last executing test programs: 7.440546627s ago: executing program 4 (id=157): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x81, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 7.325009474s ago: executing program 4 (id=159): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x20802, 0x0) pread64(r1, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x2c}}, 0x40000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524edff0005240000000d240f11fe000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0002"], 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4824, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=0']) 6.961802632s ago: executing program 1 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x50, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 6.765805205s ago: executing program 1 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'vlan0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 6.686859026s ago: executing program 1 (id=165): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f00000002c0)={[{}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 6.065518423s ago: executing program 1 (id=168): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000085804184000000000000109022400010000a008090400fe017c9e9ca50a611b397d030000000921fffffd0122050009058103ff030701fd3ac73dde18765c51134c01fb7492fbe5b85cd9ed93cf8f0340950034b3d84001671e800c9e74914cb96159700f30279bb38b73309bf2c048d15242a398d4e1847787aab9cc"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0xcd, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022ae"], 0x0}, 0x0) socket(0x200000000000011, 0x3, 0x0) socket(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket(0x2b, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)) 4.097172818s ago: executing program 2 (id=171): r0 = epoll_create(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x41) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r2, 0x7ffffffe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000540)={0x8, r4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLL', 0x3}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x8}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 4.045875042s ago: executing program 2 (id=172): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000300)) 4.004360243s ago: executing program 2 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x8, 0x70bd27, 0x25dfdbfd}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048805) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1f0000006d"], 0x38}, 0x1, 0x300}, 0x0) 3.917268064s ago: executing program 2 (id=174): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x2, 0x0, 0x7}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x1e8}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x20000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x10000) 3.910632031s ago: executing program 4 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 3.850863878s ago: executing program 4 (id=176): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'vlan0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3.828483071s ago: executing program 4 (id=177): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000540)=0x3) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$nbd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000040000900400007000000337965941538be090000000000000000008e727ac96d783ba70d0000000000fd0000000000007da4834d34137f0f4731d2cf3479d7b59c85d96de4747d76a9a30e727277c5a9c6042b8f8006eea3c032a54a2b62d053ec71b7f9f1ed04169c4088"], 0x34) 3.78066804s ago: executing program 3 (id=178): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00]) getgroups(0x3, &(0x7f0000000380)=[r1, r2, r3]) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/96, 0x60) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4028af11, &(0x7f0000000080)) 3.734046224s ago: executing program 0 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040), &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x480040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 3.661255987s ago: executing program 1 (id=180): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000085804184000000000000109022400010000a008090400fe017c9e9ca50a611b397d030000000921fffffd0122050009058103ff030701fd3ac73dde18765c51134c01fb7492fbe5b85cd9ed93cf8f0340950034b3d84001671e800c9e74914cb96159700f30279bb38b73309bf2c048d15242a398d4e1847787aab9cc"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0xcd, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022ae"], 0x0}, 0x0) socket(0x200000000000011, 0x3, 0x0) socket(0x15, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, 0x0) socket(0x2b, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) 3.509798335s ago: executing program 3 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000100)=r2, 0x4) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x1, 0x5, 0x0, {0x6, 0xd41, 0x0, 0x344, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x5, 0xf}}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x4, 0x2, 0x3, 0x4}}}]}, 0x54}}, 0xc00) 3.013503712s ago: executing program 2 (id=182): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) accept(r1, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000180)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x768}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x7, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7b, 0x5, 0x3}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x0, 0x8, 0x4, 0x5c16784b74c335a5, 0x2}, 0x4c, &(0x7f00000003c0)={0x5, 0xf, 0x4c, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x41, 0x0, 0x8, [0xffcf, 0x0, 0x0, 0x0, 0xff3f3f]}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x2, 0xf00, 0x0, [0xf, 0x3f, 0x3f00, 0x3f30]}, @generic={0xb, 0x10, 0xc, "cd00870940161939"}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1404}}, {0xab, &(0x7f0000000480)=@string={0xab, 0x3, "45d492a7dc2d746130021ed0eb252d124e2f1ee657e1cd4a3fadc31b5f428f421a9f02ab9f1e7b753bfac02591c56e299c25736b631b15fe3f9ed3d88a4988d3d4ec0226b08b58227347f76a46ae9bc884a9846672ca804a58da70930282158865f01ad03ff27b8d1bf961b1bd39bfc73abc2173093616a7689d8b3f6f158c62f147003bae5d64d1089c8c21dcc2e8679926ff7d7e81b3624249ada90768a453ef103361c8645848f8"}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 2.998061172s ago: executing program 3 (id=183): fanotify_init(0x4, 0x800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000500"/104], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x434a0c1d, 0x5, 0x8, 0x4, r0}) setpriority(0x1, r1, 0xffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x50}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002180), 0x101000, 0x0) lseek(r5, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r6, 0x1) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) 2.18589229s ago: executing program 0 (id=184): syz_emit_ethernet(0x62, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x3, 0x273}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x82, 0x0, &(0x7f0000000040)) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0xc, r5, 0xe, r6}, 0x10) 2.033513417s ago: executing program 3 (id=185): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @default]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr\x00') getdents64(r2, &(0x7f0000002440)=""/181, 0xb5) getdents64(r2, 0xffffffffffffffff, 0xa3a743e7de85212) listen(r2, 0x80000000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x21a900, 0x0) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, 0xf, 0x3, 0x6d}) close(0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x18) r6 = dup(r5) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x18, 0x110, 0x2, 0x600000}}, @ip_ttl={{0x14, 0x110, 0x2, 0x400}}], 0x30, 0x4c00}, 0x810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002f000000850000000e000000850000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(r9, r9, 0x0) lstat(&(0x7f0000000880)='./file0\x00', 0x0) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.731872642s ago: executing program 4 (id=186): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002400128009000100626f6e640000000014576cb6e2340b000280080007000e00000008000880e0000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=[0xfff9, 0x9008, 0x3], &(0x7f00000000c0)=[0x5, 0x3, 0x7fff, 0x7, 0xfffb, 0x7], &(0x7f00000001c0)=[0x1ff, 0x2a], &(0x7f0000000200)=[0xfffd, 0x702, 0x1]}) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r11, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x180}, 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="de"], 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x4b0, 0xbbba, 0x2, 0x4b1e214daee7d038, 0x0, {}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x1, 0x5}, 0x0, 0x3f0, 0x0, 0x458, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xe, 0x0, 0x7, 0x20, 0x3, 0xb}) 1.360151502s ago: executing program 3 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x38, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.209417534s ago: executing program 0 (id=188): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) 1.075882344s ago: executing program 3 (id=189): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000088bf5e65a413c8"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, &(0x7f0000000340)={0xfffffffd, [[0x0, 0x0, 0x0, 0x0, 0x400, 0x3], [0x1], [0x0, 0xfffffffd, 0x1]], '\x00', [{0xfffffdf4}, {}, {0x4}, {0x200000}, {}, {}, {}, {}, {}, {}, {0x0, 0x3c0f}, {0x0, 0x200000}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, 0x0, 0x0, 0xf0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) 1.022981243s ago: executing program 0 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000037747be0500000007000002090000ff73797a3000"/32], 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) 513.275206ms ago: executing program 0 (id=191): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x81, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 447.510454ms ago: executing program 0 (id=192): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x1900, 0xc001, 0x0, 0x0}], 0x1}) 171.812829ms ago: executing program 2 (id=193): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0258ff000000000600000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100090810000000000000040000", 0x58}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4c26, 0x7d, @empty, 0x20000007}, 0x1c) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x4, 0x20000000, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r5 = syz_open_pts(0xffffffffffffffff, 0x101) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000040801010000000000000000000000010c00048008000140000000090600024088e7000078f3455a24c9f547021530efeeff8a15861db3878271"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20040800) read(r2, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x12, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x7, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) 0s ago: executing program 1 (id=194): socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000085804184000000000000109022400010000a008090400fe017c9e9ca50a611b397d030000000921fffffd0122050009058103ff030701fd3ac73dde18765c51134c01fb7492fbe5b85cd9ed93cf8f0340950034b3d84001671e800c9e74914cb96159700f30279bb38b73309bf2c048d15242a398d4e1847787aab9cc"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0xcd, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x14}}, 0x0}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022ae"], 0x0}, 