last executing test programs: 4m19.040856648s ago: executing program 0 (id=1699): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2dec, 0x4800, 0x2, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m18.027562297s ago: executing program 0 (id=1702): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @remote, @mcast2}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x240008d4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xe0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) 4m17.714509513s ago: executing program 0 (id=1704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) 4m17.571444917s ago: executing program 0 (id=1706): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4c21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0x4, 0x0, 0x0, 0x54c6c7f3, 0xfe, 0x2, 0x1, 0xd5f, 0x89, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x20001002, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x8004086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000200)='./file1\x00', 0x0, 0x4018, r1}, 0x14) r4 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x10048, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4m17.228828575s ago: executing program 0 (id=1709): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x5069f481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0x1, 0x0, 0x0, 0x2}]) dup3(r2, r0, 0x0) 4m16.315704668s ago: executing program 0 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2dec, 0x4800, 0x2, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m15.075701873s ago: executing program 32 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r4 = dup(r3) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1c58, &(0x7f0000000300)={0x0, 0x4ac1, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2dec, 0x4800, 0x2, 0x0, 0x0) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 31.303792665s ago: executing program 4 (id=2846): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$int_in(r0, 0x5452, 0x0) 30.566253646s ago: executing program 4 (id=2850): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000000), 0x0, 0x0, 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB]) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) 25.234559983s ago: executing program 4 (id=2872): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080845000028006500000f06bd78640101c23e2f5670", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 22.222139336s ago: executing program 4 (id=2886): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0x4, 0x0, 0x0, 0x54c6c7f3, 0xfe, 0x2, 0x1, 0xd5f, 0x89, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x20001002, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x8004086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x10048, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) io_setup(0x8b, &(0x7f0000000000)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 20.554709836s ago: executing program 4 (id=2893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 19.71576187s ago: executing program 4 (id=2903): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)) 19.065892713s ago: executing program 33 (id=2903): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000400)) 13.383168119s ago: executing program 3 (id=2931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x2, 0x4) 13.167372676s ago: executing program 3 (id=2933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 13.036281218s ago: executing program 3 (id=2935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4a9ba21d5214c4a6c936bc78f2f59c7a1bf221a1171c6cd4881942dd7acb7803ad6a8f4b8841bc19b805d9ab9765bd220c0b6ac8b051815481268175ff7409d4b1bf71b36818e8bf3c1", 0xfffffffffffffd2e, 0x20044801, 0x0, 0x0) 12.06286916s ago: executing program 3 (id=2937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 11.176225201s ago: executing program 3 (id=2940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000340)="a0eb", 0x2, 0x40010, &(0x7f0000000400)={0xa, 0x4e22, 0x3, @private0}, 0x1c) sendto$inet6(r0, &(0x7f0000000640)='1', 0x1, 0x880, &(0x7f0000000740)={0xa, 0x4e23, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1d}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.055251274s ago: executing program 3 (id=2946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000008, 0x11012, r1, 0x0) futex(0x0, 0x9, 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) 8.838570913s ago: executing program 1 (id=2952): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.134140397s ago: executing program 1 (id=2959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r5 = dup(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r5, r2, 0x0, 0x40008) 4.336096768s ago: executing program 5 (id=2963): r0 = fsopen(&(0x7f0000000140)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='acl\x00', 0x0, 0xffffffffffffff9c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x26c6, &(0x7f0000000240)={0x0, 0x3e05, 0x800, 0x3, 0x184, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000400)) r4 = syz_io_uring_setup(0x38ff, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffa, 0x10a2) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) setrlimit(0xd, &(0x7f0000000080)={0x3, 0xf}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)="90"}) 4.047894532s ago: executing program 1 (id=2964): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000280), 0x20c00, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7ffe}, 0xffffffffffffffeb) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x11) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000100001000000000000000000ff010000000000000000000000000001000000000000000000000000000000010003ffff4e2410000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0], 0x154}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0xf0, 0x67) 3.591360818s ago: executing program 6 (id=2966): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x10000000, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 3.367508029s ago: executing program 6 (id=2968): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRES32=r0, @ANYBLOB="0c00ed00030000000000000008003f", @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5189f75c863271e1bf36c11da94a91a9711"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) 3.355851978s ago: executing program 5 (id=2969): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, r1) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 3.309836873s ago: executing program 6 (id=2970): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB]) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) 2.405629559s ago: executing program 1 (id=2971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4040089}, 0x20000000) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.253675741s ago: executing program 5 (id=2972): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0x578ae82fb8259cfb}, 0x8010) 2.018349707s ago: executing program 2 (id=2973): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB="08000a000694"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.542302948s ago: executing program 1 (id=2974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0xb1}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.500588354s ago: executing program 2 (id=2975): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$char_usb(r0, &(0x7f0000000040)=""/188, 0xbc) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 858.062322ms ago: executing program 5 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 705.148349ms ago: executing program 5 (id=2977): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x7ff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 571.662586ms ago: executing program 1 (id=2978): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) 518.071819ms ago: executing program 2 (id=2979): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x15}, @TCA_PIE_ALPHA={0x8, 0x4, 0x15}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) 498.834737ms ago: executing program 5 (id=2980): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r0, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) 427.837066ms ago: executing program 6 (id=2982): capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 404.570463ms ago: executing program 2 (id=2983): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r1, 0xffffffffffffffff, 0x0) 314.114305ms ago: executing program 6 (id=2984): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff0400d10008000000080003", @ANYRES32=r2], 0x20}}, 0x0) 103.847749ms ago: executing program 2 (id=2985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 100.398806ms ago: executing program 6 (id=2986): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000001380)=[{0x0}], 0x1, 0x8, 0xfffffff6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0xf}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000010401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800fa0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf639d1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40094) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0xffffffff) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000012c0)={0x5c, r6, 'id1\x00'}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x802, 0x7fffffff, 0x0, 0x0, [], [0x0, 0x5, 0x40, 0x546], [0xffb, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x200000000000400]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 0s ago: executing program 2 (id=2987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x1115, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) kernel console output (not intermixed with test programs): s invalid maxpacket 1160, setting to 1024 [ 280.424134][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.473243][ T5953] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.501673][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.534503][ T89] usb 6-1: USB disconnect, device number 2 [ 280.594670][ T5953] usb 3-1: config 0 descriptor?? [ 280.600248][T11189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 281.013083][T11235] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 281.019622][T11235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 281.031263][T11235] vhci_hcd vhci_hcd.0: Device attached [ 281.109215][T11239] tipc: Enabled bearer , priority 0 [ 281.192392][T11238] tipc: Resetting bearer [ 281.210580][ T5953] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 281.321959][ T7939] usb 40-1: SetAddress Request (3) to port 0 [ 281.361944][ T7939] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 281.384128][T11248] fuse: Bad value for 'fd' [ 281.591692][T11236] vhci_hcd: connection reset by peer [ 281.603813][ T4125] vhci_hcd vhci_hcd.3: stop threads [ 281.610222][ T4125] vhci_hcd vhci_hcd.3: release socket [ 281.634617][ T4125] vhci_hcd vhci_hcd.3: disconnect device [ 282.025826][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1781'. [ 282.240755][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1782'. [ 282.407720][T11189] usb 3-1: string descriptor 0 read error: -71 [ 282.428464][T10498] udevd[10498]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 283.181545][ T7844] usb 3-1: USB disconnect, device number 11 [ 283.356738][T11238] tipc: Disabling bearer [ 283.410276][T11274] netdevsim netdevsim3: Direct firmware load for / [ 283.410276][T11274] failed with error -2 [ 283.505909][T11274] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 283.505909][T11274] [ 284.590946][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 284.590961][ T30] audit: type=1400 audit(1765550719.395:787): avc: denied { write } for pid=11299 comm="syz.1.1790" name="netstat" dev="proc" ino=4026533096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 284.932814][ T7844] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 285.081297][T11313] mkiss: ax0: crc mode is auto. [ 285.092569][ T7844] usb 4-1: Using ep0 maxpacket: 32 [ 285.107358][ T7844] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 285.133727][ T7844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.159915][ T7844] usb 4-1: config 0 descriptor?? [ 285.288721][T11323] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.350115][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1795'. [ 285.381038][T11323] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.402266][ T7844] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 285.419842][ T7844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.447584][ T7844] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 285.470955][ T7844] usb 4-1: media controller created [ 285.474165][T11323] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.535202][ T7844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.616510][T11336] tipc: Started in network mode [ 285.638853][T11336] tipc: Node identity c20d3ba1c1d5, cluster identity 4711 [ 285.680294][T11336] tipc: Enabled bearer , priority 0 [ 285.689526][T11323] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.708518][T11333] tipc: Resetting bearer [ 286.412560][ T7939] usb 40-1: device descriptor read/8, error -110 [ 286.441908][ T7844] stb0899_attach: Driver disabled by Kconfig [ 286.448009][ T7844] az6027: no front-end attached [ 286.448009][ T7844] [ 286.456337][ T7844] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 286.467414][ T7844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 286.490519][ T7844] dvb-usb: schedule remote query interval to 400 msecs. [ 286.500016][ T7844] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 286.669820][ T24] usb 4-1: USB disconnect, device number 10 [ 286.717952][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 286.802677][ T7939] usb usb40-port1: attempt power cycle [ 286.933260][T11333] tipc: Disabling bearer [ 286.941182][ T5953] tipc: Node number set to 64502689 [ 286.947604][T11342] netdevsim netdevsim2: Direct firmware load for / [ 286.947604][T11342] failed with error -2 [ 286.973315][T11342] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 286.973315][T11342] [ 287.054512][ T268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.083837][T11346] netlink: 'syz.5.1799': attribute type 4 has an invalid length. [ 287.106395][ T268] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.121964][ T268] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.141544][T11346] netlink: 'syz.5.1799': attribute type 4 has an invalid length. [ 287.154252][ T268] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.362425][ T7939] usb usb40-port1: unable to enumerate USB device [ 288.256786][T11367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1806'. [ 288.265671][T11365] Bluetooth: MGMT ver 1.23 [ 288.528813][ T30] audit: type=1400 audit(1765550723.165:788): avc: denied { shutdown } for pid=11363 comm="syz.2.