxpacket: 32 [ 184.527989][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.756205][ T7773] Invalid ELF header magic: != ELF [ 184.867273][ T7777] loop8: detected capacity change from 0 to 8 [ 184.877310][ T7777] Dev loop8: unable to read RDB block 8 [ 184.882926][ T7777] loop8: unable to read partition table [ 184.889460][ T7777] loop8: partition table beyond EOD, truncated [ 184.899494][ T7777] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 184.907467][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.949397][ T793] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.998976][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.150954][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.181832][ T793] usb 5-1: config 0 descriptor?? [ 185.730867][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 185.758973][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.771600][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.790356][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.812796][ T29] usb 3-1: config 0 descriptor?? [ 185.921650][ T793] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 186.175065][ T29] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 187.097812][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 187.151002][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 187.171828][ T7796] netlink: 'syz.3.436': attribute type 11 has an invalid length. [ 187.179581][ T7796] netlink: 'syz.3.436': attribute type 13 has an invalid length. [ 187.438939][ T30] audit: type=1400 audit(1774304073.340:405): avc: denied { setopt } for pid=7775 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.469801][ T30] audit: type=1400 audit(1774304073.340:406): avc: denied { read } for pid=7775 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.472401][ T7803] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 187.961254][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.969111][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.038009][ T7796] bridge0: entered allmulticast mode [ 188.381463][ T5813] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 188.435749][ T7803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.442547][ T30] audit: type=1400 audit(1774304074.340:407): avc: denied { connect } for pid=7811 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.478991][ T7815] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 188.586139][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.834807][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.850870][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.920435][ T30] audit: type=1400 audit(1774304074.400:408): avc: denied { bind } for pid=7811 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.942119][ T7813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.984317][ T30] audit: type=1400 audit(1774304074.400:409): avc: denied { listen } for pid=7811 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.086649][ T5864] usb 3-1: USB disconnect, device number 11 [ 189.129646][ T30] audit: type=1400 audit(1774304074.400:410): avc: denied { accept } for pid=7811 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 189.195206][ T7821] fuse: Unknown parameter 'fd0x0000000000000003' [ 189.275735][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 189.352504][ T29] usb 5-1: USB disconnect, device number 10 [ 189.579328][ T30] audit: type=1400 audit(1774304074.470:411): avc: denied { write } for pid=7811 comm="syz.0.440" path="socket:[14751]" dev="sockfs" ino=14751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 190.300937][ T30] audit: type=1400 audit(1774304074.470:412): avc: denied { write } for pid=7811 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 190.396859][ T7829] Invalid ELF header magic: != ELF [ 190.706450][ T30] audit: type=1400 audit(1774304074.470:413): avc: denied { ioctl } for pid=7811 comm="syz.0.440" path="socket:[14751]" dev="sockfs" ino=14751 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 191.061007][ T30] audit: type=1400 audit(1774304074.970:414): avc: denied { setopt } for pid=7811 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 192.161288][ T7857] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 192.191519][ T7859] loop2: detected capacity change from 0 to 7 [ 192.246402][ T5796] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 192.284720][ T5796] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 192.344200][ T5796] Dev loop2: unable to read RDB block 7 [ 192.593316][ T5796] loop2: unable to read partition table [ 192.604731][ T7857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.634092][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 192.634112][ T30] audit: type=1400 audit(1774304078.540:421): avc: denied { remove_name } for pid=7860 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4061 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.672635][ T5796] loop2: partition table beyond EOD, truncated [ 192.681205][ T7859] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 192.709171][ T7859] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 192.738869][ T7859] Dev loop2: unable to read RDB block 7 [ 192.776071][ T7859] loop2: unable to read partition table [ 192.786201][ T30] audit: type=1400 audit(1774304078.570:422): avc: denied { unlink } for pid=7860 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4061 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.832844][ T7859] loop2: partition table beyond EOD, truncated [ 192.875541][ T7859] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 192.999054][ T7872] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 193.029975][ T30] audit: type=1400 audit(1774304078.900:423): avc: denied { bind } for pid=7864 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.469109][ T30] audit: type=1326 audit(1774304079.270:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.4.456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c6a99c799 code=0x0 [ 193.868466][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 194.443457][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 194.461620][ T3091] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.501246][ T30] audit: type=1400 audit(1774304080.400:425): avc: denied { write } for pid=7897 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.869605][ T7915] fuse: Unknown parameter 'fd0x0000000000000003' [ 194.957894][ T3091] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 194.969701][ T3091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.240932][ T3091] usb 1-1: Product: syz [ 195.245131][ T3091] usb 1-1: Manufacturer: syz [ 195.380905][ T3091] usb 1-1: SerialNumber: syz [ 195.834522][ T3091] usb 1-1: config 0 descriptor?? [ 195.858170][ T3091] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 013 [ 195.977967][ T7929] syzkaller1: entered promiscuous mode [ 195.992368][ T7929] syzkaller1: entered allmulticast mode [ 196.018570][ T30] audit: type=1400 audit(1774304081.920:426): avc: denied { create } for pid=7928 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.261052][ T3091] (null): failure reading functionality [ 196.280273][ T3091] i2c i2c-1: connected i2c-tiny-usb device [ 196.441956][ T7942] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 196.451781][ T6345] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 196.514099][ T793] usb 1-1: USB disconnect, device number 13 [ 196.671091][ T6345] usb 4-1: Using ep0 maxpacket: 32 [ 196.685445][ T6345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.685534][ T6345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.710193][ T6345] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 196.721197][ T6345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.051451][ T6345] usb 4-1: config 0 descriptor?? [ 197.128638][ T7950] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 197.362217][ T7950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.562385][ T6345] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 197.590562][ T6345] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 197.600406][ T7958] vlan2: entered allmulticast mode [ 197.652818][ T7958] veth0_to_bond: entered allmulticast mode [ 197.853510][ T6345] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 198.053618][ T6345] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 198.061503][ T7958] bond2: (slave vlan2): making interface the new active one [ 198.123797][ T7958] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 198.327574][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.333431][ T6345] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 198.351339][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.403619][ T6345] ft260 0003:0403:6030.0008: failed to retrieve status: -32 [ 198.455493][ T7986] fuse: Unknown parameter 'fd0x0000000000000003' [ 198.851028][ T6345] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 199.670622][ T8005] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 199.809741][ T793] usb 4-1: USB disconnect, device number 9 [ 200.639686][ T30] audit: type=1400 audit(1774304086.540:427): avc: denied { lock } for pid=8032 comm="syz.0.484" path="socket:[15319]" dev="sockfs" ino=15319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 200.833781][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.054436][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 201.235849][ T5871] usb 2-1: config 250 has an invalid interface number: 230 but max is 0 [ 201.244604][ T5871] usb 2-1: config 250 has no interface number 0 [ 201.251262][ T5871] usb 2-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.342518][ T5871] usb 2-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 201.393518][ T5871] usb 2-1: config 250 interface 230 has no altsetting 0 [ 201.424451][ T5871] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 201.510028][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 201.752478][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.796368][ T5871] usb 2-1: Product: syz [ 201.819158][ T5871] usb 2-1: Manufacturer: syz [ 201.848181][ T5871] usb 2-1: SerialNumber: syz [ 202.135644][ T8008] Invalid ELF header magic: != ELF [ 202.326257][ T5871] ums-usbat 2-1:250.230: USB Mass Storage device detected [ 202.350777][ T5871] ums-usbat 2-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 202.417819][ T5871] ums-usbat 2-1:250.230: probe with driver ums-usbat failed with error -5 [ 202.483025][ T5871] usb 2-1: USB disconnect, device number 7 [ 202.554921][ T8070] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 202.652294][ T5864] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 202.920903][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 202.938738][ T5864] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 202.947305][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.389361][ T5864] usb 1-1: config 0 has no interface number 0 [ 203.401941][ T5864] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 203.434675][ T5864] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 203.474672][ T5864] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 203.510850][ T5864] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 203.554118][ T5864] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 203.584165][ T5864] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 203.619221][ T5864] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 203.710875][ T5864] usb 1-1: config 0 interface 239 has no altsetting 0 [ 203.731173][ T5864] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 203.751118][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.770052][ T5864] usb 1-1: Product: syz [ 203.771202][ T6345] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.780852][ T5864] usb 1-1: Manufacturer: syz [ 203.786264][ T5864] usb 1-1: SerialNumber: syz [ 203.950961][ T6345] usb 2-1: Using ep0 maxpacket: 16 [ 204.048601][ T6345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.050885][ T5864] usb 1-1: config 0 descriptor?? [ 204.059061][ T6345] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.084323][ T6345] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 204.100903][ T6345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.123817][ T6345] usb 2-1: config 0 descriptor?? [ 204.147803][ T8066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 204.156473][ T8066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 204.481728][ T30] audit: type=1326 audit(1774304090.390:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc13379c799 code=0x0 [ 204.704215][ T8066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.741832][ T8066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.754069][ T6345] usb 1-1: USB disconnect, device number 14 [ 204.760096][ T5819] Bluetooth: hci5: BCM: Reset failed (-71) [ 205.163530][ T30] audit: type=1400 audit(1774304091.010:429): avc: denied { execmod } for pid=8099 comm="syz.2.502" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 205.836639][ T8111] 9p: Bad value for 'rfdno' [ 206.233269][ T30] audit: type=1400 audit(1774304092.140:430): avc: denied { mount } for pid=8112 comm="syz.2.506" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 206.277946][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 206.288331][ T30] audit: type=1400 audit(1774304092.170:431): avc: denied { create } for pid=8109 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.311318][ T30] audit: type=1400 audit(1774304092.170:432): avc: denied { setopt } for pid=8109 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.331234][ T30] audit: type=1400 audit(1774304092.170:433): avc: denied { bind } for pid=8109 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.033782][ T793] usb 2-1: USB disconnect, device number 8 [ 207.082600][ T8125] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 207.527589][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 207.751390][ T8125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.828047][ T8136] ip6gre1: entered promiscuous mode [ 207.849672][ T8136] ip6gre1: entered allmulticast mode [ 208.053658][ T8148] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 209.588680][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 209.622547][ T793] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 209.822193][ T8172] syzkaller0: entered promiscuous mode [ 209.827671][ T8172] syzkaller0: entered allmulticast mode [ 209.833550][ T793] usb 3-1: device descriptor read/64, error -71 [ 210.080949][ T793] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 210.240903][ T793] usb 3-1: device descriptor read/64, error -71 [ 210.352705][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 210.372963][ T793] usb usb3-port1: attempt power cycle [ 210.781639][ T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.814079][ T793] usb 3-1: device descriptor read/8, error -71 [ 210.862982][ T5887] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 211.054628][ T5887] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 211.059338][ T8190] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 211.070559][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.085249][ T793] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 211.136398][ T5887] usb 5-1: Product: syz [ 211.140587][ T5887] usb 5-1: Manufacturer: syz [ 211.161220][ T5887] usb 5-1: SerialNumber: syz [ 211.180050][ T793] usb 3-1: device descriptor read/8, error -71 [ 211.201580][ T5887] gspca_main: spca501-2.14.0 probing 0497:c001 [ 