0x0) socket(0x200000000000011, 0x3, 0x0) socket(0x15, 0x5, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, 0x0) socket(0x2b, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 57.600222][ T30] audit: type=1400 audit(1769312484.669:62): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.623838][ T30] audit: type=1400 audit(1769312484.699:63): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.626298][ T5792] cgroup: Unknown subsys name 'net' [ 57.653774][ T30] audit: type=1400 audit(1769312484.729:64): avc: denied { unmount } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.755166][ T5792] cgroup: Unknown subsys name 'cpuset' [ 57.762717][ T5792] cgroup: Unknown subsys name 'rlimit' [ 57.919817][ T30] audit: type=1400 audit(1769312484.989:65): avc: denied { setattr } for pid=5792 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.953388][ T30] audit: type=1400 audit(1769312484.989:66): avc: denied { create } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.975683][ T30] audit: type=1400 audit(1769312484.989:67): avc: denied { write } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.996190][ T30] audit: type=1400 audit(1769312484.989:68): avc: denied { read } for pid=5792 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.021299][ T30] audit: type=1400 audit(1769312484.989:69): avc: denied { mounton } for pid=5792 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.050740][ T30] audit: type=1400 audit(1769312484.989:70): avc: denied { mount } for pid=5792 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.065543][ T5794] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.084827][ T30] audit: type=1400 audit(1769312485.159:71): avc: denied { relabelto } for pid=5794 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.001383][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.425313][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.436960][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.445025][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.452517][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.458162][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.459943][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.467702][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.480662][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.486464][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.488273][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.502610][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.510550][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.510605][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.518899][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.526500][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.533072][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.540059][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.551005][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.554135][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.567277][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.567903][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.582891][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.598052][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.605685][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.616807][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.891913][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 62.891928][ T30] audit: type=1400 audit(1769312489.969:83): avc: denied { module_request } for pid=5804 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.981302][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 63.087820][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 63.106144][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 63.131465][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 63.235070][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.242627][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.249799][ T5804] bridge_slave_0: entered allmulticast mode [ 63.256733][ T5804] bridge_slave_0: entered promiscuous mode [ 63.264186][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 63.286802][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.293964][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.301264][ T5804] bridge_slave_1: entered allmulticast mode [ 63.307848][ T5804] bridge_slave_1: entered promiscuous mode [ 63.374174][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.381299][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.388448][ T5808] bridge_slave_0: entered allmulticast mode [ 63.395215][ T5808] bridge_slave_0: entered promiscuous mode [ 63.407820][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.415100][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.422372][ T5809] bridge_slave_0: entered allmulticast mode [ 63.428968][ T5809] bridge_slave_0: entered promiscuous mode [ 63.437760][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.451414][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.458526][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.465852][ T5808] bridge_slave_1: entered allmulticast mode [ 63.472626][ T5808] bridge_slave_1: entered promiscuous mode [ 63.479075][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.486505][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.493806][ T5805] bridge_slave_0: entered allmulticast mode [ 63.500398][ T5805] bridge_slave_0: entered promiscuous mode [ 63.507610][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.514741][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.522386][ T5809] bridge_slave_1: entered allmulticast mode [ 63.528997][ T5809] bridge_slave_1: entered promiscuous mode [ 63.537064][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.566693][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.574095][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.581443][ T5805] bridge_slave_1: entered allmulticast mode [ 63.588029][ T5805] bridge_slave_1: entered promiscuous mode [ 63.631593][ T5804] team0: Port device team_slave_0 added [ 63.639422][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.656527][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.673731][ T5804] team0: Port device team_slave_1 added [ 63.681121][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.692672][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.701893][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.708967][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.716667][ T5806] bridge_slave_0: entered allmulticast mode [ 63.723698][ T5806] bridge_slave_0: entered promiscuous mode [ 63.731985][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.742847][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.763985][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.771157][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.778236][ T5806] bridge_slave_1: entered allmulticast mode [ 63.785173][ T5806] bridge_slave_1: entered promiscuous mode [ 63.834469][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.841535][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.867590][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.880727][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.888342][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.914387][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.926587][ T5809] team0: Port device team_slave_0 added [ 63.939991][ T5808] team0: Port device team_slave_0 added [ 63.946735][ T5805] team0: Port device team_slave_0 added [ 63.960733][ T5809] team0: Port device team_slave_1 added [ 63.967893][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.984070][ T5808] team0: Port device team_slave_1 added [ 64.002976][ T5805] team0: Port device team_slave_1 added [ 64.017357][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.045007][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.052074][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.078580][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.102224][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.109178][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.135972][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.153944][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.160990][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.187045][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.217030][ T5804] hsr_slave_0: entered promiscuous mode [ 64.223202][ T5804] hsr_slave_1: entered promiscuous mode [ 64.229750][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.236811][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.262865][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.274200][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.281353][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.307525][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.320432][ T5806] team0: Port device team_slave_0 added [ 64.327875][ T5806] team0: Port device team_slave_1 added [ 64.338812][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.345871][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.371979][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.396509][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.403626][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.429639][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.463215][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.470248][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.496506][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.543034][ T5809] hsr_slave_0: entered promiscuous mode [ 64.549122][ T5809] hsr_slave_1: entered promiscuous mode [ 64.555302][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 64.561106][ T5809] Cannot create hsr debugfs directory [ 64.594115][ T5808] hsr_slave_0: entered promiscuous mode [ 64.600136][ T5808] hsr_slave_1: entered promiscuous mode [ 64.601201][ T5817] Bluetooth: hci0: command tx timeout [ 64.606792][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 64.617048][ T5808] Cannot create hsr debugfs directory [ 64.630428][ T5806] hsr_slave_0: entered promiscuous mode [ 64.636737][ T5806] hsr_slave_1: entered promiscuous mode [ 64.642702][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 64.648406][ T5806] Cannot create hsr debugfs directory [ 64.670680][ T5817] Bluetooth: hci1: command tx timeout [ 64.676350][ T5817] Bluetooth: hci4: command tx timeout [ 64.680672][ T52] Bluetooth: hci2: command tx timeout [ 64.682265][ T5815] Bluetooth: hci3: command tx timeout [ 64.704420][ T5805] hsr_slave_0: entered promiscuous mode [ 64.710440][ T5805] hsr_slave_1: entered promiscuous mode [ 64.716471][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 64.722396][ T5805] Cannot create hsr debugfs directory [ 