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.692103][ T116] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 289.779529][T11386] tipc: Enabled bearer , priority 0 [ 290.751902][ T5826] Bluetooth: hci0: command 0x1407 tx timeout [ 290.758132][ T5821] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 290.899535][ T116] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.922279][ T116] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.939122][T11375] tipc: Resetting bearer [ 290.971898][ T116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.996435][ T116] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 291.038253][ T116] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 291.072876][ T116] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.092414][ T116] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.102587][ T116] usb 4-1: Product: syz [ 291.114466][ T116] usb 4-1: Manufacturer: syz [ 291.144384][ T116] cdc_wdm 4-1:1.0: skipping garbage [ 291.149595][ T116] cdc_wdm 4-1:1.0: skipping garbage [ 291.175631][ T116] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 291.181554][ T116] cdc_wdm 4-1:1.0: Unknown control protocol [ 291.489039][ T30] audit: type=1400 audit(1765550726.295:789): avc: denied { listen } for pid=11383 comm="syz.3.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.517883][ T30] audit: type=1400 audit(1765550726.325:790): avc: denied { accept } for pid=11383 comm="syz.3.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.576299][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.590512][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.605713][ T30] audit: type=1400 audit(1765550726.415:791): avc: denied { ioctl } for pid=11383 comm="syz.3.1812" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2961 ioctlcmd=0x5b0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 292.692080][ T7844] usb 4-1: USB disconnect, device number 11 [ 292.706485][T11375] tipc: Disabling bearer [ 292.743045][ T30] audit: type=1400 audit(1765550727.545:792): avc: denied { read append } for pid=11430 comm="syz.3.1826" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 292.845236][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'. [ 292.896265][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 294.280285][T11481] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 295.297265][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1839'. [ 295.401181][ T30] audit: type=1400 audit(1765550730.205:793): avc: denied { ioctl } for pid=11490 comm="syz.5.1840" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.668077][T11511] random: crng reseeded on system resumption [ 295.944865][ T5821] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 295.951284][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 298.559814][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 298.853515][ T30] audit: type=1400 audit(1765550733.625:794): avc: denied { read } for pid=11556 comm="syz.2.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.165235][ T30] audit: type=1400 audit(1765550733.975:795): avc: denied { read } for pid=11556 comm="syz.2.1858" path="socket:[32000]" dev="sockfs" ino=32000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.731006][T11571] netlink: 'syz.1.1860': attribute type 21 has an invalid length. [ 299.833703][T11571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1860'. [ 299.900612][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1860'. [ 301.185278][T11597] fuse: Bad value for 'fd' [ 302.902269][T11634] fuse: Bad value for 'fd' [ 302.952191][T11637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.462251][T11664] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 305.468911][T11664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.476832][T11664] vhci_hcd vhci_hcd.0: Device attached [ 305.492999][T11669] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 305.499592][T11669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.517907][T11669] vhci_hcd vhci_hcd.0: Device attached [ 305.547967][T11664] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 305.554583][T11664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.603430][T11669] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 305.610050][T11669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.643394][T11669] vhci_hcd vhci_hcd.0: Device attached [ 305.651225][T11681] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 305.651873][T11680] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 305.657826][T11681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.675156][T11664] vhci_hcd vhci_hcd.0: Device attached [ 305.681585][T11681] vhci_hcd vhci_hcd.0: Device attached [ 305.732334][ T5914] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 305.758502][T11664] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 305.765126][T11664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.812507][T11669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.838258][T11664] vhci_hcd vhci_hcd.0: Device attached [ 305.907368][T11669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.930988][ T30] audit: type=1400 audit(1765550740.735:796): avc: denied { write } for pid=11698 comm="syz.5.1891" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 305.954214][T11681] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 305.960851][T11681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.032046][T11681] vhci_hcd vhci_hcd.0: Device attached [ 306.040817][T11695] vhci_hcd: connection closed [ 306.041214][T11682] vhci_hcd: connection closed [ 306.042543][T11670] vhci_hcd: connection closed [ 306.046309][T11673] vhci_hcd: connection closed [ 306.058118][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.058223][T11690] vhci_hcd: connection closed [ 306.063352][T11678] vhci_hcd: connection closed [ 306.074475][T11665] vhci_hcd: connection reset by peer [ 306.075025][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.120589][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.140209][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.147563][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.174969][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.181871][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.191177][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.202168][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.213293][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.221832][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.231886][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.247797][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.268055][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.278165][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.291413][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.307659][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.317819][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.332156][ T3449] vhci_hcd vhci_hcd.3: stop threads [ 306.351863][ T3449] vhci_hcd vhci_hcd.3: release socket [ 306.367495][ T3449] vhci_hcd vhci_hcd.3: disconnect device [ 306.499411][T11710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1895'. [ 307.350012][T11738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 307.441954][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 308.040195][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.062111][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.089038][T11746] 9pnet_virtio: no channels available for device syz [ 308.098986][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.129884][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 308.166266][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 308.244193][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.293867][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.354976][ T24] usb 4-1: Product: syz [ 308.390752][ T24] usb 4-1: Manufacturer: syz [ 308.522732][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 308.527972][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 308.551067][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 308.568875][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 308.750494][ T7844] usb 4-1: USB disconnect, device number 12 [ 309.702124][T11767] IPVS: Unknown mcast interface: vcan0 [ 309.713774][T11773] fuse: Bad value for 'fd' [ 310.294749][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 310.539994][T11776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1909'. [ 310.567028][T11789] 9pnet_virtio: no channels available for device syz [ 310.882003][ T5914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 310.941989][ T5953] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 311.254073][ T5953] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.304745][ T5953] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.363194][ T5953] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.405600][ T5953] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 311.429404][ T5953] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 311.469946][ T5953] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.490022][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.505610][ T5953] usb 6-1: Product: syz [ 311.509772][ T5953] usb 6-1: Manufacturer: syz [ 311.529491][ T5953] cdc_wdm 6-1:1.0: skipping garbage [ 311.557243][ T5953] cdc_wdm 6-1:1.0: skipping garbage [ 311.570983][ T5953] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 311.578124][ T5953] cdc_wdm 6-1:1.0: Unknown control protocol [ 311.691884][ T5821] Bluetooth: hci0: command 0x1407 tx timeout [ 311.702030][T11764] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 311.845419][T11764] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 311.847620][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 311.861029][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 311.869833][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 311.876440][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 311.882765][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 311.889352][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 311.895642][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 311.902224][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 311.908436][ T5953] usb 6-1: USB disconnect, device number 3 [ 311.915014][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 311.915035][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 311.915050][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 312.831908][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 314.169049][ T5953] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.177870][ T5953] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.188552][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.200177][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 314.211212][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 314.223715][ T5953] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.233016][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.241361][ T5953] usb 5-1: Product: syz [ 314.246623][ T5953] usb 5-1: Manufacturer: syz [ 314.259402][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 314.268116][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 314.275673][ T5953] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 314.282706][ T5953] cdc_wdm 5-1:1.0: Unknown control protocol [ 314.495005][ T7844] usb 5-1: USB disconnect, device number 3 [ 316.064533][ T5953] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 316.370372][ T5953] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.658514][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 316.674812][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.681120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.702363][ T5953] usb 3-1: config 0 has no interface number 0 [ 316.708636][ T5953] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 316.728955][ T5953] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 316.764257][ T5953] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.791171][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.302134][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 317.527110][ T5914] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.594853][ T5953] usb 3-1: config 0 descriptor?? [ 317.602649][T11853] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.626221][ T5953] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 317.760313][T11868] 9pnet_virtio: no channels available for device syz [ 318.023784][ T7939] usb 3-1: USB disconnect, device number 12 [ 318.344965][ T5914] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.559248][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.568937][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 318.581217][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 318.593771][ T5914] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.603061][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.611107][ T5914] usb 5-1: Product: syz [ 318.615384][ T5914] usb 5-1: Manufacturer: syz [ 318.626911][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 318.632386][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 318.639986][ T5914] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 318.645985][ T5914] cdc_wdm 5-1:1.0: Unknown control protocol [ 318.658904][T11875] fuse: Unknown parameter 'group_id00000000000000000000' [ 318.836383][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.842982][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.849215][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.855795][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.863474][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.870051][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.876526][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.883128][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.889788][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.896377][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.902687][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.909249][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.915579][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.922164][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.928381][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.934964][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.941176][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.947768][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.954250][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 318.960814][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 318.967483][ T5914] usb 5-1: USB disconnect, device number 4 [ 318.967519][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 319.179506][T11887] 9pnet_virtio: no channels available for device syz [ 319.699567][ T30] audit: type=1400 audit(1765550754.195:797): avc: denied { accept } for pid=11884 comm="syz.3.