211.314473][ T793] usb usb3-port1: unable to enumerate USB device [ 211.405307][ T5887] gspca_spca501: reg write: error -71 [ 211.415858][ T5887] spca501 5-1:68.0: Reg write failed for 0x02,0x07,0x05 [ 211.429647][ T5887] spca501 5-1:68.0: probe with driver spca501 failed with error -22 [ 211.445569][ T5887] usb 5-1: USB disconnect, device number 11 [ 212.901090][ T8208] netlink: 76 bytes leftover after parsing attributes in process `syz.3.536'. [ 212.928737][ T8197] Invalid ELF header magic: != ELF [ 213.379759][ T30] audit: type=1400 audit(1774304098.910:434): avc: denied { mount } for pid=8204 comm="syz.2.534" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 213.410131][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 213.423451][ T30] audit: type=1400 audit(1774304098.920:435): avc: denied { remount } for pid=8204 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 213.700636][ T30] audit: type=1400 audit(1774304099.600:436): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 213.756498][ T8218] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 213.816356][ T3091] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 213.831284][ T5871] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.143218][ T3091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.158173][ T5871] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 214.168265][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.177422][ T3091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.200861][ T5871] usb 4-1: Product: syz [ 214.205294][ T5871] usb 4-1: Manufacturer: syz [ 214.215537][ T5871] usb 4-1: SerialNumber: syz [ 214.220629][ T3091] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.307478][ T3091] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 214.316370][ T5871] usb 4-1: config 0 descriptor?? [ 214.321840][ T3091] usb 1-1: Manufacturer: syz [ 214.330261][ T5871] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 010 [ 214.340703][ T3091] usb 1-1: config 0 descriptor?? [ 214.401102][ T8225] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.542'. [ 214.410427][ T8225] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.542'. [ 214.789484][ T8228] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 214.963364][ T5871] (null): failure reading functionality [ 215.040035][ T5871] i2c i2c-1: connected i2c-tiny-usb device [ 215.249023][ T8228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.260141][ T5871] usb 4-1: USB disconnect, device number 10 [ 215.740946][ T5864] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 215.907123][ T3091] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 215.922022][ T3091] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 215.930140][ T3091] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 215.939157][ T3091] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 215.946956][ T3091] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 215.957856][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.388110][ T3091] usb 1-1: USB disconnect, device number 15 [ 216.395311][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.419046][ T5864] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.455955][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.489899][ T5864] usb 3-1: config 0 descriptor?? [ 216.519985][ T30] audit: type=1400 audit(1774304102.420:437): avc: denied { bind } for pid=8247 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.726581][ T30] audit: type=1400 audit(1774304102.630:438): avc: denied { read write } for pid=8254 comm="syz.4.550" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.751851][ T3091] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.753405][ T30] audit: type=1400 audit(1774304102.630:439): avc: denied { open } for pid=8254 comm="syz.4.550" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.784366][ T30] audit: type=1400 audit(1774304102.660:440): avc: denied { ioctl } for pid=8254 comm="syz.4.550" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.814406][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 216.818479][ T30] audit: type=1400 audit(1774304102.660:441): avc: denied { read } for pid=8254 comm="syz.4.550" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.940939][ T3091] usb 4-1: Using ep0 maxpacket: 8 [ 216.948353][ T3091] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.957286][ T30] audit: type=1400 audit(1774304102.660:442): avc: denied { open } for pid=8254 comm="syz.4.550" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 216.982570][ T3091] usb 4-1: config 4 interface 0 has no altsetting 0 [ 216.993429][ T3091] usb 4-1: string descriptor 0 read error: -22 [ 216.999706][ T3091] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 217.002286][ T30] audit: type=1400 audit(1774304102.720:443): avc: denied { ioctl } for pid=8254 comm="syz.4.550" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.009693][ T3091] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 217.471458][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 217.477423][ T5864] usb 3-1: string descriptor 0 read error: -22 [ 217.485183][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.496143][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.507060][ T5864] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 217.517670][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.530750][ T3091] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 217.540920][ T9] usb 2-1: config 0 descriptor?? [ 217.621765][ T3091] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 217.656768][ T3091] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 217.665124][ T3091] usb 4-1: media controller created [ 217.918927][ T5857] usb 3-1: USB disconnect, device number 16 [ 217.951641][ T3091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.029425][ T8270] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 218.203023][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.289839][ T9] usb 2-1: USB disconnect, device number 9 [ 218.472113][ T30] audit: type=1400 audit(1774304104.360:444): avc: denied { create } for pid=8273 comm="syz.0.554" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 218.540943][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 218.906850][ T8271] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.072594][ T30] audit: type=1400 audit(1774304104.980:445): avc: denied { unlink } for pid=5802 comm="syz-executor" name="file7" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 219.131131][ T3091] zl10353_read_register: readreg error (reg=127, ret==0) [ 219.746274][ T30] audit: type=1400 audit(1774304105.640:446): avc: denied { write } for pid=8284 comm="syz.0.557" name="ipv6_route" dev="proc" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 219.773062][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 220.172045][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 220.491705][ T3091] usb 4-1: USB disconnect, device number 11 [ 221.095966][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 221.197750][ T30] audit: type=1400 audit(1774304107.100:447): avc: denied { create } for pid=8302 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.364544][ T30] audit: type=1400 audit(1774304107.100:448): avc: denied { bind } for pid=8302 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.408565][ T8308] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 221.760228][ T30] audit: type=1400 audit(1774304107.130:449): avc: denied { listen } for pid=8302 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.794287][ T30] audit: type=1400 audit(1774304107.220:450): avc: denied { module_request } for pid=8302 comm="syz.1.563" kmod="crypto-xts(serpent)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 