65.030266][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.043298][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.053176][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.068739][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.114883][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.123996][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.143993][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.154366][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.203808][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.222703][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.235052][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.248552][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.323933][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.334842][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.359414][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.387354][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.397546][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.408128][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.437956][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.459546][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.466750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.479776][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.489832][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.505809][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.512921][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.522882][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.551787][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.595983][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.606560][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.629231][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.657437][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.664571][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.674207][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.681304][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.690110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.697182][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.719959][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.727103][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.808058][ T30] audit: type=1400 audit(1769312492.879:84): avc: denied { sys_module } for pid=5804 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.945974][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.993215][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.044093][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.065277][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.079672][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.087030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.111616][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.127468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.134589][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.146287][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.153391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.173653][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.180785][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.196172][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.206846][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.276832][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.292961][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.374055][ T5804] veth0_vlan: entered promiscuous mode [ 66.396481][ T5806] veth0_vlan: entered promiscuous mode [ 66.407552][ T5804] veth1_vlan: entered promiscuous mode [ 66.444883][ T5806] veth1_vlan: entered promiscuous mode [ 66.465348][ T5804] veth0_macvtap: entered promiscuous mode [ 66.484524][ T5804] veth1_macvtap: entered promiscuous mode [ 66.548794][ T5806] veth0_macvtap: entered promiscuous mode [ 66.587245][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.624824][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.640014][ T5806] veth1_macvtap: entered promiscuous mode [ 66.671670][ T5817] Bluetooth: hci0: command tx timeout [ 66.684453][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.694365][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.711990][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.731260][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.740216][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.751314][ T5817] Bluetooth: hci4: command tx timeout [ 66.756734][ T5817] Bluetooth: hci3: command tx timeout [ 66.762794][ T5815] Bluetooth: hci2: command tx timeout [ 66.768195][ T5815] Bluetooth: hci1: command tx timeout [ 66.777224][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.793578][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.801292][ T5809] veth0_vlan: entered promiscuous mode [ 66.814679][ T5808] veth0_vlan: entered promiscuous mode [ 66.829309][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.838266][ T5808] veth1_vlan: entered promiscuous mode [ 66.863516][ T5809] veth1_vlan: entered promiscuous mode [ 66.884214][ T4951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.893992][ T4951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.910079][ T4951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.920867][ T4951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.945608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.957987][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.007216][ T5809] veth0_macvtap: entered promiscuous mode [ 67.015067][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.024728][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.046366][ T5809] veth1_macvtap: entered promiscuous mode [ 67.056733][ T5808] veth0_macvtap: entered promiscuous mode [ 67.073257][ T30] audit: type=1400 audit(1769312494.149:85): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.RBTt7L/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.109582][ T4951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.118437][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.121645][ T4951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.131420][ T30] audit: type=1400 audit(1769312494.159:86): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.156838][ T30] audit: type=1400 audit(1769312494.159:87): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.RBTt7L/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.194351][ T5804] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.197496][ T30] audit: type=1400 audit(1769312494.159:88): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.213148][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.232996][ T30] audit: type=1400 audit(1769312494.159:89): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.RBTt7L/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.265912][ T30] audit: type=1400 audit(1769312494.159:90): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/root/syzkaller.RBTt7L/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.274353][ T5808] veth1_macvtap: entered promiscuous mode [ 67.299457][ T30] audit: type=1400 audit(1769312494.199:91): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.334059][ T5805] veth0_vlan: entered promiscuous mode [ 67.342125][ T30] audit: type=1400 audit(1769312494.209:92): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.365848][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.375138][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.404843][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.432461][ T4951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.441928][ T4951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.470294][ T4951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.482336][ T4951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.491692][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.498417][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.535834][ T5805] veth1_vlan: entered promiscuous mode [ 67.572130][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.587769][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.716981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.730175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.922180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.933180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.995656][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.004606][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.018144][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 68.018185][ T30] audit: type=1400 audit(1769312495.089:111): avc: denied { create } for pid=5924 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.080675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.302464][ T30] audit: type=1400 audit(1769312495.089:112): avc: denied { setopt } for pid=5924 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.347822][ T30] audit: type=1400 audit(1769312495.289:113): avc: denied { prog_load } for pid=5924 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.416038][ T30] audit: type=1400 audit(1769312495.289:114): avc: denied { bpf } for pid=5924 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.525585][ T5925] orangefs_mount: mount request failed with -4 [ 68.526828][ T30] audit: type=1400 audit(1769312495.299:115): avc: denied { perfmon } for pid=5924 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.576725][ T30] audit: type=1400 audit(1769312495.319:116): avc: denied { prog_run } for pid=5924 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.600895][ T30] audit: type=1400 audit(1769312495.399:117): avc: denied { create } for pid=5922 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.608989][ T5805] veth0_macvtap: entered promiscuous mode [ 68.728051][ T5805] veth1_macvtap: entered promiscuous mode [ 68.750513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.750830][ T5815] Bluetooth: hci0: command tx timeout [ 68.765464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.805333][ T30] audit: type=1400 audit(1769312495.879:118): avc: denied { map_create } for pid=5930 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.825011][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.833418][ T5815] Bluetooth: hci1: command tx timeout [ 68.838802][ T5815] Bluetooth: hci3: command tx timeout [ 68.844678][ T5817] Bluetooth: hci4: command tx timeout [ 68.850098][ T5817] Bluetooth: hci2: command tx timeout [ 68.860737][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.909828][ T30] audit: type=1400 audit(1769312495.879:119): avc: denied { create } for pid=5930 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.013134][ T30] audit: type=1400 audit(1769312495.879:120): avc: denied { connect } for pid=5930 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.042967][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.064465][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.075777][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.076317][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.105844][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.141473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.149771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.158894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 69.183175][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.997591][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.024705][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.071708][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.081072][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.089774][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.139399][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.247549][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 70.273965][ T5952] input: syz0 as /devices/virtual/input/input5 [ 70.282128][ T5950] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 70.495935][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.571046][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.837830][ T5815] Bluetooth: hci0: command tx timeout [ 70.838335][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 70.881973][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 70.919642][ T52] Bluetooth: hci1: command tx timeout [ 70.919650][ T5817] Bluetooth: hci3: command tx timeout [ 70.920077][ T24] usb 5-1: no configurations [ 70.925196][ T5815] Bluetooth: hci4: command tx timeout [ 70.941400][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.948018][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.948228][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.988378][ T24] usb 5-1: can't read configurations, error -22 [ 71.003700][ T43] usb 3-1: Product: syz [ 71.014032][ T43] usb 3-1: Manufacturer: syz [ 71.057905][ T43] usb 3-1: SerialNumber: syz [ 71.261194][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.285166][ T5950] mmap: syz.2.9 (5950) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.314448][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.430774][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 71.443368][ T24] usb 5-1: no configurations [ 71.448259][ T24] usb 5-1: can't read configurations, error -22 [ 71.461962][ T24] usb usb5-port1: attempt power cycle [ 71.562350][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 71.582051][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 71.596891][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 71.623111][ T43] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 71.685753][ T43] usb 3-1: USB disconnect, device number 2 [ 71.800559][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.823547][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 71.833512][ T24] usb 5-1: no configurations [ 71.838133][ T24] usb 5-1: can't read configurations, error -22 [ 71.990643][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.023970][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 72.130595][ T24] usb 5-1: no configurations [ 72.135238][ T24] usb 5-1: can't read configurations, error -22 [ 72.154227][ T24] usb usb5-port1: unable to enumerate USB device [ 72.436409][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.448417][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 73.261451][ T792] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.274037][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 73.274053][ T30] audit: type=1400 audit(1769312500.349:168): avc: denied { create } for pid=6041 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.316171][ T30] audit: type=1400 audit(1769312500.379:169): avc: denied { setopt } for pid=6041 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.336075][ T30] audit: type=1400 audit(1769312500.379:170): avc: denied { write } for pid=6041 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.431963][ T792] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.457551][ T792] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.484735][ T792] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.496363][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.574319][ T6053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16'. [ 73.583692][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 73.630325][ T30] audit: type=1400 audit(1769312500.639:171): avc: denied { create } for pid=6041 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.706077][ T30] audit: type=1400 audit(1769312500.639:172): avc: denied { append } for pid=6041 comm="syz.2.16" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.790626][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.846904][ T6032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.862280][ T792] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.981391][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 73.989745][ T43] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 73.999896][ T43] usb 5-1: config 0 has no interface number 0 [ 74.010318][ T43] usb 5-1: config 0 interface 184 has no altsetting 0 [ 74.022503][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 74.033892][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.042450][ T43] usb 5-1: Product: syz [ 74.046682][ T43] usb 5-1: Manufacturer: syz [ 74.051407][ T43] usb 5-1: SerialNumber: syz [ 74.059241][ T43] usb 5-1: config 0 descriptor?? [ 74.069874][ T43] smsc75xx v1.0.0 [ 74.077657][ T24] usb 1-1: USB disconnect, device number 2 [ 74.511825][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout [ 74.519842][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 74.527097][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 74.630555][ T792] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 74.794294][ T792] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 74.805102][ T792] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.819394][ T792] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.826629][ T792] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 74.837052][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.857361][ T792] usb 3-1: config 0 descriptor?? [ 75.075961][ T30] audit: type=1400 audit(1769312502.149:173): avc: denied { create } for pid=6069 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.169413][ T6081] netlink: 9 bytes leftover after parsing attributes in process `syz.2.19'. [ 75.178754][ T6081] 0·: renamed from hsr0 (while UP) [ 75.196340][ T6081] 0·: entered allmulticast mode [ 75.201691][ T6081] hsr_slave_0: entered allmulticast mode [ 75.207485][ T6081] hsr_slave_1: entered allmulticast mode [ 75.215763][ T6081] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 75.238084][ T30] audit: type=1400 audit(1769312502.149:174): avc: denied { ioctl } for pid=6069 comm="syz.2.19" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.391624][ T30] audit: type=1400 audit(1769312502.149:175): avc: denied { create } for pid=6069 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.588621][ T30] audit: type=1400 audit(1769312502.229:176): avc: denied { create } for pid=6069 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.609760][ T792] usb 3-1: string descriptor 0 read error: -71 [ 75.618796][ T792] usb 3-1: USB disconnect, device number 3 [ 75.643069][ T30] audit: type=1400 audit(1769312502.239:177): avc: denied { write } for pid=6069 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.042921][ T3090] cfg80211: failed to load regulatory.db [ 76.465985][ T43] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 76.559189][ T43] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 76.590752][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.604018][ T43] usb 5-1: USB disconnect, device number 6 [ 76.607496][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 76.618711][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 78.220601][ T792] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.351202][ T792] usb 5-1: device descriptor read/64, error -71 [ 78.592159][ T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.680793][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.687231][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 78.693344][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 78.741125][ T792] usb 5-1: device descriptor read/64, error -71 [ 78.850803][ T792] usb usb5-port1: attempt power cycle [ 79.190554][ T792] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 79.222091][ T792] usb 5-1: device descriptor read/8, error -71 [ 79.460605][ T792] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 79.484205][ T792] usb 5-1: device descriptor read/8, error -71 [ 79.591337][ T792] usb usb5-port1: unable to enumerate USB device [ 80.751353][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 80.758665][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 80.774965][ T5815] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.855412][ T6106] FAULT_INJECTION: forcing a failure. [ 80.855412][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 80.868166][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.4.27 Not tainted syzkaller #0 PREEMPT(full) [ 80.868189][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 80.868198][ T6106] Call Trace: [ 80.868203][ T6106] [ 80.868210][ T6106] dump_stack_lvl+0x100/0x190 [ 80.868234][ T6106] should_fail_ex.cold+0x5/0xa [ 80.868259][ T6106] should_failslab+0xc2/0x120 [ 80.868280][ T6106] ? tomoyo_encode2+0xfb/0x3c0 [ 80.868297][ T6106] __kmalloc_noprof+0xf6/0x9c0 [ 80.868321][ T6106] ? tomoyo_encode2+0xfb/0x3c0 [ 80.868344][ T6106] tomoyo_encode2+0xfb/0x3c0 [ 80.868367][ T6106] tomoyo_encode+0x29/0x50 [ 80.868384][ T6106] tomoyo_realpath_from_path+0x18c/0x690 [ 80.868409][ T6106] tomoyo_path_number_perm+0x23c/0x580 [ 80.868435][ T6106] ? tomoyo_path_number_perm+0x22e/0x580 [ 80.868461][ T6106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.868508][ T6106] ? find_held_lock+0x2b/0x80 [ 80.868530][ T6106] ? hook_file_ioctl_common+0x146/0x410 [ 80.868551][ T6106] ? __fget_files+0x215/0x3d0 [ 80.868575][ T6106] ? __fget_files+0x21f/0x3d0 [ 80.868598][ T6106] security_file_ioctl+0xd3/0x230 [ 80.868618][ T6106] __x64_sys_ioctl+0xb7/0x210 [ 80.868636][ T6106] do_syscall_64+0xc9/0xf80 [ 80.868657][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.868675][ T6106] RIP: 0033:0x7ff363b9acb9 [ 80.868690][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.868706][ T6106] RSP: 002b:00007ff364b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.868723][ T6106] RAX: ffffffffffffffda RBX: 00007ff363e15fa0 RCX: 00007ff363b9acb9 [ 80.868734][ T6106] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.868744][ T6106] RBP: 00007ff364b37090 R08: 0000000000000000 R09: 0000000000000000 [ 80.868753][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.868763][ T6106] R13: 00007ff363e16038 R14: 00007ff363e15fa0 R15: 00007fff7f12a6e8 [ 80.868787][ T6106] [ 80.868804][ T6106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.431043][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.4.28'. [ 81.439886][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 81.974440][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.056989][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.077494][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.151677][ T3090] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.196430][ T6125] Zero length message leads to an empty skb [ 82.202278][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.264956][ T9] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 82.285670][ T9] usb 3-1: config 0 has no interface number 1 [ 82.295760][ T9] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 82.320500][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.361049][ T9] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 82.390661][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.407217][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 82.407231][ T30] audit: type=1400 audit(1769312509.479:201): avc: denied { ioctl } for pid=6128 comm="syz.1.35" path="socket:[9474]" dev="sockfs" ino=9474 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 82.412932][ T3090] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 82.426748][ T30] audit: type=1400 audit(1769312509.479:202): avc: denied { create } for pid=6128 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.443887][ T3090] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.472907][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.485828][ T3090] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.496708][ T9] usb 3-1: SerialNumber: syz [ 82.499971][ T3090] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 82.510129][ T9] usb 3-1: config 0 descriptor?? [ 82.517250][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.528120][ T30] audit: type=1400 audit(1769312509.479:203): avc: denied { ioctl } for pid=6128 comm="syz.1.35" path="socket:[9475]" dev="sockfs" ino=9475 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.554458][ T30] audit: type=1400 audit(1769312509.479:204): avc: denied { create } for pid=6133 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.556498][ T9] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 82.562425][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.599869][ T3090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.608021][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.610085][ T9] uvcvideo 3-1:0.199: No valid video chain found. [ 82.622329][ T30] audit: type=1400 audit(1769312509.519:205): avc: denied { ioctl } for pid=6133 comm="syz-executor" path="socket:[10256]" dev="sockfs" ino=10256 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.640195][ T3090] usb 1-1: config 0 descriptor?? [ 82.673433][ T6131] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 82.683098][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.694250][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.714374][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.722610][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.730019][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.740385][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.747960][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.872183][ T30] audit: type=1400 audit(1769312509.939:206): avc: denied { create } for pid=6114 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.005925][ T6140] netlink: 9 bytes leftover after parsing attributes in process `syz.0.32'. [ 83.015188][ T6140] 0·: renamed from hsr0 (while UP) [ 83.052120][ T6140] 0·: entered allmulticast mode [ 83.064560][ T6140] hsr_slave_0: entered allmulticast mode [ 83.074360][ T6140] hsr_slave_1: entered allmulticast mode [ 83.083751][ T6140] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 83.105373][ T30] audit: type=1400 audit(1769312509.969:207): avc: denied { setopt } for pid=6114 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.287219][ T30] audit: type=1400 audit(1769312509.989:208): avc: denied { bind } for pid=6114 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.394307][ T30] audit: type=1400 audit(1769312510.009:209): avc: denied { read write } for pid=6138 comm="syz.1.37" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.423501][ T30] audit: type=1400 audit(1769312510.009:210): avc: denied { open } for pid=6138 comm="syz.1.37" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.494815][ T10] usb 3-1: USB disconnect, device number 4 [ 83.504381][ T13] bridge_slave_1: left allmulticast mode [ 83.510137][ T13] bridge_slave_1: left promiscuous mode [ 83.517860][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.542733][ T13] bridge_slave_0: left allmulticast mode [ 83.568647][ T13] bridge_slave_0: left promiscuous mode [ 83.580128][ T3090] usb 1-1: string descriptor 0 read error: -71 [ 83.588040][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.617710][ T3090] usb 1-1: USB disconnect, device number 3 [ 83.865428][ T6153] netlink: 199100 bytes leftover after parsing attributes in process `syz.1.40'. [ 84.200562][ T5884] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 84.278930][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.289672][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.299866][ T13] bond0 (unregistering): Released all slaves [ 84.364698][ T5884] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 84.378457][ T5884] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.422883][ T5884] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 84.432656][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.440912][ T5884] usb 5-1: Product: syz [ 84.445197][ T5884] usb 5-1: Manufacturer: syz [ 84.449899][ T5884] usb 5-1: SerialNumber: syz [ 84.459887][ T5884] rtl8150 5-1:1.0: couldn't find required endpoints [ 84.467562][ T5884] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 84.490549][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.618806][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 84.650532][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 84.658068][ T43] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 84.688285][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.700837][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.714016][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.735472][ T43] usb 2-1: config 0 descriptor?? [ 84.752578][ T13] hsr_slave_0: left promiscuous mode [ 84.759976][ T43] as10x_usb: device has been detected [ 84.860650][ T5815] Bluetooth: hci1: command tx timeout [ 84.867096][ T13] hsr_slave_1: left promiscuous mode [ 84.873634][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.888307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.909599][ T43] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 84.909804][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.925649][ T43] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 84.954237][ T43] as10x_usb: error during firmware upload part1 [ 84.960648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.017107][ T6181] netlink: 48 bytes leftover after parsing attributes in process `syz.0.46'. [ 85.026028][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 85.087454][ T43] Registered device nBox DVB-T Dongle [ 85.364787][ T13] veth1_macvtap: left promiscuous mode [ 85.380658][ T13] veth0_macvtap: left promiscuous mode [ 85.386301][ T13] veth1_vlan: left promiscuous mode [ 85.403491][ T13] veth0_vlan: left promiscuous mode [ 85.472673][ T10] usb 2-1: USB disconnect, device number 2 [ 85.507399][ T10] Unregistered device nBox DVB-T Dongle [ 85.521112][ T10] as10x_usb: device has been disconnected [ 85.932978][ T13] team0 (unregistering): Port device team_slave_1 removed [ 85.957725][ T13] team0 (unregistering): Port device team_slave_0 removed [ 86.024534][ T6194] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.218265][ T6198] binder: BINDER_SET_CONTEXT_MGR already set [ 86.224591][ T6198] binder: 6196:6198 ioctl 4018620d 200000000040 returned -16 [ 86.520556][ T10] usb 5-1: USB disconnect, device number 11 [ 86.613976][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.759015][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.787611][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.807693][ T6133] bridge_slave_0: entered allmulticast mode [ 86.824274][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.838225][ T6133] bridge_slave_0: entered promiscuous mode [ 86.857823][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.878907][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.889768][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.903037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.909971][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.911367][ T5815] Bluetooth: hci1: command tx timeout [ 86.920564][ T9] usb 2-1: Product: syz [ 87.006364][ T6215] netlink: 199100 bytes leftover after parsing attributes in process `syz.0.52'. [ 87.055118][ T6133] bridge_slave_1: entered allmulticast mode [ 87.060503][ T9] usb 2-1: Manufacturer: syz [ 87.195634][ T6133] bridge_slave_1: entered promiscuous mode [ 87.201660][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 87.242327][ T9] usb 2-1: SerialNumber: syz [ 87.462971][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.464236][ T10] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 87.482657][ T10] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.514350][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.555678][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.595141][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 87.662696][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 87.662713][ T30] audit: type=1400 audit(1769312514.709:244): avc: denied { block_suspend } for pid=6202 comm="syz.2.50" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.753402][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.813676][ T9] cdc_ncm 2-1:1.0: bind() failure [ 87.824496][ T30] audit: type=1400 audit(1769312514.889:245): avc: denied { remount } for pid=6196 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.826646][ T10] usb 5-1: config 0 descriptor?? [ 87.854562][ T6133] team0: Port device team_slave_0 added [ 87.864088][ T6133] team0: Port device team_slave_1 added [ 87.896870][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.963433][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 87.970272][ T9] cdc_ncm 2-1:1.1: bind() failure [ 88.084910][ T30] audit: type=1400 audit(1769312515.159:246): avc: denied { name_bind } for pid=6229 comm="syz.0.53" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.335790][ T9] usb 2-1: USB disconnect, device number 3 [ 88.412337][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.452788][ T30] audit: type=1400 audit(1769312515.159:247): avc: denied { node_bind } for pid=6229 comm="syz.0.53" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.498720][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.548101][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.618724][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.738780][ T6237] netlink: 9 bytes leftover after parsing attributes in process `syz.4.51'. [ 88.822181][ T6238] /dev/nullb0: Can't open blockdev [ 88.954642][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.991234][ T5815] Bluetooth: hci1: command tx timeout [ 88.996848][ T6237] 0·: renamed from hsr0 (while UP) [ 89.016922][ T30] audit: type=1400 audit(1769312516.089:248): avc: denied { write } for pid=6239 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.045254][ T6237] 0·: entered allmulticast mode [ 89.082688][ T6237] hsr_slave_0: entered allmulticast mode [ 89.095351][ T30] audit: type=1400 audit(1769312516.119:249): avc: denied { ioctl } for pid=6239 comm="syz.0.54" path="socket:[10630]" dev="sockfs" ino=10630 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.123240][ T6237] hsr_slave_1: entered allmulticast mode [ 89.129362][ T6237] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 89.145593][ T30] audit: type=1400 audit(1769312516.119:250): avc: denied { getopt } for pid=6239 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.380476][ T6245] binder: BINDER_SET_CONTEXT_MGR already set [ 89.386495][ T6245] binder: 6243:6245 ioctl 4018620d 200000000040 returned -16 [ 89.504386][ T10] usb 5-1: string descriptor 0 read error: -71 [ 89.549668][ T6133] hsr_slave_0: entered promiscuous mode [ 89.556492][ T10] usb 5-1: USB disconnect, device number 12 [ 89.570821][ T6133] hsr_slave_1: entered promiscuous mode [ 90.700947][ T5884] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 90.780956][ T43] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.863942][ T5884] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.920564][ T5884] usb 5-1: config 0 has no interface number 0 [ 90.937495][ T6273] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 90.980966][ T5884] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 90.999883][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.011022][ T43] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 91.029317][ T43] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.053973][ T5884] usb 5-1: config 0 descriptor?? [ 91.070685][ T5815] Bluetooth: hci1: command tx timeout [ 91.351736][ T6253] process 'syz.4.58' launched '/dev/fd/5' with NULL argv: empty string added [ 91.352111][ T5884] usb 5-1: selecting invalid altsetting 1 [ 91.360843][ T30] audit: type=1400 audit(1769312518.209:251): avc: denied { mount } for pid=6274 comm="syz.2.61" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 91.389000][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.449097][ T43] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 91.449151][ T30] audit: type=1400 audit(1769312518.219:252): avc: denied { remount } for pid=6274 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 91.479994][ T5884] dvb_ttusb_budget: ttusb_init_controller: error [ 91.487277][ T5884] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 91.495988][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.521920][ T43] usb 1-1: config 0 descriptor?? [ 91.554524][ T30] audit: type=1400 audit(1769312518.429:253): avc: denied { execute } for pid=6252 comm="syz.4.58" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.681879][ T5884] DVB: Unable to find symbol cx22700_attach() [ 91.887467][ T5884] DVB: Unable to find symbol tda10046_attach() [ 91.904676][ T6287] netlink: 9 bytes leftover after parsing attributes in process `syz.0.59'. [ 91.958367][ T6288] /dev/nullb0: Can't open blockdev [ 92.183791][ T5884] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 92.243300][ T5884] usb 5-1: USB disconnect, device number 13 [ 92.286307][ T6287] 1·: renamed from 70· (while UP) [ 92.293668][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 92.351720][ T6287] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 92.462915][ T43] usb 1-1: string descriptor 0 read error: -71 [ 92.510583][ T43] usb 1-1: USB disconnect, device number 4 [ 92.556244][ T6133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.594443][ T6133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.689333][ T6133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.708958][ T6133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.725212][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 92.725229][ T30] audit: type=1400 audit(1769312519.799:258): avc: denied { create } for pid=6302 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.767396][ T6305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6305 comm=syz.2.68 [ 92.780027][ T6305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6305 comm=syz.2.68 [ 92.822224][ T30] audit: type=1400 audit(1769312519.799:259): avc: denied { setopt } for pid=6302 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.843584][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.854984][ T6308] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 93.589281][ T30] audit: type=1400 audit(1769312519.799:260): avc: denied { accept } for pid=6302 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 93.658753][ T30] audit: type=1326 audit(1769312519.899:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 93.728234][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.797090][ T30] audit: type=1326 audit(1769312519.919:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 93.837075][ T6325] binder: BINDER_SET_CONTEXT_MGR already set [ 93.843324][ T6325] binder: 6321:6325 ioctl 4018620d 200000000040 returned -16 [ 94.039361][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.066946][ T30] audit: type=1326 audit(1769312519.919:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 94.109475][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.116652][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.162338][ T30] audit: type=1326 audit(1769312519.939:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 94.209140][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.216305][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.238615][ T30] audit: type=1326 audit(1769312519.949:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 94.279914][ T6133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.407263][ T6133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.417957][ T30] audit: type=1326 audit(1769312520.589:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 94.472695][ T30] audit: type=1326 audit(1769312520.589:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.2.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155499acb9 code=0x7ffc0000 [ 94.743137][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.816747][ T6133] veth0_vlan: entered promiscuous mode [ 94.848909][ T6133] veth1_vlan: entered promiscuous mode [ 94.901241][ T6133] veth0_macvtap: entered promiscuous mode [ 94.938262][ T6133] veth1_macvtap: entered promiscuous mode [ 94.978766][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.036732][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.073732][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.114866][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.145737][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.183128][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.296869][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.334687][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.408674][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.465158][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.719642][ T6380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.69'. [ 96.737163][ T6405] warning: `syz.2.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.456938][ T6417] binder: BINDER_SET_CONTEXT_MGR already set [ 97.463066][ T6417] binder: 6413:6417 ioctl 4018620d 200000000040 returned -16 [ 97.566576][ T6423] input: syz0 as /devices/virtual/input/input6 [ 97.661047][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 97.682810][ T6427] comedi: No check for data length of config insn id -1 is implemented [ 97.716220][ T6427] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 97.733422][ T6427] comedi: Assuming n=40053 is correct [ 97.837695][ T9] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 97.870280][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.910509][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 97.910529][ T30] audit: type=1326 audit(1769312524.979:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b9acb9 code=0x7ffc0000 [ 98.341641][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.349846][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 98.920510][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.932818][ T30] audit: type=1326 audit(1769312524.979:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff363b9acb9 code=0x7ffc0000 [ 98.959566][ T6444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.961497][ T9] usb 1-1: config 0 descriptor?? [ 99.087199][ T30] audit: type=1326 audit(1769312524.979:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b9acb9 code=0x7ffc0000 [ 99.144794][ T30] audit: type=1326 audit(1769312524.999:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff363b9acb9 code=0x7ffc0000 [ 99.270034][ T30] audit: type=1326 audit(1769312524.999:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b9acb9 code=0x7ffc0000 [ 99.293502][ T30] audit: type=1326 audit(1769312524.999:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6436 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b9acb9 code=0x7ffc0000 [ 99.660811][ T792] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 99.671990][ T5815] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.747530][ T30] audit: type=1400 audit(1769312525.079:299): avc: denied { bind } for pid=6431 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.961628][ T792] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 99.973271][ T30] audit: type=1400 audit(1769312525.739:300): avc: denied { name_bind } for pid=6440 comm="syz.3.94" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.182355][ T5891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 100.203581][ T6420] netlink: 9 bytes leftover after parsing attributes in process `syz.0.87'. [ 100.331321][ T6458] /dev/nullb0: Can't open blockdev [ 100.410727][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 100.440738][ T6470] binder: BINDER_SET_CONTEXT_MGR already set [ 100.446970][ T6470] binder: 6467:6470 ioctl 4018620d 200000000040 returned -16 [ 100.524395][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 100.537886][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.580547][ T5947] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.590591][ T6420] 0·: renamed from 71· (while UP) [ 100.599955][ T6420] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 100.616078][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.641302][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.651221][ T5891] usb 5-1: Product: syz [ 100.666542][ T9] usb 1-1: string descriptor 0 read error: -71 [ 100.709343][ T9] usb 1-1: USB disconnect, device number 5 [ 100.719320][ T5891] usb 5-1: Manufacturer: syz [ 100.732160][ T5891] usb 5-1: SerialNumber: syz [ 100.741973][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 100.756111][ T5891] usb 5-1: config 0 descriptor?? [ 100.767760][ T5891] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.772549][ T5947] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 100.777191][ T5891] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 100.835981][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 100.870690][ T5947] usb 4-1: SerialNumber: syz [ 100.886449][ T5947] usb 4-1: config 0 descriptor?? [ 100.903164][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.907779][ T5947] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 100.932647][ T5947] usb 4-1: Detected FT232A [ 100.950170][ T5947] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.978145][ T6477] comedi: No check for data length of config insn id -1 is implemented [ 100.990910][ T6477] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 101.006224][ T6477] comedi: Assuming n=40052 is correct [ 101.125116][ T30] audit: type=1400 audit(1769312528.199:301): avc: denied { ioctl } for pid=6479 comm="syz.1.106" path="socket:[12057]" dev="sockfs" ino=12057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.373683][ T5891] em28xx 5-1:0.0: unknown em28xx chip ID (254) [ 101.582617][ T5891] em28xx 5-1:0.0: Config register raw data: 0xfe [ 101.625322][ T5891] em28xx 5-1:0.0: I2S Audio (5 sample rate(s)) [ 101.642803][ T5891] em28xx 5-1:0.0: No AC97 audio processor [ 102.037438][ T5891] usb 5-1: USB disconnect, device number 14 [ 102.703057][ T5919] usb 4-1: USB disconnect, device number 2 [ 103.056536][ T5919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 103.080019][ T5919] ftdi_sio 4-1:0.0: device disconnected [ 103.192398][ T30] audit: type=1400 audit(1769312530.189:302): avc: denied { name_bind } for pid=6508 comm="syz.3.115" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 103.341988][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.358875][ T6516] netlink: 172 bytes leftover after parsing attributes in process `syz.4.116'. [ 103.369888][ T6518] batadv_slave_1: entered promiscuous mode [ 103.390726][ T6518] FAULT_INJECTION: forcing a failure. [ 103.390726][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 103.403574][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(full) [ 