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.041891][T11910] fuse: Bad value for 'user_id' [ 322.061977][T11910] fuse: Bad value for 'user_id' [ 322.242266][ T116] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 322.462315][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 322.473696][ T116] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.515060][ T116] usb 4-1: config 0 has no interface number 0 [ 322.521173][ T116] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 322.552457][ T116] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 322.581902][ T116] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.611955][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.661146][ T116] usb 4-1: config 0 descriptor?? [ 322.672498][T11908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.692263][ T116] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 323.041373][ T116] usb 4-1: USB disconnect, device number 13 [ 323.158275][ T30] audit: type=1400 audit(1765550757.965:798): avc: denied { setattr } for pid=11928 comm="syz.4.1960" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 323.958231][T11937] mkiss: ax0: crc mode is auto. [ 324.479931][T11946] fuse: Bad value for 'user_id' [ 324.561869][T11949] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.574025][T11949] netdevsim netdevsim3: Direct firmware load for / [ 324.574025][T11949] failed with error -2 [ 324.584666][T11949] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 324.584666][T11949] [ 324.609595][T11946] fuse: Bad value for 'user_id' [ 325.603723][T11971] fuse: Bad value for 'fd' [ 325.961703][T11982] 9pnet_virtio: no channels available for device syz [ 326.000669][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 326.562245][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.651175][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 326.667856][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 326.689942][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.745646][T11979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.795635][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.934277][T12007] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.946446][T12007] netdevsim netdevsim3: Direct firmware load for / [ 326.946446][T12007] failed with error -2 [ 326.957141][T12007] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 326.957141][T12007] [ 328.891329][ T116] usb 3-1: USB disconnect, device number 13 [ 329.212737][T10339] IPVS: ip_vs_send_async error -101 [ 329.263964][T12044] 9pnet_virtio: no channels available for device syz [ 330.796107][T12050] fuse: Bad value for 'fd' [ 331.140484][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2001'. [ 331.441567][ T30] audit: type=1326 audit(1765550766.245:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.5.2005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b68b8f749 code=0x0 [ 332.282711][ T30] audit: type=1400 audit(1765550767.095:800): avc: denied { ioctl } for pid=12070 comm="syz.2.2008" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33197 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 332.677487][ T30] audit: type=1400 audit(1765550767.485:801): avc: denied { getopt } for pid=12070 comm="syz.2.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.902346][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 333.138290][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.169522][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 333.263386][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.298034][ T5914] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.320889][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.345103][ T5914] usb 5-1: config 0 descriptor?? [ 334.025310][T12091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 334.492109][ T5914] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 334.515816][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2016'. [ 334.712637][T12119] 9pnet_virtio: no channels available for device syz [ 335.469177][ T30] audit: type=1400 audit(1765550770.215:802): avc: denied { mounton } for pid=12121 comm="syz.5.2019" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 335.583233][T12127] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 336.540084][T12091] usb 5-1: string descriptor 0 read error: -71 [ 336.956833][T12155] openvswitch: netlink: Flow key attr not present in new flow. [ 336.968284][T12155] netdevsim netdevsim2: Direct firmware load for / [ 336.968284][T12155] failed with error -2 [ 336.979017][T12155] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 336.979017][T12155] [ 337.101865][ T5953] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 337.141870][ T7939] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 337.251870][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 337.258355][ T5953] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 337.267002][ T5953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.276921][ T7939] usb 6-1: device descriptor read/64, error -71 [ 337.284338][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.294242][ T5953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 337.306520][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.317078][ T5953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.330668][ T5953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 337.343278][ T5914] usb 5-1: USB disconnect, device number 5 [ 337.343427][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.541950][ T7939] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 337.564243][ T5953] usb 4-1: usb_control_msg returned -32 [ 337.569842][ T5953] usbtmc 4-1:16.0: can't read capabilities [ 337.981999][ T7939] usb 6-1: device descriptor read/64, error -71 [ 338.537069][ T30] audit: type=1400 audit(1765550773.345:803): avc: denied { connect } for pid=12166 comm="syz.4.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.552202][ T7939] usb usb6-port1: attempt power cycle [ 339.043638][T12170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2033'. [ 339.421705][ T30] audit: type=1400 audit(1765550774.225:804): avc: denied { create } for pid=12171 comm="syz.2.2034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 339.478822][ T30] audit: type=1400 audit(1765550774.255:805): avc: denied { ioctl } for pid=12171 comm="syz.2.2034" path="socket:[33434]" dev="sockfs" ino=33434 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 339.488885][T12176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2035'. [ 339.513467][T12176] nbd: must specify at least one socket [ 339.791846][ T7939] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 339.822349][ T7939] usb 6-1: device descriptor read/8, error -71 [ 339.826425][ T5914] usb 4-1: USB disconnect, device number 14 [ 339.972009][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2039'. [ 340.268124][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2041'. [ 340.671806][T12182] comedi comedi0: reset error (fatal) [ 341.022532][T12204] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2047'. [ 341.081885][T12204] nbd: must specify at least one socket [ 341.547158][ T5914] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 341.574311][T12213] random: crng reseeded on system resumption [ 341.811930][ T5914] usb 3-1: device descriptor read/64, error -71 [ 341.958718][T12216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 341.965245][T12216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 342.051892][ T5914] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 342.126671][T12216] vhci_hcd vhci_hcd.0: Device attached [ 342.203334][ T5914] usb 3-1: device descriptor read/64, error -71 [ 342.312288][ T5914] usb usb3-port1: attempt power cycle [ 342.420913][T12217] vhci_hcd: connection closed [ 342.421079][ T36] vhci_hcd vhci_hcd.3: stop threads [ 342.433983][ T36] vhci_hcd vhci_hcd.3: release socket [ 342.442274][ T5915] usb 40-1: SetAddress Request (7) to port 0 [ 342.454018][ T5915] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 342.461536][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 342.492088][ T5915] usb 40-1: enqueue for inactive port 0 [ 342.505058][T12229] overlayfs: missing 'lowerdir' [ 342.681906][ T5914] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 342.713464][ T5914] usb 3-1: device descriptor read/8, error -71 [ 342.961881][ T5914] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 342.962587][ T5915] usb usb40-port1: attempt power cycle [ 342.982334][ T5914] usb 3-1: device descriptor read/8, error -71 [ 343.092799][ T5914] usb usb3-port1: unable to enumerate USB device [ 343.284936][T12240] 9pnet_virtio: no channels available for device syz [ 343.297628][T12240] overlayfs: overlapping lowerdir path [ 343.313042][T12240] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 343.321385][T12240] overlayfs: overlapping lowerdir path [ 344.457619][T12247] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 344.466140][ T5915] usb usb40-port1: unable to enumerate USB device [ 345.034464][T12266] netlink: 'syz.3.2066': attribute type 10 has an invalid length. [ 345.089977][ T30] audit: type=1400 audit(1765550779.895:806): avc: denied { nlmsg_read } for pid=12269 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 345.271533][T12274] fuse: Bad value for 'group_id' [ 345.278192][T12274] fuse: Bad value for 'group_id' [ 346.558775][ T30] audit: type=1400 audit(1765550781.365:807): avc: denied { setopt } for pid=12287 comm="syz.1.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 346.618351][T12295] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2075'. [ 346.664149][ T30] audit: type=1326 audit(1765550781.365:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 346.682982][T12295] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12295 comm=syz.4.2075 [ 346.703263][T12290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12290 comm=syz.1.2073 [ 346.761989][ T30] audit: type=1326 audit(1765550781.365:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 346.918752][ T30] audit: type=1326 audit(1765550781.365:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 347.001941][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 347.040986][ T30] audit: type=1326 audit(1765550781.375:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 347.118749][T12309] fuse: Bad value for 'group_id' [ 347.118761][T12309] fuse: Bad value for 'group_id' [ 347.193923][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.204971][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 347.231840][ T30] audit: type=1326 audit(1765550781.375:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 347.275518][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.332993][ T5914] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.357735][ T30] audit: type=1326 audit(1765550781.375:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 347.400512][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.409796][ T30] audit: type=1326 audit(1765550781.375:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 347.435415][ T5914] usb 6-1: config 0 descriptor?? [ 347.442434][T12294] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 347.453089][ T30] audit: type=1326 audit(1765550781.375:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12287 comm="syz.1.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 348.128775][ T5914] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 348.257116][T12294] usb 6-1: string descriptor 0 read error: -71 [ 348.291277][ T5914] usb 6-1: USB disconnect, device number 8 [ 349.069658][T12324] fido_id[12324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 349.236266][T12340] random: crng reseeded on system resumption [ 349.353718][T12345] fuse: Bad value for 'group_id' [ 349.374461][T12346] mkiss: ax0: crc mode is auto. [ 349.430745][T12345] fuse: Bad value for 'group_id' [ 353.920036][T12419] wireguard0: entered promiscuous mode [ 353.931933][T12419] wireguard0: entered allmulticast mode [ 356.006547][T12455] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 356.541958][ T5914] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 356.765543][ T5914] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 356.774284][ T5914] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 356.944803][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 356.997038][ T5914] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 357.130900][ T5914] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 357.331740][ T5914] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.465102][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.576179][ T5914] usb 6-1: Product: syz [ 358.358028][ T5914] usb 6-1: Manufacturer: syz [ 358.417370][ T5914] cdc_wdm 6-1:1.0: skipping garbage [ 358.443351][ T5914] cdc_wdm 6-1:1.0: skipping garbage [ 358.468104][ T5914] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 358.617577][ C0] wdm_int_callback: 4 callbacks suppressed [ 358.617593][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.629959][ C0] wdm_int_callback: 4 callbacks suppressed [ 358.629970][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.642094][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.648682][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.655003][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.661594][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.667895][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.674478][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.680757][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.687366][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.693614][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.700189][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.712014][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.718597][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.725013][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.731592][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.737849][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.744426][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 358.750665][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 358.757227][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 359.306926][ T5914] cdc_wdm 6-1:1.0: Unknown control protocol [ 359.325466][ T5914] usb 6-1: USB disconnect, device number 9 [ 359.436670][T12494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2130'. [ 360.547073][T12512] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 361.932075][ T5953] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 362.133716][ T5953] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.185828][ T5953] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 362.275986][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.377273][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 362.489858][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 362.604606][ T5953] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.635018][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.805823][ T5953] usb 5-1: Product: syz [ 362.825401][ T5953] usb 5-1: Manufacturer: syz [ 362.854110][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 362.859340][ T5953] cdc_wdm 5-1:1.0: skipping garbage [ 362.902080][ T5953] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 362.941484][ T5953] cdc_wdm 5-1:1.0: Unknown control protocol [ 363.056803][ T5953] usb 5-1: USB disconnect, device number 6 [ 363.056839][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 363.453870][T12540] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 363.531889][ T5953] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 363.703675][ T5953] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.722502][ T5953] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 