221.821022][ T30] audit: type=1400 audit(1774304107.270:451): avc: denied { read } for pid=8302 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 221.887440][ T30] audit: type=1400 audit(1774304107.650:452): avc: denied { connect } for pid=8313 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 221.952977][ T30] audit: type=1400 audit(1774304107.660:453): avc: denied { write } for pid=8313 comm="syz.0.565" path="socket:[16760]" dev="sockfs" ino=16760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 222.041754][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 222.377806][ T8322] netlink: 76 bytes leftover after parsing attributes in process `syz.4.566'. [ 222.401170][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 222.433328][ T8316] binder: 8313:8316 ioctl c0306201 0 returned -14 [ 222.461638][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 222.482429][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 222.497601][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 222.527728][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 222.594520][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.603305][ T9] usb 3-1: Product: syz [ 222.611052][ T9] usb 3-1: Manufacturer: syz [ 222.615669][ T9] usb 3-1: SerialNumber: syz [ 222.635602][ T9] usb 3-1: config 0 descriptor?? [ 222.689932][ T8332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.982252][ T9] usb 3-1: can't set config #0, error -71 [ 223.124110][ T9] usb 3-1: USB disconnect, device number 17 [ 223.467958][ T8336] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 224.207079][ T8336] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.634848][ T8392] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 225.293739][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 225.310964][ T5887] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 225.370877][ T8411] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 225.386978][ T8412] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 225.920885][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 226.235579][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.251585][ T8411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.263664][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 226.316894][ T5887] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 226.326376][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.368407][ T8419] tipc: Started in network mode [ 226.375015][ T5887] usb 1-1: Product: syz [ 226.379301][ T8419] tipc: Node identity 5e910020f14a, cluster identity 4711 [ 226.388029][ T5887] usb 1-1: Manufacturer: syz [ 226.393910][ T5887] usb 1-1: SerialNumber: syz [ 226.399469][ T8419] tipc: Enabled bearer , priority 0 [ 226.425636][ T5887] usb 1-1: config 0 descriptor?? [ 226.479982][ T8407] tipc: Disabling bearer [ 226.674085][ T8429] loop8: detected capacity change from 0 to 8 [ 226.699545][ T8429] Dev loop8: unable to read RDB block 8 [ 226.712533][ T8435] syzkaller0: entered promiscuous mode [ 226.718119][ T8429] loop8: unable to read partition table [ 226.723998][ T8435] syzkaller0: entered allmulticast mode [ 226.742596][ T8429] loop8: partition table beyond EOD, truncated [ 226.772473][ T8436] Cannot find set identified by id 0 to match [ 226.776756][ T8429] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 226.941700][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.115538][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 227.220973][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 227.240241][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.252601][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.266666][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.272979][ T6345] usb 1-1: USB disconnect, device number 16 [ 227.285721][ T5871] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 227.299163][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.313979][ T5871] usb 4-1: config 0 descriptor?? [ 227.485927][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.593'. [ 227.926656][ T5871] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 227.937931][ T5871] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 228.190963][ T5871] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 228.197670][ T5871] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 228.220946][ T5871] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 228.238009][ T5871] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 228.255513][ T5871] kye 0003:0458:0087.000B: unknown global tag 0xe [ 228.285464][ T5871] kye 0003:0458:0087.000B: item 0 0 1 14 parsing failed [ 228.324841][ T5871] kye 0003:0458:0087.000B: parse failed [ 228.355419][ T5871] kye 0003:0458:0087.000B: probe with driver kye failed with error -22 [ 228.389508][ T8460] capability: warning: `syz.4.597' uses deprecated v2 capabilities in a way that may be insecure [ 229.179482][ T8475] loop2: detected capacity change from 0 to 7 [ 229.186240][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 229.217443][ T8475] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 229.273674][ T8475] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 229.529903][ T8475] Dev loop2: unable to read RDB block 7 [ 229.549406][ T8475] loop2: unable to read partition table [ 229.567748][ T8475] loop2: partition table beyond EOD, truncated [ 229.618506][ T8475] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 229.853159][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 230.062598][ T8486] loop8: detected capacity change from 0 to 8 [ 230.082122][ T8486] Dev loop8: unable to read RDB block 8 [ 230.092823][ T8486] loop8: unable to read partition table [ 230.098684][ T8486] loop8: partition table beyond EOD, truncated [ 230.111254][ T8486] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 230.311576][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 230.413522][ T5871] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 230.842822][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 230.874147][ T5871] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 230.906439][ T5871] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.919959][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.950295][ T8484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.967270][ T8484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 230.996331][ T8498] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 231.008257][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.663294][ T8496] Invalid ELF header magic: != ELF [ 232.093918][ T8498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.227017][ T9] usb 4-1: USB disconnect, device number 12 [ 232.295926][ T5871] usb 5-1: USB disconnect, device number 12 [ 233.172382][ T8518] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 233.194627][ T8518] tipc: Enabled bearer , priority 0 [ 233.240641][ T8517] tipc: Disabling bearer [ 233.251692][ T8522] tmpfs: Unknown parameter '+7Y7NwIɆ.vN?0x0000000000000000' [ 233.382203][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 233.382219][ T30] audit: type=1400 audit(1774304119.290:459): avc: denied { append } for pid=8525 comm="syz.3.616" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.591236][ T5887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.752655][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 233.762818][ T5871] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 233.763112][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.790753][ T5887] usb 2-1: config 0 has no interface number 0 [ 233.841001][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.921875][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.967763][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 