103.403598][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 103.403607][ T6518] Call Trace: [ 103.403612][ T6518] [ 103.403619][ T6518] dump_stack_lvl+0x100/0x190 [ 103.403644][ T6518] should_fail_ex.cold+0x5/0xa [ 103.403671][ T6518] should_failslab+0xc2/0x120 [ 103.403693][ T6518] kmem_cache_alloc_noprof+0x83/0x780 [ 103.403711][ T6518] ? lock_acquire+0x17c/0x330 [ 103.403726][ T6518] ? skb_clone+0x190/0x400 [ 103.403751][ T6518] ? skb_clone+0x190/0x400 [ 103.403770][ T6518] skb_clone+0x190/0x400 [ 103.403794][ T6518] dev_queue_xmit_nit+0x255/0xa60 [ 103.403826][ T6518] dev_hard_start_xmit+0x2fb/0x6c0 [ 103.403850][ T6518] __dev_queue_xmit+0x6dd/0x46f0 [ 103.403877][ T6518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 103.403913][ T6518] ? __asan_memcpy+0x3c/0x60 [ 103.403932][ T6518] ? __asan_memcpy+0x3c/0x60 [ 103.403950][ T6518] ? __skb_clone+0x570/0x760 [ 103.403977][ T6518] netlink_deliver_tap+0xa4d/0xcc0 [ 103.404014][ T6518] netlink_unicast+0x650/0x870 [ 103.404043][ T6518] ? __pfx_netlink_unicast+0x10/0x10 [ 103.404078][ T6518] netlink_sendmsg+0x8b0/0xda0 [ 103.404108][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.404143][ T6518] sock_write_iter+0x566/0x610 [ 103.404161][ T6518] ? __pfx_sock_write_iter+0x10/0x10 [ 103.404187][ T6518] ? bpf_lsm_file_permission+0x9/0x10 [ 103.404209][ T6518] ? security_file_permission+0x76/0x210 [ 103.404231][ T6518] ? rw_verify_area+0xce/0x6d0 [ 103.404251][ T6518] vfs_write+0x6ac/0x1070 [ 103.404271][ T6518] ? __pfx_sock_write_iter+0x10/0x10 [ 103.404289][ T6518] ? __pfx_vfs_write+0x10/0x10 [ 103.404306][ T6518] ? find_held_lock+0x2b/0x80 [ 103.404346][ T6518] ksys_write+0x1f8/0x250 [ 103.404365][ T6518] ? __pfx_ksys_write+0x10/0x10 [ 103.404392][ T6518] do_syscall_64+0xc9/0xf80 [ 103.404414][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.404432][ T6518] RIP: 0033:0x7ff39719acb9 [ 103.404446][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.404463][ T6518] RSP: 002b:00007ff398086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.404479][ T6518] RAX: ffffffffffffffda RBX: 00007ff397415fa0 RCX: 00007ff39719acb9 [ 103.404491][ T6518] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000005 [ 103.404501][ T6518] RBP: 00007ff398086090 R08: 0000000000000000 R09: 0000000000000000 [ 103.404511][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.404520][ T6518] R13: 00007ff397416038 R14: 00007ff397415fa0 R15: 00007ffd3bcb85e8 [ 103.404545][ T6518] [ 103.841534][ T30] audit: type=1400 audit(1769312530.889:303): avc: denied { create } for pid=6515 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.863640][ T6517] batadv_slave_1: left promiscuous mode [ 103.923032][ T30] audit: type=1400 audit(1769312530.949:304): avc: denied { setopt } for pid=6515 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.097127][ T30] audit: type=1400 audit(1769312530.959:305): avc: denied { write } for pid=6515 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.140732][ T5919] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 104.385173][ T5919] usb 5-1: device descriptor read/64, error -71 [ 104.660559][ T5919] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 104.860536][ T5919] usb 5-1: device descriptor read/64, error -71 [ 105.007216][ T5919] usb usb5-port1: attempt power cycle [ 105.271825][ T6552] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 105.668253][ T5919] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 105.710151][ T5919] usb 5-1: device descriptor read/8, error -71 [ 105.870724][ T792] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.968557][ T30] audit: type=1400 audit(1769312533.009:306): avc: denied { create } for pid=6557 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.320565][ T5919] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 106.435836][ T792] usb 1-1: device descriptor read/64, error -71 [ 106.535233][ T6565] netlink: 48 bytes leftover after parsing attributes in process `syz.1.131'. [ 106.544264][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 106.964051][ T5919] usb 5-1: device descriptor read/8, error -71 [ 107.071828][ T5919] usb usb5-port1: unable to enumerate USB device [ 107.160528][ T792] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.231051][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.670563][ T792] usb 1-1: device descriptor read/64, error -71 [ 107.792389][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 107.820769][ T792] usb usb1-port1: attempt power cycle [ 107.881932][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.976984][ T30] audit: type=1400 audit(1769312535.049:307): avc: denied { bind } for pid=6581 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.983609][ T6584] FAULT_INJECTION: forcing a failure. [ 107.983609][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.009188][ T6584] CPU: 0 UID: 0 PID: 6584 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 108.009210][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 108.009217][ T6584] Call Trace: [ 108.009222][ T6584] [ 108.009226][ T6584] dump_stack_lvl+0x100/0x190 [ 108.009246][ T6584] should_fail_ex.cold+0x5/0xa [ 108.009265][ T6584] _copy_from_user+0x2e/0xd0 [ 108.009280][ T6584] copy_msghdr_from_user+0x9f/0x4f0 [ 108.009296][ T6584] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 108.009308][ T6584] ? _kstrtoull+0x13c/0x1f0 [ 108.009318][ T6584] ? __pfx__kstrtoull+0x10/0x10 [ 108.009330][ T6584] ___sys_sendmsg+0x106/0x1e0 [ 108.009341][ T6584] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.009367][ T6584] __sys_sendmmsg+0x205/0x430 [ 108.009382][ T6584] ? __pfx___sys_sendmmsg+0x10/0x10 [ 108.009400][ T6584] ? __fget_files+0x215/0x3d0 [ 108.009412][ T6584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.009430][ T6584] ? fput+0x79/0x100 [ 108.009445][ T6584] ? ksys_write+0x1ac/0x250 [ 108.009456][ T6584] ? __pfx_ksys_write+0x10/0x10 [ 108.009469][ T6584] __x64_sys_sendmmsg+0x9c/0x100 [ 108.009483][ T6584] ? lockdep_hardirqs_on+0x78/0x100 [ 108.009494][ T6584] do_syscall_64+0xc9/0xf80 [ 108.009507][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.009517][ T6584] RIP: 0033:0x7feb19d9acb9 [ 108.009526][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.009536][ T6584] RSP: 002b:00007feb1ac05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.009547][ T6584] RAX: ffffffffffffffda RBX: 00007feb1a016090 RCX: 00007feb19d9acb9 [ 108.009554][ T6584] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000009 [ 108.009561][ T6584] RBP: 00007feb1ac05090 R08: 0000000000000000 R09: 0000000000000000 [ 108.009567][ T6584] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 108.009573][ T6584] R13: 00007feb1a016128 R14: 00007feb1a016090 R15: 00007ffef9e24968 [ 108.009586][ T6584] [ 108.252209][ T30] audit: type=1400 audit(1769312535.059:308): avc: denied { connect } for pid=6581 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.531669][ T30] audit: type=1400 audit(1769312535.059:309): avc: denied { setopt } for pid=6581 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.607119][ T9] usb 4-1: config 0 descriptor?? [ 108.995051][ T30] audit: type=1400 audit(1769312536.069:310): avc: denied { create } for pid=6587 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.098356][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.142753][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.184129][ T6599] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.225893][ T30] audit: type=1400 audit(1769312536.299:311): avc: denied { create } for pid=6566 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.324670][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 109.410563][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 109.522097][ T10] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 109.540157][ T10] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.590540][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.597290][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 109.621209][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.630747][ T9] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 109.650654][ T9] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.673035][ T10] usb 2-1: config 0 descriptor?? [ 109.690502][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.697160][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 109.740599][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.752934][ T9] usb 3-1: config 0 descriptor?? [ 109.990264][ T6611] netlink: 9 bytes leftover after parsing attributes in process `syz.1.140'. [ 110.000752][ T6611] 0·: renamed from hsr0 (while UP) [ 110.042481][ T6612] /dev/nullb0: Can't open blockdev [ 110.270486][ T6611] 0·: entered allmulticast mode [ 110.277619][ T6611] hsr_slave_0: entered allmulticast mode [ 110.291062][ T6611] hsr_slave_1: entered allmulticast mode [ 110.380577][ T6614] netlink: 9 bytes leftover after parsing attributes in process `syz.2.141'. [ 110.437041][ T6615] /dev/nullb0: Can't open blockdev [ 110.608859][ T6611] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 110.650882][ T792] usb 4-1: USB disconnect, device number 3 [ 110.906376][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 111.251275][ T6614] 1·: renamed from 70· (while UP) [ 111.312397][ T6614] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 111.346091][ T10] usb 2-1: string descriptor 0 read error: -71 [ 111.405282][ T10] usb 2-1: USB disconnect, device number 4 [ 111.413429][ T9] usb 3-1: string descriptor 0 read error: -71 [ 111.423165][ T9] usb 3-1: USB disconnect, device number 5 [ 111.641406][ T792] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 111.647556][ T30] audit: type=1400 audit(1769312538.669:312): avc: denied { ioctl } for pid=6625 comm="syz.3.149" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12485 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.832063][ T792] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 111.845722][ T792] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.870119][ T792] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.883378][ T792] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 111.922638][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.944172][ T30] audit: type=1400 audit(1769312539.019:313): avc: denied { map } for pid=6637 comm="syz.1.152" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.201463][ T792] usb 5-1: config 0 descriptor?? [ 112.526959][ T6641] netlink: 9 bytes leftover after parsing attributes in process `syz.4.148'. [ 112.536305][ T6641] 1·: renamed from 70· (while UP) [ 112.610805][ T6643] /dev/nullb0: Can't open blockdev [ 112.633086][ T6641] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 112.863785][ T6645] binder: BINDER_SET_CONTEXT_MGR already set [ 112.869846][ T6645] binder: 6642:6645 ioctl 4018620d 200000000040 returned -16 [ 113.088512][ T30] audit: type=1400 audit(1769312540.159:314): avc: denied { append } for pid=6646 comm="syz.0.154" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.135244][ T792] usb 5-1: string descriptor 0 read error: -71 [ 113.192644][ T6649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6649 comm=syz.0.154 [ 113.211244][ T30] audit: type=1400 audit(1769312540.259:315): avc: denied { ioctl } for pid=6646 comm="syz.0.154" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.400272][ T792] usb 5-1: USB disconnect, device number 19 [ 113.722055][ T6655] FAULT_INJECTION: forcing a failure. [ 