363.741980][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.761455][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 363.787529][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 363.819049][T12528] comedi comedi0: reset error (fatal) [ 363.833521][ T5953] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.878805][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.899570][ T5953] usb 3-1: Product: syz [ 363.917779][ T5953] usb 3-1: Manufacturer: syz [ 363.944251][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 363.944264][ T30] audit: type=1326 audit(1765550798.755:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 363.983508][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 363.997195][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 364.004090][ T5953] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 364.005587][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2149'. [ 364.010881][ T5953] cdc_wdm 3-1:1.0: Unknown control protocol [ 364.025510][ T30] audit: type=1326 audit(1765550798.785:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.089619][ T30] audit: type=1326 audit(1765550798.785:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.118281][ T30] audit: type=1326 audit(1765550798.785:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.155637][ C1] wdm_int_callback: 1253 callbacks suppressed [ 364.155661][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.168317][ C1] wdm_int_callback: 1253 callbacks suppressed [ 364.168331][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.181571][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.188165][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.195646][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.202242][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.208507][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.215112][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.221383][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.227974][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.234424][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.241016][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.248715][ T5953] usb 3-1: USB disconnect, device number 18 [ 364.255189][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 364.255204][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 364.255212][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 364.296983][ T30] audit: type=1326 audit(1765550798.785:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.320786][ T30] audit: type=1326 audit(1765550798.785:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.364519][ T30] audit: type=1326 audit(1765550798.785:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.463926][ T30] audit: type=1326 audit(1765550798.785:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.489848][ T30] audit: type=1326 audit(1765550798.785:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 364.515451][ T30] audit: type=1326 audit(1765550798.785:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.4.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f218f749 code=0x7ffc0000 [ 365.170211][T12568] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 365.455742][T12577] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 365.638561][T12583] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2160'. [ 366.821879][ T5953] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 367.013570][ T5953] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.031956][ T5953] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 367.085602][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.107961][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.122289][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 367.143186][ T5953] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.156665][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.167761][ T5953] usb 3-1: Product: syz [ 367.290651][ T5953] usb 3-1: Manufacturer: syz [ 367.303776][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 367.313231][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 367.327557][ T5953] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 367.333798][ T5953] cdc_wdm 3-1:1.0: Unknown control protocol [ 367.596071][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 367.602699][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 367.608984][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 367.615573][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 367.622165][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 367.628750][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 367.637060][ T5914] usb 3-1: USB disconnect, device number 19 [ 367.637115][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 368.395383][T12625] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 370.711926][T12665] mkiss: ax0: crc mode is auto. [ 371.892475][T12686] netlink: 'syz.4.2198': attribute type 1 has an invalid length. [ 372.131551][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 375.293882][T12737] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 375.815584][T12748] fuse: Bad value for 'group_id' [ 375.820689][T12748] fuse: Bad value for 'group_id' [ 376.307680][T12763] tipc: Enabled bearer , priority 1 [ 377.901916][T12769] comedi comedi0: reset error (fatal) [ 378.086818][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 378.096223][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.107432][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.113810][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.297532][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 378.297547][ T30] audit: type=1400 audit(1765550813.105:952): avc: denied { write } for pid=12788 comm="syz.4.2233" path="socket:[35687]" dev="sockfs" ino=35687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 379.146692][T12806] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 379.518323][T12816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2240'. [ 380.812222][T12828] comedi comedi0: reset error (fatal) [ 380.991053][T12843] syzkaller0: entered promiscuous mode [ 381.005843][T12843] syzkaller0: entered allmulticast mode [ 382.492350][T12866] comedi comedi0: reset error (fatal) [ 382.544101][ T30] audit: type=1400 audit(1765550817.355:953): avc: denied { connect } for pid=12877 comm="syz.3.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 384.861991][T12900] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 384.931854][ T89] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 385.029190][T12911] fuse: Unknown parameter '0x0000000000000003' [ 385.117027][ T89] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.145716][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.171825][ T89] usb 4-1: config 0 has no interface number 0 [ 385.184137][ T89] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.205442][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.238163][ T89] usb 4-1: config 0 descriptor?? [ 385.264195][ T89] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 385.407290][T12919] No control pipe specified [ 385.472189][ T89] usb 4-1: USB disconnect, device number 15 [ 385.723364][T12926] fuse: Bad value for 'user_id' [ 385.728331][T12926] fuse: Bad value for 'user_id' [ 385.770497][ T30] audit: type=1400 audit(1765550820.575:954): avc: denied { ioctl } for pid=12923 comm="syz.5.2269" path="socket:[36315]" dev="sockfs" ino=36315 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.926780][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.940968][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.949506][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.957264][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.964933][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.973453][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.980920][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.988634][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 386.996503][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 387.005176][ T5953] hid-generic 0003:0006:0000.000A: unknown main item tag 0x0 [ 387.081899][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 387.100661][ T5953] hid-generic 0003:0006:0000.000A: hidraw0: USB HID v0.02 Device [syz1] on syz1 [ 387.315506][ T5914] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.303696][ T5914] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.321376][T12938] fido_id[12938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 388.610157][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.619450][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 388.648377][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 388.755194][ T5914] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.835252][T12951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2286'. [ 388.972052][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.980073][ T5914] usb 5-1: Product: syz [ 388.984344][ T5914] usb 5-1: Manufacturer: syz [ 389.011503][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 389.017498][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 389.024926][ T5914] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 389.031042][ T5914] cdc_wdm 5-1:1.0: Unknown control protocol [ 389.427900][ T5914] usb 5-1: USB disconnect, device number 7 [ 389.895406][T12958] No control pipe specified [ 390.101579][T12964] fuse: Bad value for 'user_id' [ 390.106661][T12964] fuse: Bad value for 'user_id' [ 390.155088][ T30] audit: type=1400 audit(1765550824.965:955): avc: denied { setopt } for pid=12967 comm="syz.2.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.413068][T12979] lo speed is unknown, defaulting to 1000 [ 390.419378][T12979] lo speed is unknown, defaulting to 1000 [ 390.432103][T12979] lo speed is unknown, defaulting to 1000 [ 390.499028][T12979] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 390.805009][T12979] lo speed is unknown, defaulting to 1000 [ 390.812247][T12979] lo speed is unknown, defaulting to 1000 [ 390.818637][T12979] lo speed is unknown, defaulting to 1000 [ 390.825022][T12979] lo speed is unknown, defaulting to 1000 [ 390.831385][T12979] lo speed is unknown, defaulting to 1000 [ 391.016741][T12989] fuse: Unknown parameter '0x0000000000000003' [ 391.212023][ T7939] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 391.331904][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 391.372158][ T7939] usb 3-1: Using ep0 maxpacket: 32 [ 391.437340][ T7939] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 391.480235][ T7939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.525311][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 391.677077][ T5914] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 391.697858][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.707661][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.717411][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 391.728989][ T7939] usb 3-1: config 0 descriptor?? [ 391.743211][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 391.767104][ T5914] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.820447][ T5914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.835190][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.879528][T13017] fuse: Unknown parameter '0x0000000000000003' [ 392.083079][ T5914] usb 4-1: usb_control_msg returned -32 [ 392.094154][ T7939] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 392.095351][ T5914] usbtmc 4-1:16.0: can't read capabilities [ 392.133954][ T7939] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 392.143400][ T7939] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 392.625612][ T30] audit: type=1400 audit(1765550827.435:956): avc: denied { mounton } for pid=13030 comm="syz.4.2317" path="/442/file0" dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 392.731127][ T30] audit: type=1400 audit(1765550827.535:957): avc: denied { connect } for pid=13041 comm="syz.1.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.952867][ T30] audit: type=1400 audit(1765550827.755:958): avc: denied { read } for pid=13041 comm="syz.1.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.417982][T13051] fuse: Unknown parameter '0x0000000000000003' [ 393.741846][ T5914] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 394.051285][ T5914] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.063752][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.094605][ T5914] usb 6-1: config 0 has no interface number 0 [ 394.215011][ T89] usb 4-1: USB disconnect, device number 16 [ 394.249305][ T5914] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.260902][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.271607][ T5914] usb 6-1: config 0 descriptor?? [ 394.383688][ T5914] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 394.469077][T13075] ALSA: mixer_oss: invalid OSS volume '·ILîãº>{QSÆ㹘ËÙ¶âäµÞ¾Ôpù' [ 394.507365][T13075] ALSA: mixer_oss: invalid OSS volume '¢p6üŸFo¡î›î?ùÿi{G’ ŽÈšï?ò‡^ÁJˆ' [ 394.533694][T13075] ALSA: mixer_oss: invalid OSS volume ']ò‹2Eë6‰ârœb³$³[÷´ÝgÏ»«µŠ„' [ 394.546533][T13075] ALSA: mixer_oss: invalid OSS volume 'hñN¸vs.wV/õ‰S©”¢ƒ' [ 394.561133][T13075] ALSA: mixer_oss: invalid OSS volume 'ªl`†ž™ò–|Qlî›hZ†ð‰R:¬"' [ 394.570396][T13080] fuse: Bad value for 'fd' [ 394.583263][T13075] ALSA: mixer_oss: invalid OSS volume 'jóS÷Ö—NWxRe\' [ 394.590673][ T5914] usb 6-1: USB disconnect, device number 10 [ 394.963292][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'. [ 395.308042][T13097] netlink: 'syz.1.2340': attribute type 30 has an invalid length. [ 395.342146][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.364042][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.382330][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.404191][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.571895][ T89] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 395.785186][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 395.858478][ T89] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 395.924150][ T89] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.993328][ T89] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.065455][ T89] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 396.136997][ T89] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 396.206739][ T89] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.280738][ T89] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.341615][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.595521][ T89] usb 4-1: usb_control_msg returned -32 [ 396.603220][ T89] usbtmc 4-1:16.0: can't read capabilities [ 397.324992][T13137] fuse: Bad value for 'fd' [ 398.632026][ T5953] usb 4-1: USB disconnect, device number 17 [ 399.884535][T13170] bridge0: port 1(erspan0) entered blocking state [ 399.894267][T13170] bridge0: port 1(erspan0) entered disabled state [ 399.903731][T13170] erspan0: entered allmulticast mode [ 399.913077][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 400.011048][T13170] erspan0: entered promiscuous mode [ 401.443767][T13189] fuse: Bad value for 'fd' [ 401.579212][ T30] audit: type=1400 audit(1765550836.385:959): avc: denied { ioctl } for pid=13198 comm="syz.3.2377" path="socket:[37692]" dev="sockfs" ino=37692 ioctlcmd=0x8994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 402.582412][T13200] mkiss: ax0: crc mode is auto. [ 402.801024][ T30] audit: type=1326 audit(1765550837.605:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 402.870116][ T30] audit: type=1326 audit(1765550837.635:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 402.932017][ T30] audit: type=1326 audit(1765550837.635:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 402.996471][ T30] audit: type=1326 audit(1765550837.635:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 403.151948][ T30] audit: type=1326 audit(1765550837.635:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 403.178715][ T30] audit: type=1326 audit(1765550837.635:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 403.294297][T13227] bridge0: port 3(erspan0) entered blocking state [ 403.300749][T13227] bridge0: port 3(erspan0) entered disabled state [ 403.322837][ T30] audit: type=1326 audit(1765550837.635:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 403.393143][T13227] erspan0: entered allmulticast mode [ 403.414739][ T30] audit: type=1326 audit(1765550837.635:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 403.549464][ T30] audit: type=1326 audit(1765550837.635:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13210 comm="syz.3.