233.980170][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.120961][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 234.376207][ T5871] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 234.385619][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.398074][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.437398][ T5871] usb 1-1: config 0 descriptor?? [ 234.438950][ T5887] usb 2-1: config 0 descriptor?? [ 234.676166][ T30] audit: type=1400 audit(1774304120.580:460): avc: denied { read } for pid=8552 comm="syz.2.624" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.682915][ T8524] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 235.174734][ T5871] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 235.201359][ T8524] netlink: 'syz.1.615': attribute type 2 has an invalid length. [ 235.209026][ T8524] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 235.250908][ T8524] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 235.415466][ T9] usb 1-1: USB disconnect, device number 17 [ 235.596150][ T5871] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 235.648279][ T30] audit: type=1400 audit(1774304121.550:461): avc: denied { ioctl } for pid=8567 comm="syz.3.627" path="socket:[17144]" dev="sockfs" ino=17144 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.100419][ T30] audit: type=1400 audit(1774304121.580:462): avc: denied { connect } for pid=8567 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.100466][ T30] audit: type=1400 audit(1774304121.580:463): avc: denied { write } for pid=8567 comm="syz.3.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.100499][ T30] audit: type=1400 audit(1774304121.580:464): avc: denied { read } for pid=8567 comm="syz.3.627" path="socket:[17144]" dev="sockfs" ino=17144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.385037][ T5871] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 236.400956][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.408971][ T5871] usb 5-1: Product: syz [ 236.456308][ T5871] usb 5-1: Manufacturer: syz [ 236.500846][ T5871] usb 5-1: SerialNumber: syz [ 236.538801][ T5871] usb 5-1: config 0 descriptor?? [ 236.562868][ T5887] usbhid 2-1:0.1: can't add hid device: -71 [ 236.571249][ T5871] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 013 [ 236.581023][ T5887] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 236.711821][ T5887] usb 2-1: USB disconnect, device number 10 [ 237.109533][ T5871] (null): failure reading functionality [ 237.186745][ T5871] i2c i2c-1: connected i2c-tiny-usb device [ 237.371107][ T30] audit: type=1400 audit(1774304123.280:465): avc: denied { getopt } for pid=8582 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.461566][ T29] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 237.500159][ T5887] usb 5-1: USB disconnect, device number 13 [ 237.640870][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 237.765979][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 237.909437][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.947805][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 237.999683][ T29] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 238.048803][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.096382][ T29] usb 3-1: Product: syz [ 238.112092][ T29] usb 3-1: Manufacturer: syz [ 238.132218][ T29] usb 3-1: SerialNumber: syz [ 238.152233][ T29] usb 3-1: config 0 descriptor?? [ 239.075649][ T8605] loop2: detected capacity change from 0 to 7 [ 239.147276][ T8605] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 239.294298][ T5871] usb 3-1: USB disconnect, device number 18 [ 239.534511][ T8605] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 239.550575][ T8605] Dev loop2: unable to read RDB block 7 [ 239.556393][ T8605] loop2: unable to read partition table [ 239.580772][ T8605] loop2: partition table beyond EOD, truncated [ 239.610224][ T8605] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 239.812314][ T8616] FAULT_INJECTION: forcing a failure. [ 239.812314][ T8616] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 239.825666][ T8616] CPU: 1 UID: 0 PID: 8616 Comm: syz.3.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.825693][ T8616] Tainted: [L]=SOFTLOCKUP [ 239.825699][ T8616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.825709][ T8616] Call Trace: [ 239.825715][ T8616] [ 239.825722][ T8616] dump_stack_lvl+0x100/0x190 [ 239.825756][ T8616] should_fail_ex.cold+0x5/0xa [ 239.825781][ T8616] _copy_from_user+0x2e/0xd0 [ 239.825801][ T8616] copy_arg_from_user+0x53/0xa0 [ 239.825828][ T8616] ? __pfx_copy_arg_from_user+0x10/0x10 [ 239.825854][ T8616] media_device_ioctl+0x1cf/0x490 [ 239.825883][ T8616] ? __pfx_media_device_ioctl+0x10/0x10 [ 239.825937][ T8616] ? __pfx_media_ioctl+0x10/0x10 [ 239.825956][ T8616] ? __pfx_media_device_ioctl+0x10/0x10 [ 239.825982][ T8616] media_ioctl+0xf4/0x150 [ 239.825998][ T8616] ? __pfx_media_ioctl+0x10/0x10 [ 239.826016][ T8616] __x64_sys_ioctl+0x18e/0x210 [ 239.826045][ T8616] do_syscall_64+0x106/0xf80 [ 239.826069][ T8616] ? clear_bhb_loop+0x40/0x90 [ 239.826091][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.826108][ T8616] RIP: 0033:0x7fc330b9c799 [ 239.826123][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.826139][ T8616] RSP: 002b:00007fc3319be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.826156][ T8616] RAX: ffffffffffffffda RBX: 00007fc330e16180 RCX: 00007fc330b9c799 [ 239.826167][ T8616] RDX: 0000200000000400 RSI: 00000000c0287c02 RDI: 0000000000000009 [ 239.826177][ T8616] RBP: 00007fc3319be090 R08: 0000000000000000 R09: 0000000000000000 [ 239.826188][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.826198][ T8616] R13: 00007fc330e16218 R14: 00007fc330e16180 R15: 00007ffe6b1c1948 [ 239.826221][ T8616] [ 240.683994][ T8631] netlink: 64 bytes leftover after parsing attributes in process `syz.3.645'. [ 240.694585][ T8628] netlink: 76 bytes leftover after parsing attributes in process `syz.2.644'. [ 241.164575][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 241.721039][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 241.993438][ T8645] syzkaller0: entered promiscuous mode [ 241.998956][ T8645] syzkaller0: entered allmulticast mode [ 242.195101][ T29] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 242.205018][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.213138][ T29] usb 5-1: Product: syz [ 242.217347][ T29] usb 5-1: Manufacturer: syz [ 242.222893][ T29] usb 5-1: SerialNumber: syz [ 242.229937][ T29] usb 5-1: config 0 descriptor?? [ 242.237816][ T29] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 014 [ 242.703882][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 242.718221][ T29] (null): failure reading functionality [ 242.744962][ T29] i2c i2c-1: connected i2c-tiny-usb device [ 242.756002][ T8656] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 242.870157][ T8654] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 243.031709][ T5857] usb 5-1: USB disconnect, device number 14 [ 243.038378][ T8654] netlink: 'syz.3.646': attribute type 2 has an invalid length. [ 243.620373][ T30] audit: type=1400 audit(1774304129.520:466): avc: denied { connect } for pid=8634 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.658608][ T30] audit: type=1400 audit(1774304129.550:467): avc: denied { write } for pid=8634 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.693564][ T30] audit: type=1400 audit(1774304129.550:468): avc: denied { getopt } for pid=8634 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.563592][ T8687] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 244.580324][ T8688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.661'. [ 245.105693][ T29] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 245.145013][ T29] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.508242][ T8706] mmap: syz.3.665 (8706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.812488][ T30] audit: type=1400 audit(1774304132.710:469): avc: denied { ioctl } for pid=8707 comm="syz.3.666" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 247.195606][ T30] audit: type=1400 audit(1774304133.080:470): avc: denied { ioctl } for pid=8715 comm="syz.2.669" path="socket:[17368]" dev="sockfs" ino=17368 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 247.234550][ T8718] bond0: (slave bond_slave_1): Releasing backup interface [ 247.398522][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.406184][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.525836][ T5857] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.760924][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 247.769519][ T5857] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 247.784164][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.803068][ T8729] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 247.851993][ T5857] usb 2-1: Product: syz [ 247.914943][ T30] audit: type=1400 audit(1774304133.820:471): avc: denied { ioctl } for pid=8727 comm="syz.0.672" path="socket:[18491]" dev="sockfs" ino=18491 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.947436][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.956182][ T5857] usb 2-1: Manufacturer: syz [ 247.960323][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.980646][ T5857] usb 2-1: SerialNumber: syz [ 247.987599][ T5857] usb 2-1: config 0 descriptor?? [ 248.201228][ T5857] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 248.226442][ T5857] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 248.279005][ T5857] usb 2-1: USB disconnect, device number 11 [ 248.490485][ T5983] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.006127][ T6004] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.045440][ T6004] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.503622][ T30] audit: type=1400 audit(1774304135.110:472): avc: denied { ioctl } for pid=8747 comm="syz.1.677" path="socket:[18529]" dev="sockfs" ino=18529 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.567880][ T6004] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.567899][ T8750] can0: slcan on ttyS3. [ 250.013145][ T8747] can0 (unregistered): slcan off ttyS3. [ 250.143006][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.150884][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.155549][ T5857] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 250.200046][ T8768] netlink: 68 bytes leftover after parsing attributes in process `syz.3.683'. [ 250.220952][ T30] audit: type=1326 audit(1774304136.120:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 250.244077][ T8768] netlink: 64 bytes leftover after parsing attributes in process `syz.3.683'. [ 250.255089][ T5857] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.284280][ T30] audit: type=1326 audit(1774304136.120:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c6a95cfce code=0x7ffc0000 [ 250.416112][ T30] audit: type=1326 audit(1774304136.120:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 250.534120][ T30] audit: type=1326 audit(1774304136.120:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 250.619694][ T30] audit: type=1326 audit(1774304136.120:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 250.659223][ T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 250.680962][ T30] audit: type=1326 audit(1774304136.120:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 250.752430][ T30] audit: type=1326 audit(1774304136.120:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 250.829593][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.875284][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.894735][ T29] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 251.070131][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.078712][ T30] audit: type=1326 audit(1774304136.120:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c6a95cfce code=0x7ffc0000 [ 251.111712][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 251.122085][ T29] usb 3-1: config 0 descriptor?? [ 251.135474][ T30] audit: type=1326 audit(1774304136.120:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8761 comm="syz.4.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6a99c799 code=0x7ffc0000 [ 251.184186][ T8788] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 251.536797][ T29] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 251.571615][ T29] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 251.746000][ T29] cp2112 0003:10C4:EA90.000E: error requesting version [ 251.761204][ T5857] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.780888][ T29] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 251.826324][ T29] usb 3-1: USB disconnect, device number 19 [ 251.947687][ T5857] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.959081][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 251.969125][ T5857] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.982020][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.990681][ T5857] usb 4-1: Product: syz [ 252.014011][ T5857] usb 4-1: Manufacturer: syz [ 252.030123][ T5857] usb 4-1: SerialNumber: syz [ 252.068486][ T5857] usb 4-1: config 0 descriptor?? [ 252.110264][ T8819] kvm: pic: single mode not supported [ 252.110451][ T8819] kvm: pic: non byte read [ 252.119350][ T5857] usb 4-1: selecting invalid altsetting 0 [ 252.139796][ T8819] kvm: pic: level sensitive irq not supported [ 252.139866][ T8819] kvm: pic: non byte read [ 252.170089][ T8819] kvm: pic: non byte read [ 252.185375][ T8819] kvm: pic: non byte read [ 252.191588][ T8819] kvm: pic: single mode not supported [ 252.191654][ T8819] kvm: pic: non byte read [ 252.204700][ T8819] kvm: pic: non byte read [ 252.209332][ T8819] kvm: pic: non byte read [ 252.215003][ T8819] kvm: pic: non byte read [ 252.344569][ T5857] usb 4-1: USB disconnect, device number 13 [ 254.871120][ T29] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 255.036905][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.052043][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.072397][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.276364][ T29] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 255.324936][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 255.375140][ T29] usb 2-1: Product: syz [ 255.402172][ T29] usb 2-1: Manufacturer: syz [ 255.440984][ T29] usb 2-1: SerialNumber: syz [ 255.477569][ T29] usb 2-1: config 0 descriptor?? [ 258.580365][ T5857] usb 2-1: USB disconnect, device number 12 [ 258.816377][ T8885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.010915][ T3091] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 259.366162][ T3091] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.632994][ T3091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 259.737062][ T3091] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 259.814603][ T3091] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 259.823889][ T3091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.850192][ T3091] usb 5-1: config 0 descriptor?? [ 260.465109][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 260.465141][ T30] audit: type=1400 audit(1774304145.870:486): avc: denied { read } for pid=8898 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.521748][ T9] usb 5-1: USB disconnect, device number 15 [ 260.991469][ T8913] Bluetooth: MGMT ver 1.23 [ 261.180899][ T793] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 261.376972][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 261.401424][ T793] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.431513][ T793] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.454999][ T793] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 261.492514][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.582262][ T793] usb 3-1: config 0 descriptor?? [ 262.407785][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 262.499867][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 262.507469][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 262.606438][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 262.613862][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 262.630663][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 263.790919][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 263.879244][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 263.887011][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 263.895778][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 263.908060][ T793] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 264.629388][ T5809] Bluetooth: hci5: command 0xfc11 tx timeout [ 264.751415][ T5819] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 264.896825][ T30] audit: type=1400 audit(1774304150.730:487): avc: denied { watch } for pid=8940 comm="syz.3.729" path="/134" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 264.922373][ T793] logitech 0003:046D:C50C.000F: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 264.936775][ T793] usb 3-1: USB disconnect, device number 20 [ 266.084267][ T8956] fido_id[8956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 266.303419][ T30] audit: type=1400 audit(1774304152.140:488): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 266.670898][ T793] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 266.737396][ T8967] Cannot find set identified by id 1 to match [ 267.518178][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.829869][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.950230][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.981013][ T793] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.990065][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.028832][ T793] usb 4-1: config 0 descriptor?? [ 268.541073][ T8986] Cannot find set identified by id 0 to match [ 268.817326][ T793] usbhid 4-1:0.0: can't add hid device: -71 [ 268.843503][ T793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 268.920908][ T793] usb 4-1: USB disconnect, device number 14 [ 269.161071][ T5887] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 269.266817][ T30] audit: type=1400 audit(1774304155.050:489): avc: denied { map } for pid=8990 comm="syz.3.742" path="socket:[18367]" dev="sockfs" ino=18367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 269.354619][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 269.459707][ T9001] bridge0: port 3(vlan3) entered blocking state [ 269.486071][ T9001] bridge0: port 3(vlan3) entered disabled state [ 269.519083][ T9001] vlan3: entered allmulticast mode [ 269.533194][ T9001] bond0: entered allmulticast mode [ 269.538310][ T9001] bond_slave_0: entered allmulticast mode [ 269.562001][ T9001] vlan3: entered promiscuous mode [ 269.567032][ T9001] bond0: entered promiscuous mode [ 269.589853][ T9001] bond_slave_0: entered promiscuous mode [ 269.590860][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 269.606780][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.619316][ T5887] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.628759][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 269.642738][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.652954][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 269.664981][ T5887] usb 3-1: config 0 descriptor?? [ 269.669971][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 269.701791][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.722328][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 269.746522][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 269.827340][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 269.836603][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.866062][ T24] usb 1-1: config 0 descriptor?? [ 269.990940][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.037548][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.201684][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 270.208371][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 270.253572][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 270.266547][ T5887] usb 3-1: USB disconnect, device number 21 [ 270.390418][ T30] audit: type=1400 audit(1774304156.290:490): avc: denied { read write } for pid=8994 comm="syz.0.741" name="lp0" dev="devtmpfs" ino=3119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 270.433990][ T30] audit: type=1400 audit(1774304156.290:491): avc: denied { open } for pid=8994 comm="syz.0.741" path="/dev/usb/lp0" dev="devtmpfs" ino=3119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 270.492719][ T5871] usb 1-1: USB disconnect, device number 18 [ 270.506087][ T5871] usblp0: removed [ 270.670981][ T5887] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 270.802480][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 270.811829][ T30] audit: type=1400 audit(1774304156.680:492): avc: denied { setopt } for pid=9023 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.831724][ T30] audit: type=1400 audit(1774304156.710:493): avc: denied { connect } for pid=9023 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.911019][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 270.938854][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.955921][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.972903][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.985813][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 270.997001][ T5887] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 271.008238][ T24] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.028220][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.035483][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.047797][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.091642][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.104259][ T5887] usb 5-1: config 0 descriptor?? [ 271.184276][ T24] usb 3-1: config 0 descriptor?? [ 271.736728][ T24] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 271.769103][ T5887] nintendo 0003:057E:2019.0010: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 271.859545][ C1] ================================================================== [ 271.867642][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0x103c/0x10a0 [ 271.875293][ C1] Read of size 1 at addr ffff888051d37fff by task syz-executor/5806 [ 271.883272][ C1] [ 271.885599][ C1] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 271.885631][ C1] Tainted: [L]=SOFTLOCKUP [ 271.885639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.885651][ C1] Call Trace: [ 271.885659][ C1] [ 271.885667][ C1] dump_stack_lvl+0x100/0x190 [ 271.885701][ C1] print_report+0x156/0x4c9 [ 271.885728][ C1] ? __virt_addr_valid+0x81/0x620 [ 271.885758][ C1] ? __phys_addr+0xe8/0x180 [ 271.885787][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 271.885821][ C1] kasan_report+0xdf/0x1e0 [ 271.885843][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 271.885875][ C1] mcp2221_raw_event+0x103c/0x10a0 [ 271.885902][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 271.885931][ C1] __hid_input_report.constprop.0+0x314/0x460 [ 271.885954][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 271.885982][ C1] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 271.886012][ C1] hid_irq_in+0x52e/0x6b0 [ 271.886044][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 