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa9bf98f749 code=0x7ffc0000 [ 403.581877][T13227] erspan0: entered promiscuous mode [ 403.592751][T13227] bridge0: port 3(erspan0) entered blocking state [ 403.599419][T13227] bridge0: port 3(erspan0) entered forwarding state [ 405.066636][T13264] 9pnet_virtio: no channels available for device syz [ 405.933191][T13267] fuse: Bad value for 'fd' [ 409.954800][T13328] bridge0: port 3(erspan0) entered disabled state [ 409.961469][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.968986][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.088215][T13328] bridge_slave_0: left allmulticast mode [ 410.098141][T13328] bridge_slave_0: left promiscuous mode [ 410.105070][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.144744][T13331] fuse: Bad value for 'user_id' [ 410.161874][T13331] fuse: Bad value for 'user_id' [ 410.506452][T13350] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 410.513075][T13350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.550310][T13350] vhci_hcd vhci_hcd.0: Device attached [ 410.560287][T13354] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 410.566896][T13354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.597236][T13354] vhci_hcd vhci_hcd.0: Device attached [ 410.630872][T13350] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 410.637489][T13350] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 410.671961][T13350] vhci_hcd vhci_hcd.0: Device attached [ 410.683625][T13354] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 410.690234][T13354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.711967][T13354] vhci_hcd vhci_hcd.0: Device attached [ 410.731642][T13350] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 410.738232][T13350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.783172][T13350] vhci_hcd vhci_hcd.0: Device attached [ 410.807394][T13354] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 410.814016][T13354] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 410.821884][ T5914] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 410.864993][T13350] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.884771][T13377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.891968][T13354] vhci_hcd vhci_hcd.0: Device attached [ 410.900204][T13377] vhci_hcd vhci_hcd.0: port 0 already used [ 410.950467][T13371] vhci_hcd: connection closed [ 410.950661][ T37] vhci_hcd vhci_hcd.1: stop threads [ 410.951024][T13355] vhci_hcd: connection closed [ 410.955718][T13368] vhci_hcd: connection closed [ 410.960903][T13364] vhci_hcd: connection closed [ 410.961059][T13359] vhci_hcd: connection closed [ 410.968779][ T37] vhci_hcd vhci_hcd.1: release socket [ 410.970634][T13352] vhci_hcd: connection reset by peer [ 410.982227][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 411.012642][ T37] vhci_hcd vhci_hcd.1: stop threads [ 411.017938][ T37] vhci_hcd vhci_hcd.1: release socket [ 411.031571][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 411.046846][ T37] vhci_hcd vhci_hcd.1: stop threads [ 411.059459][ T37] vhci_hcd vhci_hcd.1: release socket [ 411.070619][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 411.082309][ T37] vhci_hcd vhci_hcd.1: stop threads [ 411.095427][ T37] vhci_hcd vhci_hcd.1: release socket [ 411.114506][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 411.128105][ T37] vhci_hcd vhci_hcd.1: stop threads [ 411.139056][ T37] vhci_hcd vhci_hcd.1: release socket [ 411.151339][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 411.167294][ T37] vhci_hcd vhci_hcd.1: stop threads [ 411.175166][ T37] vhci_hcd vhci_hcd.1: release socket [ 411.181750][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 411.613446][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 411.622627][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 413.823640][T13436] overlayfs: failed to resolve './file1': -2 [ 413.849655][T13437] openvswitch: netlink: IP tunnel dst address not specified [ 413.864414][T13437] netdevsim netdevsim1: Direct firmware load for / [ 413.864414][T13437] failed with error -2 [ 413.881179][T13437] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 413.881179][T13437] [ 414.246599][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 414.997408][T13460] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2429'. [ 415.271849][ T5953] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 415.463938][ T5953] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.526950][ T5953] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.538728][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.547843][ T5953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 415.561840][ T5953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 415.590633][ T5953] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.612029][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.622051][ T5953] usb 4-1: Product: syz [ 415.626246][ T5953] usb 4-1: Manufacturer: syz [ 415.654866][ T5953] cdc_wdm 4-1:1.0: skipping garbage [ 415.660126][ T5953] cdc_wdm 4-1:1.0: skipping garbage [ 415.673866][ T5953] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 415.679818][ T5953] cdc_wdm 4-1:1.0: Unknown control protocol [ 415.732289][ T5916] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 415.868988][ C1] wdm_int_callback: 11 callbacks suppressed [ 415.869010][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.869311][ T5894] usb 4-1: USB disconnect, device number 18 [ 415.874919][ C1] wdm_int_callback: 11 callbacks suppressed [ 415.874935][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.874953][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 415.922404][ T5914] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 415.934446][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.945636][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 415.991820][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.025061][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.055446][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.081855][ T5916] usb 5-1: config 0 descriptor?? [ 416.093045][T13469] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 416.103602][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2436'. [ 416.164404][T13480] lo speed is unknown, defaulting to 1000 [ 416.548394][ T5916] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 416.757523][T13498] 9p: Bad value for 'wfdno' [ 416.916965][ T5915] usb 5-1: USB disconnect, device number 8 [ 416.995385][T13509] overlayfs: failed to resolve './file1': -2 [ 417.235974][T13517] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 417.242584][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.250560][T13517] vhci_hcd vhci_hcd.0: Device attached [ 417.258919][T13517] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 417.265517][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.273914][T13517] vhci_hcd vhci_hcd.0: Device attached [ 417.283235][T13517] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 417.289849][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 417.298160][T13517] vhci_hcd vhci_hcd.0: Device attached [ 417.304934][ T5916] IPVS: starting estimator thread 0... [ 417.310724][T13517] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 417.317311][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.325205][T13517] vhci_hcd vhci_hcd.0: Device attached [ 417.332706][T13517] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 417.339300][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.346918][T13517] vhci_hcd vhci_hcd.0: Device attached [ 417.361518][T13517] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(23) [ 417.368107][T13517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 417.379054][T13517] vhci_hcd vhci_hcd.0: Device attached [ 417.412041][T13526] IPVS: using max 45 ests per chain, 108000 per kthread [ 417.471249][T13517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.480335][T13517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.489804][T13517] vhci_hcd vhci_hcd.0: port 0 already used [ 417.503384][T13531] vhci_hcd: connection closed [ 417.504505][T13522] vhci_hcd: connection closed [ 417.504642][T13527] vhci_hcd: connection closed [ 417.509629][T13518] vhci_hcd: connection closed [ 417.513983][T13529] vhci_hcd: connection closed [ 417.514132][ T13] vhci_hcd vhci_hcd.3: stop threads [ 417.524944][ T5916] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 417.528152][T13520] vhci_hcd: connection closed [ 417.543225][ T13] vhci_hcd vhci_hcd.3: release socket [ 417.554494][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 417.560858][ T13] vhci_hcd vhci_hcd.3: stop threads [ 417.569688][ T13] vhci_hcd vhci_hcd.3: release socket [ 417.575413][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 417.583349][ T13] vhci_hcd vhci_hcd.3: stop threads [ 417.588661][ T13] vhci_hcd vhci_hcd.3: release socket [ 417.599489][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 417.634848][ T13] vhci_hcd vhci_hcd.3: stop threads [ 417.640694][ T13] vhci_hcd vhci_hcd.3: release socket [ 417.647307][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 417.666783][ T13] vhci_hcd vhci_hcd.3: stop threads [ 417.672690][ T13] vhci_hcd vhci_hcd.3: release socket [ 417.678508][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 417.687049][ T13] vhci_hcd vhci_hcd.3: stop threads [ 417.695040][ T13] vhci_hcd vhci_hcd.3: release socket [ 417.700852][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 417.799692][ T5916] usb 39-1: enqueue for inactive port 0 [ 417.871913][ T5916] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 418.277132][T13540] 9p: Bad value for 'wfdno' [ 418.428737][T13544] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 418.541995][T13554] overlayfs: failed to resolve './file1': -2 [ 419.350357][T13574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 419.356974][T13574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.366901][T13574] vhci_hcd vhci_hcd.0: Device attached [ 419.510045][T13583] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(18) [ 419.516666][T13583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.527051][T13583] vhci_hcd vhci_hcd.0: Device attached [ 419.541539][T13581] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 419.548136][T13581] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 419.702273][ T5953] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 419.726323][T13581] vhci_hcd vhci_hcd.0: Device attached [ 419.748977][T13574] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 419.755601][T13574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.764113][T13583] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 419.770718][T13583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.781631][T13581] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(23) [ 419.781891][T13583] vhci_hcd vhci_hcd.0: Device attached [ 419.788235][T13581] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 419.790101][T13581] vhci_hcd vhci_hcd.0: Device attached [ 419.812675][T13581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 419.815117][T13574] vhci_hcd vhci_hcd.0: Device attached [ 419.821481][T13581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 419.840889][T13574] vhci_hcd vhci_hcd.0: port 0 already used [ 419.853598][T13593] vhci_hcd: connection closed [ 419.853815][ T4125] vhci_hcd vhci_hcd.4: stop threads [ 419.863895][T13588] vhci_hcd: connection closed [ 419.863964][T13586] vhci_hcd: connection closed [ 419.864305][T13580] vhci_hcd: connection closed [ 419.868689][T13584] vhci_hcd: connection closed [ 419.874388][ T4125] vhci_hcd vhci_hcd.4: release socket [ 419.878684][T13576] vhci_hcd: connection reset by peer [ 419.885945][ T4125] vhci_hcd vhci_hcd.4: disconnect device [ 419.904492][ T4125] vhci_hcd vhci_hcd.4: stop threads [ 419.909723][ T4125] vhci_hcd vhci_hcd.4: release socket [ 419.916776][ T4125] vhci_hcd vhci_hcd.4: disconnect device [ 419.922777][ T4125] vhci_hcd vhci_hcd.4: stop threads [ 419.928037][ T4125] vhci_hcd vhci_hcd.4: release socket [ 419.934043][ T4125] vhci_hcd vhci_hcd.4: disconnect device [ 419.939787][ T4125] vhci_hcd vhci_hcd.4: stop threads [ 419.945271][ T4125] vhci_hcd vhci_hcd.4: release socket [ 419.950722][ T4125] vhci_hcd vhci_hcd.4: disconnect device [ 419.956635][ T4125] vhci_hcd vhci_hcd.4: stop threads [ 419.962119][ T4125] vhci_hcd vhci_hcd.4: release socket [ 419.967619][ T4125] vhci_hcd vhci_hcd.4: disconnect device [ 419.974216][ T4125] vhci_hcd vhci_hcd.4: stop threads [ 419.979475][ T4125] vhci_hcd vhci_hcd.4: release socket [ 419.991556][ T4125] vhci_hcd vhci_hcd.4: disconnect device [ 420.051857][ T5914] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 420.087772][T13602] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 420.216870][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.232631][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 420.252526][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.287079][ T5914] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.313915][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.356915][ T5914] usb 4-1: config 0 descriptor?? [ 420.364510][T13592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.841286][ T5914] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 420.980207][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 420.980224][ T30] audit: type=1400 audit(1765550855.785:989): avc: denied { shutdown } for pid=13617 comm="syz.1.