271.886076][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 271.886107][ C1] dummy_timer+0xd85/0x3670 [ 271.886138][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 271.886157][ C1] ? rcu_is_watching+0x12/0xc0 [ 271.886180][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 271.886205][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 271.886225][ C1] __hrtimer_run_queues+0x50e/0xa70 [ 271.886250][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 271.886273][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 271.886294][ C1] hrtimer_run_softirq+0x17d/0x350 [ 271.886316][ C1] handle_softirqs+0x1eb/0x9e0 [ 271.886341][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 271.886367][ C1] __irq_exit_rcu+0xef/0x150 [ 271.886391][ C1] irq_exit_rcu+0x9/0x30 [ 271.886415][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 271.886441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.886464][ C1] RIP: 0033:0x7fe065a6a7a8 [ 271.886481][ C1] Code: 49 c1 e5 03 e8 a9 ad 12 00 85 c0 0f 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 <48> 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 48 8b 44 24 18 48 c1 [ 271.886500][ C1] RSP: 002b:00007ffc131e4440 EFLAGS: 00000a07 [ 271.886519][ C1] RAX: 0000001b2f224000 RBX: 00000000000001dc RCX: 000000000000cc18 [ 271.886533][ C1] RDX: 000000000d1aedc2 RSI: 00007fe0659f8010 RDI: 0030fa4eee773874 [ 271.886546][ C1] RBP: 00007ffc131e447c R08: 0000000000000000 R09: 0000000000000000 [ 271.886559][ C1] R10: 00007fe0659f8000 R11: 0000000000000001 R12: 0000000000001388 [ 271.886570][ C1] R13: 00000000000927c0 R14: 00000000000425a4 R15: 00007ffc131e44d0 [ 271.886589][ C1] [ 271.886596][ C1] [ 272.146071][ C1] The buggy address belongs to the physical page: [ 272.152453][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51d37 [ 272.161187][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 272.168289][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 272.176847][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 272.185397][ C1] page dumped because: kasan: bad access detected [ 272.191792][ C1] page_owner tracks the page as freed [ 272.197128][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 151, tgid 151 (kworker/u8:6), ts 63196816991, free_ts 192846603702 [ 272.214902][ C1] post_alloc_hook+0x153/0x170 [ 272.219667][ C1] get_page_from_freelist+0x111d/0x3140 [ 272.225196][ C1] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 272.231076][ C1] alloc_pages_mpol+0x1fb/0x550 [ 272.235913][ C1] ___kmalloc_large_node+0x104/0x150 [ 272.241181][ C1] __kmalloc_large_noprof+0x1c/0x70 [ 272.246365][ C1] __sta_info_alloc+0xae8/0x1cd0 [ 272.251277][ C1] ieee80211_ibss_add_sta+0x2e9/0x710 [ 272.256627][ C1] ieee80211_ibss_rx_queued_mgmt+0x2543/0x2f80 [ 272.262750][ C1] ieee80211_iface_work+0xbff/0x13d0 [ 272.268004][ C1] cfg80211_wiphy_work+0x446/0x5c0 [ 272.273091][ C1] process_one_work+0xa23/0x19a0 [ 272.277999][ C1] worker_thread+0x5ef/0xe50 [ 272.282561][ C1] kthread+0x370/0x450 [ 272.286608][ C1] ret_from_fork+0x754/0xd80 [ 272.291170][ C1] ret_from_fork_asm+0x1a/0x30 [ 272.295907][ C1] page last free pid 7813 tgid 7811 stack trace: [ 272.302202][ C1] __free_frozen_pages+0x7e1/0x10d0 [ 272.307375][ C1] sta_info_free+0x25f/0x420 [ 272.311947][ C1] __sta_info_flush+0x4f6/0x720 [ 272.316795][ C1] ieee80211_ibss_disconnect+0x169/0xba0 [ 272.322403][ C1] ieee80211_ibss_leave+0x4a/0x160 [ 272.327487][ C1] cfg80211_leave_ibss+0x1ab/0x4c0 [ 272.332573][ C1] cfg80211_leave+0x11a/0x450 [ 272.337227][ C1] cfg80211_netdev_notifier_call+0x560/0x11d0 [ 272.343262][ C1] notifier_call_chain+0x99/0x420 [ 272.348262][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 272.354146][ C1] __dev_close_many+0xff/0x700 [ 272.358884][ C1] netif_close_many+0x233/0x630 [ 272.363709][ C1] netif_close+0x17f/0x230 [ 272.368101][ C1] dev_close+0xaa/0x240 [ 272.372229][ C1] cfg80211_shutdown_all_interfaces+0x9a/0x200 [ 272.378362][ C1] cfg80211_rfkill_set_block+0x35/0x50 [ 272.383798][ C1] [ 272.386096][ C1] Memory state around the buggy address: [ 272.391696][ C1] ffff888051d37e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.399728][ C1] ffff888051d37f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.407759][ C1] >ffff888051d37f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.415787][ C1] ^ [ 272.423748][ C1] ffff888051d38000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 272.431811][ C1] ffff888051d38080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 272.439853][ C1] ================================================================== [ 272.447909][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 272.455083][ C1] CPU: 1 UID: 0 PID: 5806 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 272.466087][ C1] Tainted: [L]=SOFTLOCKUP [ 272.470385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.480421][ C1] Call Trace: [ 272.483681][ C1] [ 272.486593][ C1] dump_stack_lvl+0x100/0x190 [ 272.491262][ C1] vpanic+0x552/0x970 [ 272.495224][ C1] ? __pfx_vpanic+0x10/0x10 [ 272.499707][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 272.504717][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 272.509988][ C1] panic+0xd1/0xe0 [ 272.513686][ C1] ? __pfx_panic+0x10/0x10 [ 272.518081][ C1] ? end_report.part.0+0x23/0x90 [ 272.523004][ C1] ? rcu_is_watching+0x12/0xc0 [ 272.527750][ C1] ? end_report.part.0+0x23/0x90 [ 272.532675][ C1] check_panic_on_warn.cold+0x19/0x34 [ 272.538028][ C1] end_report.part.0+0x3a/0x90 [ 272.542776][ C1] kasan_report.cold+0xe/0x18 [ 272.547442][ C1] ? mcp2221_raw_event+0x103c/0x10a0 [ 272.552716][ C1] mcp2221_raw_event+0x103c/0x10a0 [ 272.557816][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 272.563608][ C1] __hid_input_report.constprop.0+0x314/0x460 [ 272.569659][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 272.575105][ C1] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 272.580640][ C1] hid_irq_in+0x52e/0x6b0 [ 272.584958][ C1] __usb_hcd_giveback_urb+0x38d/0x610 [ 272.590319][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 272.595504][ C1] dummy_timer+0xd85/0x3670 [ 272.599995][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 272.604915][ C1] ? rcu_is_watching+0x12/0xc0 [ 272.609661][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 272.615453][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 272.620811][ C1] __hrtimer_run_queues+0x50e/0xa70 [ 272.625994][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 272.631718][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 272.637767][ C1] hrtimer_run_softirq+0x17d/0x350 [ 272.642859][ C1] handle_softirqs+0x1eb/0x9e0 [ 272.647610][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 272.652884][ C1] __irq_exit_rcu+0xef/0x150 [ 272.657458][ C1] irq_exit_rcu+0x9/0x30 [ 272.661683][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 272.667300][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 272.673266][ C1] RIP: 0033:0x7fe065a6a7a8 [ 272.677664][ C1] Code: 49 c1 e5 03 e8 a9 ad 12 00 85 c0 0f 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 <48> 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 48 8b 44 24 18 48 c1 [ 272.697255][ C1] RSP: 002b:00007ffc131e4440 EFLAGS: 00000a07 [ 272.703303][ C1] RAX: 0000001b2f224000 RBX: 00000000000001dc RCX: 000000000000cc18 [ 272.711254][ C1] RDX: 000000000d1aedc2 RSI: 00007fe0659f8010 RDI: 0030fa4eee773874 [ 272.719204][ C1] RBP: 00007ffc131e447c R08: 0000000000000000 R09: 0000000000000000 [ 272.727155][ C1] R10: 00007fe0659f8000 R11: 0000000000000001 R12: 0000000000001388 [ 272.735105][ C1] R13: 00000000000927c0 R14: 00000000000425a4 R15: 00007ffc131e44d0 [ 272.743062][ C1] [ 272.746337][ C1] Kernel Offset: disabled [ 272.750633][ C1] Rebooting in 86400 seconds..