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.124929][ T89] libceph: connect (1)[c::]:6789 error -101 [ 421.130972][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 421.162346][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 421.235072][T13626] ceph: No mds server is up or the cluster is laggy [ 421.286787][ T5914] usb 4-1: USB disconnect, device number 19 [ 421.587246][T13646] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 422.205638][T13661] fuse: Bad value for 'fd' [ 422.236895][T13664] syzkaller0: entered promiscuous mode [ 422.242650][T13664] syzkaller0: entered allmulticast mode [ 422.543253][ T30] audit: type=1400 audit(1765550857.345:990): avc: denied { mount } for pid=13676 comm="syz.5.2495" name="/" dev="configfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 423.156149][T13691] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 423.461607][ T30] audit: type=1400 audit(1765550858.205:991): avc: denied { firmware_load } for pid=13693 comm="syz.2.2500" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 423.683759][T13687] 9pnet_virtio: no channels available for device syz [ 423.750159][T13699] syzkaller0: entered promiscuous mode [ 423.755754][T13699] syzkaller0: entered allmulticast mode [ 423.884081][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'. [ 423.903075][T13695] syz.2.2500 (13695) used greatest stack depth: 19000 bytes left [ 424.412534][ T5914] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 424.555584][T13720] fuse: Bad value for 'fd' [ 424.573600][ T5914] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.582390][ T5914] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 424.593101][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.602551][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 424.614037][ T5914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 424.629004][ T5914] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.682169][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.690183][ T5914] usb 5-1: Product: syz [ 424.696677][ T5914] usb 5-1: Manufacturer: syz [ 424.718688][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 424.733286][ T5914] cdc_wdm 5-1:1.0: skipping garbage [ 424.752733][ T5914] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 424.773526][ T89] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 424.780895][ T5914] cdc_wdm 5-1:1.0: Unknown control protocol [ 424.881991][ T5953] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 424.911612][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.918206][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.924488][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.931067][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.933174][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.937584][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.954510][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.960966][ T5914] usb 5-1: USB disconnect, device number 9 [ 424.967011][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.967031][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.967045][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 424.991725][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 425.008598][ T89] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.027647][ T89] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.045133][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.114611][ T89] usb 6-1: config 0 descriptor?? [ 425.121426][T13717] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 425.141933][ T5894] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 425.291936][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 425.300447][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 425.313315][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.282323][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.290342][ T5894] usb 4-1: Product: syz [ 426.295402][ T5894] usb 4-1: Manufacturer: syz [ 426.300054][ T5894] usb 4-1: SerialNumber: syz [ 426.319099][ T5894] usb 4-1: config 0 descriptor?? [ 426.676085][ T5894] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 426.686001][ T5894] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 426.703115][ T89] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 427.038637][ T89] usb 6-1: USB disconnect, device number 11 [ 427.287809][ T5894] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 427.810141][ T5894] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 427.826742][ T30] audit: type=1400 audit(1765550862.635:992): avc: denied { create } for pid=13747 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 427.861358][ T5894] em28xx 4-1:0.0: board has no eeprom [ 428.126825][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2521'. [ 428.162311][ T5894] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 428.182529][ T5894] em28xx 4-1:0.0: dvb set to bulk mode. [ 428.208040][ T5916] em28xx 4-1:0.0: Binding DVB extension [ 428.856514][T13772] tipc: Enabled bearer , priority 1 [ 428.978522][ T5915] usb 4-1: USB disconnect, device number 20 [ 428.993968][ T5915] em28xx 4-1:0.0: Disconnecting em28xx [ 429.043677][ T5916] em28xx 4-1:0.0: Registering input extension [ 429.050506][ T5915] em28xx 4-1:0.0: Closing input extension [ 429.107169][ T5915] em28xx 4-1:0.0: Freeing device [ 429.268079][T13780] netlink: 'syz.4.2530': attribute type 10 has an invalid length. [ 429.325176][T13780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.164626][T13811] tipc: Failed to obtain node identity [ 431.170228][T13811] tipc: Enabling of bearer rejected, failed to enable media [ 432.269059][T13820] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 432.275719][T13820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.313052][T13820] vhci_hcd vhci_hcd.0: Device attached [ 432.384110][T13827] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 432.390703][T13827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.617716][T13827] vhci_hcd vhci_hcd.0: Device attached [ 432.655567][T13820] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 432.662188][T13820] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 432.682852][ T5894] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 432.694906][T13820] vhci_hcd vhci_hcd.0: Device attached [ 432.712915][T13827] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 432.719521][T13827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.754517][T13827] vhci_hcd vhci_hcd.0: Device attached [ 432.802226][T13820] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 432.808828][T13820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 432.819158][T13836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.846343][T13820] vhci_hcd vhci_hcd.0: Device attached [ 432.861152][T13836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.891079][T13836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.921974][T13827] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(23) [ 432.928600][T13827] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 432.940470][T13820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.955678][T13820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.966208][T13827] vhci_hcd vhci_hcd.0: Device attached [ 433.072507][T13843] vhci_hcd vhci_hcd.0: port 0 already used [ 434.076471][T13839] vhci_hcd: connection closed [ 434.076705][T13837] vhci_hcd: connection closed [ 434.076768][T13833] vhci_hcd: connection closed [ 434.086912][ T13] vhci_hcd vhci_hcd.5: stop threads [ 434.099362][T13831] vhci_hcd: connection closed [ 434.099443][T13828] vhci_hcd: connection closed [ 434.104188][T13823] vhci_hcd: connection reset by peer [ 434.289965][ T13] vhci_hcd vhci_hcd.5: release socket [ 434.321300][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 434.331887][ T13] vhci_hcd vhci_hcd.5: stop threads [ 434.338729][ T13] vhci_hcd vhci_hcd.5: release socket [ 434.344221][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 434.350067][ T13] vhci_hcd vhci_hcd.5: stop threads [ 434.913349][ T13] vhci_hcd vhci_hcd.5: release socket [ 434.918821][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 434.924577][ T13] vhci_hcd vhci_hcd.5: stop threads [ 434.937425][ T13] vhci_hcd vhci_hcd.5: release socket [ 434.946118][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 434.961895][ T13] vhci_hcd vhci_hcd.5: stop threads [ 434.967325][ T13] vhci_hcd vhci_hcd.5: release socket [ 434.986858][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 435.009462][ T13] vhci_hcd vhci_hcd.5: stop threads [ 435.027319][ T13] vhci_hcd vhci_hcd.5: release socket [ 435.046143][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 436.193077][ T30] audit: type=1400 audit(1765550870.985:993): avc: denied { name_bind } for pid=13868 comm="syz.5.2555" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 437.735960][T13888] 9pnet_virtio: no channels available for device syz [ 437.882506][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.961921][ T5894] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 437.974016][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.000714][T13893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.786285][T13907] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 438.792918][T13907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.801969][T13907] vhci_hcd vhci_hcd.0: Device attached [ 438.883566][T13907] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 438.890194][T13907] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.942875][ T30] audit: type=1400 audit(1765550873.755:994): avc: denied { bind } for pid=13913 comm="syz.1.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 438.967623][T13915] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 438.974243][T13915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.085844][T13915] vhci_hcd vhci_hcd.0: Device attached [ 439.086080][T13907] vhci_hcd vhci_hcd.0: Device attached [ 439.223763][T13918] binder: 13904:13918 ioctl 0 200000000040 returned -22 [ 439.266786][T13912] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(21) [ 439.273410][T13912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 439.401270][T13912] vhci_hcd vhci_hcd.0: Device attached [ 439.476421][T13919] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 439.483055][T13919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.535290][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.566900][T13919] vhci_hcd vhci_hcd.0: Device attached [ 439.572974][T13907] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(25) [ 439.577122][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.579583][T13907] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.591839][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.599954][T13907] vhci_hcd vhci_hcd.0: Device attached [ 439.607798][T13907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 439.617680][T13907] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 439.627645][T13907] vhci_hcd vhci_hcd.0: port 0 already used [ 439.646279][T13928] vhci_hcd: connection closed [ 439.646427][ T2976] vhci_hcd vhci_hcd.5: stop threads [ 439.656771][T13920] vhci_hcd: connection closed [ 439.657061][T13924] vhci_hcd: connection closed [ 439.662342][T13910] vhci_hcd: connection closed [ 439.672000][ T2976] vhci_hcd vhci_hcd.5: release socket [ 439.672751][T13908] vhci_hcd: connection closed [ 439.687280][ T2976] vhci_hcd vhci_hcd.5: disconnect device [ 439.687356][T13916] vhci_hcd: connection closed [ 439.702022][ T2976] vhci_hcd vhci_hcd.5: stop threads [ 439.728302][ T2976] vhci_hcd vhci_hcd.5: release socket [ 439.748672][ T2976] vhci_hcd vhci_hcd.5: disconnect device [ 439.782105][ T2976] vhci_hcd vhci_hcd.5: stop threads [ 439.787704][ T2976] vhci_hcd vhci_hcd.5: release socket [ 439.814317][ T2976] vhci_hcd vhci_hcd.5: disconnect device [ 439.820567][ T2976] vhci_hcd vhci_hcd.5: stop threads [ 439.843523][ T2976] vhci_hcd vhci_hcd.5: release socket [ 439.853706][ T2976] vhci_hcd vhci_hcd.5: disconnect device [ 439.855744][T13935] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 439.866351][ T5894] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 439.883536][ T2976] vhci_hcd vhci_hcd.5: stop threads [ 439.888915][ T2976] vhci_hcd vhci_hcd.5: release socket [ 439.902140][ T2976] vhci_hcd vhci_hcd.5: disconnect device [ 439.907941][ T2976] vhci_hcd vhci_hcd.5: stop threads [ 439.913173][ T2976] vhci_hcd vhci_hcd.5: release socket [ 439.955292][ T2976] vhci_hcd vhci_hcd.5: disconnect device [ 440.026265][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 440.537741][T13953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.817231][T13952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.314742][T13967] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 441.853579][T13970] syzkaller0: entered promiscuous mode [ 441.859164][T13970] syzkaller0: entered allmulticast mode [ 442.239946][T13978] tipc: Enabling of bearer rejected, failed to enable media [ 443.460886][T13987] lo speed is unknown, defaulting to 1000 [ 443.603420][T13995] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 444.132771][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 444.962202][ T5894] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 445.103776][T14016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 445.110352][T14016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 445.131030][T14016] vhci_hcd vhci_hcd.0: Device attached [ 445.441868][ T5914] usb 40-1: SetAddress Request (11) to port 0 [ 445.448277][ T5914] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 445.583360][T14017] vhci_hcd: connection closed [ 445.594533][ T13] vhci_hcd vhci_hcd.3: stop threads [ 445.610092][ T13] vhci_hcd vhci_hcd.3: release socket [ 445.615671][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 446.713242][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'. [ 446.737673][T14037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2602'. [ 446.762979][T14041] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 447.018502][T14053] openvswitch: netlink: IP tunnel dst address not specified [ 447.045171][T14053] netdevsim netdevsim5: Direct firmware load for / [ 447.045171][T14053] failed with error -2 [ 447.751840][ T5915] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 447.813691][T14053] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 447.813691][T14053] [ 447.813718][ T30] audit: type=1400 audit(1765550882.625:995): avc: denied { firmware_load } for pid=14044 comm="syz.5.2607" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 448.006347][ T5915] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.081937][ T5915] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 448.093504][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.112114][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 448.132119][ T5915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 448.144937][ T5915] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.155453][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.163793][ T5915] usb 4-1: Product: syz [ 448.172715][ T5915] usb 4-1: Manufacturer: syz [ 448.316924][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 448.322568][ T5915] cdc_wdm 4-1:1.0: skipping garbage [ 448.351505][ T5915] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 448.366239][ T5915] cdc_wdm 4-1:1.0: Unknown control protocol [ 448.628273][ T5915] usb 4-1: USB disconnect, device number 21 [ 448.824023][ T30] audit: type=1400 audit(1765550883.635:996): avc: denied { create } for pid=14054 comm="syz.3.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 449.948119][ T30] audit: type=1400 audit(1765550884.755:997): avc: denied { mount } for pid=14092 comm="syz.3.2618" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 450.101335][ T30] audit: type=1400 audit(1765550884.905:998): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 450.657091][ T5914] usb 40-1: device descriptor read/8, error -110 [ 451.190286][T14125] bridge0: port 1(erspan0) entered blocking state [ 451.199904][T14125] bridge0: port 1(erspan0) entered disabled state [ 451.222024][T14125] erspan0: entered allmulticast mode [ 451.232683][ T5914] usb usb40-port1: attempt power cycle [ 451.239221][T14125] erspan0: entered promiscuous mode [ 451.814460][ T5914] usb usb40-port1: unable to enumerate USB device [ 451.857975][T14134] binder: 14122:14134 ioctl 0 200000000040 returned -22 [ 452.402026][ T89] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 452.571929][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 452.605532][ T89] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 452.692346][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.725365][ T89] usb 4-1: config 0 descriptor?? [ 452.944461][ T89] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 454.245974][T14181] overlayfs: failed to resolve './file0': -2 [ 454.301834][ T30] audit: type=1400 audit(1765550889.105:999): avc: denied { read write } for pid=14180 comm="syz.5.2649" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 454.380924][ T30] audit: type=1400 audit(1765550889.105:1000): avc: denied { open } for pid=14180 comm="syz.5.2649" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 454.422939][T14182] input: syz0 as /devices/virtual/input/input18 [ 454.432043][T14182] input: failed to attach handler leds to device input18, error: -6 [ 454.906979][ T89] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 454.972819][ T7939] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 455.099899][ T89] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 455.203587][ T7939] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 455.481816][ T7939] usb 3-1: USB disconnect, device number 20 [ 455.717202][ T89] usb 4-1: USB disconnect, device number 22 [ 456.113155][ T89] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 456.496737][ T89] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.598829][ T89] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.758359][ T89] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.313337][ T89] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 457.347399][ T89] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 457.377664][ T89] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.396222][ T89] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.418327][ T89] usb 4-1: Product: syz [ 457.424751][ T89] usb 4-1: Manufacturer: syz [ 457.470720][ T89] cdc_wdm 4-1:1.0: skipping garbage [ 457.490764][ T89] cdc_wdm 4-1:1.0: skipping garbage [ 457.541420][ T89] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 457.567661][ T89] cdc_wdm 4-1:1.0: Unknown control protocol [ 457.659209][T14218] fuse: Unknown parameter 'user_id00000000000000000000' [ 457.922928][ T89] usb 4-1: USB disconnect, device number 23 [ 458.301769][T14207] comedi comedi0: reset error (fatal) [ 458.604683][T14232] IPVS: Unknown mcast interface: vcan0 [ 459.252246][T14238] netlink: 'syz.3.2668': attribute type 10 has an invalid length. [ 460.148128][T14241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.196674][T14238] bond_slave_0: entered promiscuous mode [ 460.202536][T14238] bond_slave_1: entered promiscuous mode [ 460.215513][T14238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.224952][T14251] fuse: Bad value for 'fd' [ 460.258493][T14238] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 460.288748][T14249] tipc: Enabling of bearer rejected, failed to enable media [ 460.304058][T14257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.344242][T14253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.051229][T14273] netlink: 'syz.2.2679': attribute type 21 has an invalid length. [ 461.075550][T14273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2679'. [ 461.102088][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2679'. [ 461.744790][ T30] audit: type=1400 audit(1765550896.555:1001): avc: denied { write } for pid=14279 comm="syz.5.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 462.749251][T14288] fuse: Bad value for 'fd' [ 463.175964][T14298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.189679][T14298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.245547][T14300] openvswitch: netlink: IP tunnel dst address not specified [ 463.256041][T14300] netdevsim netdevsim1: Direct firmware load for / [ 463.256041][T14300] failed with error -2 [ 463.267621][T14300] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 463.267621][T14300] [ 463.582050][ T5916] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 463.801974][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 463.809199][ T5916] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 463.822498][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.837865][ T5916] usb 6-1: config 0 descriptor?? [ 463.974899][T14316] netlink: 'syz.2.2695': attribute type 21 has an invalid length. [ 463.985533][T14316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2695'. [ 464.004690][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2695'. [ 464.059128][ T5916] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 464.084137][ T5916] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 464.509761][T14321] fuse: Bad value for 'fd' [ 464.538628][ T5916] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 464.598375][T14324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14324 comm=syz.1.2698 [ 464.671068][T14325] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2696'. [ 465.105271][T14339] syz.1.2704 (14339): /proc/14338/oom_adj is deprecated, please use /proc/14338/oom_score_adj instead. [ 465.865846][T14331] comedi comedi0: reset error (fatal) [ 466.221610][ T30] audit: type=1400 audit(1765550901.015:1002): avc: denied { read } for pid=14356 comm="syz.1.2709" lport=39482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 466.258195][T14359] openvswitch: netlink: IP tunnel dst address not specified [ 466.350405][T14365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14365 comm=syz.1.2710 [ 467.077131][ T30] audit: type=1326 audit(1765550901.885:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14378 comm="syz.1.2717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x0 [ 467.349303][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 467.527380][T14396] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2722'. [ 467.876614][T14405] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 467.927784][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.005898][T14413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.052225][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.352956][T14432] overlayfs: missing 'lowerdir' [ 469.489309][T14436] openvswitch: netlink: IP tunnel dst address not specified [ 470.663849][T14450] 9p: Bad value for 'rfdno' [ 471.315267][ T30] audit: type=1326 audit(1765550906.125:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.1.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 471.369892][ T30] audit: type=1326 audit(1765550906.145:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.1.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 471.443848][ T30] audit: type=1326 audit(1765550906.165:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz.1.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 471.483127][ T30] audit: type=1326 audit(1765550906.165:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 471.508148][ T30] audit: type=1326 audit(1765550906.165:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2a58f749 code=0x7ffc0000 [ 472.201319][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'. [ 472.215145][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'. [ 472.276916][T14483] fuse: Bad value for 'fd' [ 472.971962][T14493] fuse: Unknown parameter '00000000000000000003' [ 474.491377][T14523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.526147][T14523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.763759][ T30] audit: type=1400 audit(1765550909.565:1009): avc: denied { mount } for pid=14525 comm="syz.3.2774" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 475.449243][ T30] audit: type=1400 audit(1765550910.245:1010): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 476.369389][ T30] audit: type=1400 audit(1765550910.285:1011): avc: denied { create } for pid=14540 comm="syz.5.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 476.389916][ T30] audit: type=1400 audit(1765550910.645:1012): avc: denied { accept } for pid=14540 comm="syz.5.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 476.409893][ T30] audit: type=1400 audit(1765550910.865:1013): avc: denied { write } for pid=14540 comm="syz.5.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 476.430183][ T30] audit: type=1400 audit(1765550910.875:1014): avc: denied { setattr } for pid=14540 comm="syz.5.2778" name="" dev="pipefs" ino=27541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 476.680879][T14568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.693515][T14568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.855088][T14570] binder: 14563:14570 ioctl 0 200000000040 returned -22 [ 479.847143][T14611] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2802'. [ 480.543230][T14626] fuse: Unknown parameter 'fd0x0000000000000003' [ 484.449309][T14669] fuse: Unknown parameter 'fd0x0000000000000003' [ 489.965194][T14753] fuse: Bad value for 'fd' [ 491.192635][T14774] siw: device registration error -23 [ 491.308193][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 491.632199][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.683650][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.879226][T14806] fuse: Bad value for 'fd' [ 493.872680][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2861'. [ 493.910066][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2862'. [ 494.309433][T14832] siw: device registration error -23 [ 496.434336][T14854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.320686][T14869] siw: device registration error -23 [ 497.892085][T14873] mkiss: ax0: crc mode is auto. [ 498.318744][T14878] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 499.350253][ T30] audit: type=1400 audit(1765550934.005:1015): avc: denied { getopt } for pid=14889 comm="syz.5.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 500.983613][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 500.993344][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.999800][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.055535][T10657] bond0: (slave syz_tun): Releasing backup interface [ 502.277388][ T13] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.354456][ T13] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.454943][ T13] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.558154][ T13] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.932783][ T13] erspan0: left allmulticast mode [ 502.937821][ T13] erspan0: left promiscuous mode [ 503.896078][ T13] bridge0: port 1(erspan0) entered disabled state [ 503.995368][ T13] bridge_slave_1: left allmulticast mode [ 504.001056][ T13] bridge_slave_1: left promiscuous mode [ 504.046419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.106229][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.115320][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.133844][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.142540][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.162224][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.181420][T14972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.195052][T14972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.210035][T14972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.220100][T14972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.228547][T14972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.532239][ T30] audit: type=1400 audit(1765550940.195:1016): avc: denied { name_bind } for pid=14996 comm="syz.5.2916" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 505.820834][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 506.281558][T14972] Bluetooth: hci1: command tx timeout [ 506.510741][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.536069][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.550015][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 506.560853][ T13] bond0 (unregistering): Released all slaves [ 506.658153][ T13] bond1 (unregistering): Released all slaves [ 506.675276][T14987] bridge0: port 1(erspan0) entered blocking state [ 506.682894][T14987] bridge0: port 1(erspan0) entered disabled state [ 506.690731][T14987] erspan0: entered allmulticast mode [ 506.699494][T14987] erspan0: entered promiscuous mode [ 506.822250][T14969] lo speed is unknown, defaulting to 1000 [ 506.836570][ T13] tipc: Left network mode [ 507.177958][T15031] ubi31: attaching mtd0 [ 507.195499][T15031] ubi31: scanning is finished [ 507.200241][T15031] ubi31: empty MTD device detected [ 507.507601][T14969] chnl_net:caif_netlink_parms(): no params data found [ 507.559921][T15031] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 507.567718][T15031] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 507.575087][T15031] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 507.582160][T15031] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 507.589709][T15031] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 507.597089][T15031] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 507.605569][T15031] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1899720874 [ 507.615714][T15031] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 507.634886][T15035] ubi31: background thread "ubi_bgt31d" started, PID 15035 [ 508.331826][T14972] Bluetooth: hci1: command tx timeout [ 508.540381][ T13] hsr_slave_0: left promiscuous mode [ 508.584169][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.613031][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.644343][ T30] audit: type=1400 audit(1765550943.455:1017): avc: denied { name_bind } for pid=15058 comm="syz.3.2931" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 508.751157][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.778485][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.913371][ T13] veth1_macvtap: left promiscuous mode [ 508.918928][ T13] veth0_macvtap: left promiscuous mode [ 508.925360][ T13] veth1_vlan: left promiscuous mode [ 508.943319][ T13] veth0_vlan: left promiscuous mode [ 510.109227][ T30] audit: type=1400 audit(1765550944.915:1018): avc: denied { create } for pid=15068 comm="syz.5.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 510.226412][ T30] audit: type=1400 audit(1765550944.935:1019): avc: denied { write } for pid=15068 comm="syz.5.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 510.333452][ T30] audit: type=1400 audit(1765550945.085:1020): avc: denied { read } for pid=15068 comm="syz.5.2934" path="socket:[45861]" dev="sockfs" ino=45861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 510.411840][T14972] Bluetooth: hci1: command tx timeout [ 510.702537][ T13] team0 (unregistering): Port device team_slave_1 removed [ 510.749602][ T13] team0 (unregistering): Port device team_slave_0 removed [ 511.067752][T15087] IPVS: Unknown mcast interface: vcan0 [ 511.078181][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.105732][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.132013][T14969] bridge_slave_0: entered allmulticast mode [ 511.144084][T14969] bridge_slave_0: entered promiscuous mode [ 511.170188][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.185236][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.215023][T14969] bridge_slave_1: entered allmulticast mode [ 511.222389][T14969] bridge_slave_1: entered promiscuous mode [ 511.243176][ T30] audit: type=1400 audit(1765550946.055:1021): avc: denied { open } for pid=15098 comm="syz.1.2942" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 511.353461][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.405927][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.919481][T14969] team0: Port device team_slave_0 added [ 511.947642][T14969] team0: Port device team_slave_1 added [ 511.954915][ T13] IPVS: stop unused estimator thread 0... [ 511.966061][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2947'. [ 512.003867][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2947'. [ 512.091019][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.104201][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.136113][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.199727][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.216648][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.283877][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.541925][T14972] Bluetooth: hci1: command tx timeout [ 512.591678][T15124] mkiss: ax0: crc mode is auto. [ 512.623054][T14969] hsr_slave_0: entered promiscuous mode [ 512.637600][T14969] hsr_slave_1: entered promiscuous mode [ 512.659164][T14969] debugfs: 'hsr0' already exists in 'hsr' [ 512.677540][T14969] Cannot create hsr debugfs directory [ 513.005567][T14969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 513.032385][T14969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 513.093735][T14969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.121386][T14969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.151863][ T30] audit: type=1400 audit(1765550948.685:1022): avc: denied { ioctl } for pid=15145 comm="syz.2.2953" path="socket:[47207]" dev="sockfs" ino=47207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.166420][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.227751][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.242592][ T4125] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.249790][ T4125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.300796][ T4125] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.307876][ T4125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.771378][ T30] audit: type=1400 audit(1765550949.575:1023): avc: denied { sys_module } for pid=14969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 515.042682][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.259031][T15163] mkiss: ax0: crc mode is auto. [ 515.467715][T14969] veth0_vlan: entered promiscuous mode [ 515.488932][T14969] veth1_vlan: entered promiscuous mode [ 515.530478][T14969] veth0_macvtap: entered promiscuous mode [ 515.552756][T14969] veth1_macvtap: entered promiscuous mode [ 515.614059][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.641317][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.665222][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.774055][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.219940][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.243223][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.413367][T10229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.501892][T10229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.566260][T10229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.575405][T10229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.171828][ T116] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 517.236037][ T30] audit: type=1400 audit(1765550951.995:1024): avc: denied { execute } for pid=15176 comm="syz.1.2959" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 517.343086][ T116] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 517.354368][ T116] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 517.365773][ T116] usb 3-1: config 201 has no interface number 0 [ 517.378073][ T116] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 517.390531][ T116] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 517.405121][ T116] usb 3-1: config 201 interface 249 has no altsetting 0 [ 517.426450][ T116] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 517.436409][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.454228][ T116] usb 3-1: Product: syz [ 517.461383][ T116] usb 3-1: Manufacturer: syz [ 517.488925][ T116] usb 3-1: SerialNumber: syz [ 517.847493][ T116] ath6kl: Failed to submit usb control message: -71 [ 517.877468][ T116] ath6kl: unable to send the bmi data to the device: -71 [ 517.913278][ T116] ath6kl: Unable to send get target info: -71 [ 517.944218][ T116] ath6kl: Failed to init ath6kl core: -71 [ 517.951382][ T116] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 517.969449][ T116] usb 3-1: USB disconnect, device number 21 [ 518.665403][T15213] mkiss: ax0: crc mode is auto. [ 521.482620][T15250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.515494][T15250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.545544][ T30] audit: type=1400 audit(1765550956.355:1025): avc: denied { ioctl } for pid=15252 comm="syz.6.2982" path="socket:[46504]" dev="sockfs" ino=46504 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 521.696121][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2984'. [ 521.711460][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.732110][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.740319][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.749069][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.757441][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.844461][T15260] lo speed is unknown, defaulting to 1000 [ 521.955707][ T30] audit: type=1400 audit(1765550956.765:1026): avc: denied { set_context_mgr } for pid=15267 comm="syz.2.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 521.970726][T15268] binder: 15267:15268 ioctl c0306201 200000000680 returned -14 [ 521.985319][T10229] ================================================================== [ 521.993400][T10229] BUG: KASAN: use-after-free in nf_hook_entry_head+0x2fe/0x310 [ 522.000943][T10229] Read of size 8 at addr ffff8880597b4108 by task kworker/u8:17/10229 [ 522.009077][T10229] [ 522.011384][T10229] CPU: 0 UID: 0 PID: 10229 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.011402][T10229] Tainted: [L]=SOFTLOCKUP [ 522.011407][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.011416][T10229] Workqueue: netns cleanup_net [ 522.011431][T10229] Call Trace: [ 522.011436][T10229] [ 522.011442][T10229] dump_stack_lvl+0x116/0x1f0 [ 522.011457][T10229] print_report+0xcd/0x630 [ 522.011473][T10229] ? __virt_addr_valid+0x81/0x610 [ 522.011485][T10229] ? __phys_addr+0xe8/0x180 [ 522.011497][T10229] ? nf_hook_entry_head+0x2fe/0x310 [ 522.011516][T10229] kasan_report+0xe0/0x110 [ 522.011531][T10229] ? nf_hook_entry_head+0x2fe/0x310 [ 522.011551][T10229] nf_hook_entry_head+0x2fe/0x310 [ 522.011570][T10229] __nf_unregister_net_hook+0x7e/0x660 [ 522.011591][T10229] nf_unregister_net_hook+0xd5/0x110 [ 522.011610][T10229] __nft_unregister_flowtable_net_hooks+0xfc/0x3f0 [ 522.011633][T10229] ? find_held_lock+0x2b/0x80 [ 522.011652][T10229] __nft_release_hook+0x26e/0x350 [ 522.011672][T10229] nf_tables_pre_exit_net+0xc5/0x120 [ 522.011685][T10229] ? __pfx_nf_tables_pre_exit_net+0x10/0x10 [ 522.011699][T10229] ops_undo_list+0x187/0xab0 [ 522.011720][T10229] ? __pfx_ops_undo_list+0x10/0x10 [ 522.011742][T10229] ? cleanup_net+0x347/0x830 [ 522.011755][T10229] ? idr_destroy+0x62/0x2e0 [ 522.011777][T10229] cleanup_net+0x41b/0x830 [ 522.011790][T10229] ? __pfx_cleanup_net+0x10/0x10 [ 522.011806][T10229] ? rcu_is_watching+0x12/0xc0 [ 522.011822][T10229] process_one_work+0x9ba/0x1b20 [ 522.011845][T10229] ? __pfx_process_one_work+0x10/0x10 [ 522.011863][T10229] ? assign_work+0x1a0/0x250 [ 522.011878][T10229] worker_thread+0x6c8/0xf10 [ 522.011896][T10229] ? __kthread_parkme+0x19e/0x250 [ 522.011908][T10229] ? __pfx_worker_thread+0x10/0x10 [ 522.011924][T10229] kthread+0x3c5/0x780 [ 522.011938][T10229] ? __pfx_kthread+0x10/0x10 [ 522.011952][T10229] ? rcu_is_watching+0x12/0xc0 [ 522.011964][T10229] ? __pfx_kthread+0x10/0x10 [ 522.011978][T10229] ret_from_fork+0x983/0xb10 [ 522.011992][T10229] ? __pfx_ret_from_fork+0x10/0x10 [ 522.012006][T10229] ? __switch_to+0x7af/0x10d0 [ 522.012022][T10229] ? __pfx_kthread+0x10/0x10 [ 522.012036][T10229] ret_from_fork_asm+0x1a/0x30 [ 522.012059][T10229] [ 522.012063][T10229] [ 522.233280][T10229] The buggy address belongs to the physical page: [ 522.239676][T10229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880597b7c00 pfn:0x597b4 [ 522.249715][T10229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 522.256798][T10229] page_type: f0(buddy) [ 522.260843][T10229] raw: 00fff00000000000 ffffea0002330108 ffffea000212f608 0000000000000000 [ 522.269401][T10229] raw: ffff8880597b7c00 0000000000000002 00000000f0000000 0000000000000000 [ 522.277964][T10229] page dumped because: kasan: bad access detected [ 522.284424][T10229] page_owner tracks the page as freed [ 522.289789][T10229] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10986, tgid 10963 (syz.2.1725), ts 270520447432, free_ts 282445532328 [ 522.311324][T10229] post_alloc_hook+0x1af/0x220 [ 522.316078][T10229] get_page_from_freelist+0xd0b/0x31a0 [ 522.321509][T10229] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 522.327377][T10229] alloc_pages_mpol+0x1fb/0x550 [ 522.332209][T10229] new_slab+0x2c3/0x430 [ 522.336375][T10229] ___slab_alloc+0xe18/0x1c90 [ 522.341037][T10229] __slab_alloc.constprop.0+0x63/0x110 [ 522.346480][T10229] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 522.352875][T10229] kmalloc_reserve+0xef/0x2c0 [ 522.357528][T10229] __alloc_skb+0x186/0x410 [ 522.361927][T10229] alloc_skb_with_frags+0xe0/0x860 [ 522.367019][T10229] sock_alloc_send_pskb+0x7f9/0x980 [ 522.372194][T10229] unix_dgram_sendmsg+0x3bc/0x1830 [ 522.377303][T10229] ____sys_sendmsg+0xa5d/0xc30 [ 522.382042][T10229] ___sys_sendmsg+0x134/0x1d0 [ 522.386699][T10229] __sys_sendmmsg+0x200/0x420 [ 522.391354][T10229] page last free pid 5186 tgid 5186 stack trace: [ 522.397654][T10229] __free_frozen_pages+0x7df/0x1170 [ 522.402835][T10229] __put_partials+0x130/0x170 [ 522.407508][T10229] qlist_free_all+0x4c/0xf0 [ 522.412019][T10229] kasan_quarantine_reduce+0x195/0x1e0 [ 522.417464][T10229] __kasan_slab_alloc+0x69/0x90 [ 522.422297][T10229] __kmalloc_cache_noprof+0x282/0x800 [ 522.427651][T10229] kernfs_fop_open+0x244/0xda0 [ 522.432399][T10229] do_dentry_open+0x748/0x1590 [ 522.437142][T10229] vfs_open+0x82/0x3f0 [ 522.441195][T10229] path_openat+0x2078/0x3140 [ 522.445767][T10229] do_filp_open+0x20b/0x470 [ 522.450250][T10229] do_sys_openat2+0x11f/0x280 [ 522.454903][T10229] __x64_sys_openat+0x174/0x210 [ 522.459731][T10229] do_syscall_64+0xcd/0xf80 [ 522.464213][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.470083][T10229] [ 522.472391][T10229] Memory state around the buggy address: [ 522.477997][T10229] ffff8880597b4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 522.486033][T10229] ffff8880597b4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 522.494246][T10229] >ffff8880597b4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 522.502279][T10229] ^ [ 522.506579][T10229] ffff8880597b4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 522.514615][T10229] ffff8880597b4200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 522.522662][T10229] ================================================================== [ 522.538587][ T30] audit: type=1400 audit(1765550956.765:1027): avc: denied { call } for pid=15267 comm="syz.2.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 522.690982][T10229] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 522.698213][T10229] CPU: 1 UID: 0 PID: 10229 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.709419][T10229] Tainted: [L]=SOFTLOCKUP [ 522.713739][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.723787][T10229] Workqueue: netns cleanup_net [ 522.728530][T10229] Call Trace: [ 522.731782][T10229] [ 522.734686][T10229] dump_stack_lvl+0x3d/0x1f0 [ 522.739262][T10229] vpanic+0x640/0x6f0 [ 522.743218][T10229] panic+0xca/0xd0 [ 522.747011][T10229] ? __pfx_panic+0x10/0x10 [ 522.751408][T10229] ? nf_hook_entry_head+0x2fe/0x310 [ 522.756593][T10229] ? preempt_schedule_common+0x44/0xc0 [ 522.762022][T10229] ? preempt_schedule_thunk+0x16/0x30 [ 522.767374][T10229] ? check_panic_on_warn+0x1f/0xb0 [ 522.772470][T10229] check_panic_on_warn+0xab/0xb0 [ 522.777380][T10229] end_report+0x107/0x160 [ 522.781691][T10229] kasan_report+0xee/0x110 [ 522.786112][T10229] ? nf_hook_entry_head+0x2fe/0x310 [ 522.791307][T10229] nf_hook_entry_head+0x2fe/0x310 [ 522.796328][T10229] __nf_unregister_net_hook+0x7e/0x660 [ 522.801773][T10229] nf_unregister_net_hook+0xd5/0x110 [ 522.807033][T10229] __nft_unregister_flowtable_net_hooks+0xfc/0x3f0 [ 522.813512][T10229] ? find_held_lock+0x2b/0x80 [ 522.818162][T10229] __nft_release_hook+0x26e/0x350 [ 522.823161][T10229] nf_tables_pre_exit_net+0xc5/0x120 [ 522.828415][T10229] ? __pfx_nf_tables_pre_exit_net+0x10/0x10 [ 522.834276][T10229] ops_undo_list+0x187/0xab0 [ 522.838850][T10229] ? __pfx_ops_undo_list+0x10/0x10 [ 522.843935][T10229] ? cleanup_net+0x347/0x830 [ 522.848493][T10229] ? idr_destroy+0x62/0x2e0 [ 522.852976][T10229] cleanup_net+0x41b/0x830 [ 522.857361][T10229] ? __pfx_cleanup_net+0x10/0x10 [ 522.862279][T10229] ? rcu_is_watching+0x12/0xc0 [ 522.867015][T10229] process_one_work+0x9ba/0x1b20 [ 522.871937][T10229] ? __pfx_process_one_work+0x10/0x10 [ 522.877293][T10229] ? assign_work+0x1a0/0x250 [ 522.881871][T10229] worker_thread+0x6c8/0xf10 [ 522.886437][T10229] ? __kthread_parkme+0x19e/0x250 [ 522.891432][T10229] ? __pfx_worker_thread+0x10/0x10 [ 522.896513][T10229] kthread+0x3c5/0x780 [ 522.900552][T10229] ? __pfx_kthread+0x10/0x10 [ 522.905122][T10229] ? rcu_is_watching+0x12/0xc0 [ 522.909868][T10229] ? __pfx_kthread+0x10/0x10 [ 522.914438][T10229] ret_from_fork+0x983/0xb10 [ 522.919021][T10229] ? __pfx_ret_from_fork+0x10/0x10 [ 522.924108][T10229] ? __switch_to+0x7af/0x10d0 [ 522.928758][T10229] ? __pfx_kthread+0x10/0x10 [ 522.933320][T10229] ret_from_fork_asm+0x1a/0x30 [ 522.938069][T10229] [ 522.941368][T10229] Kernel Offset: disabled [ 522.945662][T10229] Rebooting in 86400 seconds..