113.722055][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 113.734877][ T6655] CPU: 1 UID: 0 PID: 6655 Comm: syz.1.156 Not tainted syzkaller #0 PREEMPT(full) [ 113.734902][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 113.734913][ T6655] Call Trace: [ 113.734919][ T6655] [ 113.734926][ T6655] dump_stack_lvl+0x100/0x190 [ 113.734955][ T6655] should_fail_ex.cold+0x5/0xa [ 113.734987][ T6655] should_failslab+0xc2/0x120 [ 113.735011][ T6655] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 113.735036][ T6655] ? __alloc_skb+0x156/0x410 [ 113.735056][ T6655] ? __alloc_skb+0x35d/0x410 [ 113.735080][ T6655] ? __alloc_skb+0x156/0x410 [ 113.735100][ T6655] __alloc_skb+0x156/0x410 [ 113.735119][ T6655] ? __alloc_skb+0x35d/0x410 [ 113.735139][ T6655] ? __pfx___alloc_skb+0x10/0x10 [ 113.735169][ T6655] netlink_alloc_large_skb+0x69/0x150 [ 113.735197][ T6655] netlink_sendmsg+0x680/0xda0 [ 113.735226][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.735255][ T6655] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 113.735281][ T6655] ____sys_sendmsg+0xa54/0xc30 [ 113.735301][ T6655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.735326][ T6655] ? __lock_acquire+0x4a5/0x2630 [ 113.735347][ T6655] ___sys_sendmsg+0x190/0x1e0 [ 113.735366][ T6655] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.735396][ T6655] ? find_held_lock+0x2b/0x80 [ 113.735434][ T6655] __sys_sendmsg+0x170/0x220 [ 113.735457][ T6655] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.735489][ T6655] ? rcu_is_watching+0x12/0xc0 [ 113.735517][ T6655] do_syscall_64+0xc9/0xf80 [ 113.735540][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.735557][ T6655] RIP: 0033:0x7feb19d9acb9 [ 113.735576][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.735592][ T6655] RSP: 002b:00007feb1abe4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.735609][ T6655] RAX: ffffffffffffffda RBX: 00007feb1a016180 RCX: 00007feb19d9acb9 [ 113.735620][ T6655] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 113.735630][ T6655] RBP: 00007feb1abe4090 R08: 0000000000000000 R09: 0000000000000000 [ 113.735640][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.735650][ T6655] R13: 00007feb1a016218 R14: 00007feb1a016180 R15: 00007ffef9e24968 [ 113.735674][ T6655] [ 113.964117][ T30] audit: type=1400 audit(1769312541.039:316): avc: denied { setopt } for pid=6652 comm="syz.1.156" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.279481][ T6661] binder: BINDER_SET_CONTEXT_MGR already set [ 114.285961][ T6661] binder: 6658:6661 ioctl 4018620d 200000000040 returned -16 [ 114.540324][ T6664] netlink: 'syz.1.160': attribute type 29 has an invalid length. [ 114.570068][ T6664] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.584842][ T6664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.592311][ T6664] IPv6: NLM_F_CREATE should be set when creating new route [ 114.705021][ T30] audit: type=1400 audit(1769312541.779:317): avc: denied { setopt } for pid=6667 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.727700][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 114.781762][ T5891] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 114.920668][ T3090] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.980502][ T5891] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 115.045404][ T5891] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.063410][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.066695][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.083729][ T5891] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 115.112262][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.146529][ T43] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.180566][ T3090] usb 1-1: Using ep0 maxpacket: 16 [ 115.194478][ T3090] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 115.194857][ T5891] usb 3-1: config 0 descriptor?? [ 115.202883][ T3090] usb 1-1: config 1 has no interface number 0 [ 115.214289][ T3090] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 115.225781][ T3090] usb 1-1: config 1 interface 105 has no altsetting 0 [ 115.234523][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.244697][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.267364][ T43] usb 5-1: Product: syz [ 115.271718][ T3090] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 115.283491][ T43] usb 5-1: Manufacturer: syz [ 115.288519][ T3090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.298472][ T43] usb 5-1: SerialNumber: syz [ 115.307419][ T3090] usb 1-1: Product: syz [ 115.313128][ T3090] usb 1-1: Manufacturer: syz [ 115.318161][ T3090] usb 1-1: SerialNumber: syz [ 115.333498][ T6670] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 115.400511][ T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 115.511658][ T6683] /dev/nullb0: Can't open blockdev [ 115.806466][ T24] usb 4-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 115.825322][ T24] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.841408][ T3090] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 115.853218][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.853239][ T5891] usb 3-1: string descriptor 0 read error: -71 [ 115.870300][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 115.879813][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.890311][ T43] cdc_ncm 5-1:1.0: bind() failure [ 115.899016][ T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 115.908061][ T5891] usb 3-1: USB disconnect, device number 6 [ 115.908373][ T24] usb 4-1: config 0 descriptor?? [ 115.920828][ T5947] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 115.934755][ T43] cdc_ncm 5-1:1.1: bind() failure [ 115.965422][ T43] usb 5-1: USB disconnect, device number 20 [ 116.093195][ T5947] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 116.111895][ T5947] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.140867][ T5947] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.147503][ T5947] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 116.180539][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.199768][ T5947] usb 2-1: config 0 descriptor?? [ 116.295713][ T6684] netlink: 9 bytes leftover after parsing attributes in process `syz.3.167'. [ 116.304949][ T6684] 0·: renamed from hsr0 (while UP) [ 116.335097][ T6684] 0·: entered allmulticast mode [ 116.340033][ T6684] hsr_slave_0: entered allmulticast mode [ 116.346346][ T6684] hsr_slave_1: entered allmulticast mode [ 116.370263][ T6684] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 116.623614][ T6686] netlink: 9 bytes leftover after parsing attributes in process `syz.1.168'. [ 116.632880][ T6686] 1·: renamed from 70· (while UP) [ 116.862390][ T6686] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 116.895029][ T24] usb 4-1: string descriptor 0 read error: -71 [ 116.919352][ T24] usb 4-1: USB disconnect, device number 4 [ 116.955846][ T5947] usb 2-1: string descriptor 0 read error: -71 [ 116.957526][ T6689] ======================================================= [ 116.957526][ T6689] WARNING: The mand mount option has been deprecated and [ 116.957526][ T6689] and is ignored by this kernel. Remove the mand [ 116.957526][ T6689] option from the mount to silence this warning. [ 116.957526][ T6689] ======================================================= [ 116.964866][ T5947] usb 2-1: USB disconnect, device number 5 [ 117.549569][ T6702] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.557888][ T6702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.565122][ T6702] IPv6: NLM_F_CREATE should be set when creating new route [ 117.688655][ T3090] usb 1-1: USB disconnect, device number 9 [ 117.707050][ T30] audit: type=1400 audit(1769312544.779:318): avc: denied { ioctl } for pid=6708 comm="syz.3.178" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 118.510533][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 118.665020][ T24] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 119.231978][ T3090] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.247707][ T24] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.265641][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.272665][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 119.290359][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.376860][ T30] audit: type=1400 audit(1769312546.449:319): avc: denied { create } for pid=6732 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.404677][ T24] usb 2-1: config 0 descriptor?? [ 119.430664][ T3090] usb 3-1: Using ep0 maxpacket: 32 [ 119.439028][ T3090] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 119.451664][ T30] audit: type=1400 audit(1769312546.509:320): avc: denied { connect } for pid=6732 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.478106][ T3090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.508515][ T30] audit: type=1400 audit(1769312546.569:321): avc: denied { bind } for pid=6732 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.528805][ T3090] usb 3-1: config 0 descriptor?? [ 119.540543][ T30] audit: type=1400 audit(1769312546.569:322): avc: denied { listen } for pid=6732 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.561769][ T3090] as10x_usb: device has been detected [ 119.567452][ T3090] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 119.576918][ T30] audit: type=1400 audit(1769312546.569:323): avc: denied { accept } for pid=6732 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 119.604359][ T3090] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 119.621078][ T30] audit: type=1400 audit(1769312546.679:324): avc: denied { write } for pid=6732 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.666098][ T3090] as10x_usb: error during firmware upload part1 [ 119.683143][ T3090] Registered device nBox DVB-T Dongle [ 119.765627][ T6719] netlink: 9 bytes leftover after parsing attributes in process `syz.1.180'. [ 119.781629][ T6719] 0·: renamed from 71· (while UP) [ 120.062838][ T6719] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 120.075065][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 120.093790][ T30] audit: type=1400 audit(1769312547.169:325): avc: denied { read } for pid=6738 comm="syz.4.186" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.139896][ T6741] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.141352][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'. [ 120.156770][ T3006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.182222][ T3006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.201686][ T30] audit: type=1400 audit(1769312547.189:326): avc: denied { open } for pid=6738 comm="syz.4.186" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.234831][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.186'. [ 120.250500][ T3006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.270090][ T3006] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.288602][ T30] audit: type=1400 audit(1769312547.359:327): avc: denied { ioctl } for pid=6738 comm="syz.4.186" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 120.462659][ T30] audit: type=1400 audit(1769312547.539:328): avc: denied { create } for pid=6747 comm="syz.3.189" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.498269][ T43] usb 3-1: USB disconnect, device number 7 [ 120.532972][ T24] usb 2-1: string descriptor 0 read error: -71 [ 120.550665][ T3090] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 120.588590][ T24] usb 2-1: USB disconnect, device number 6 [ 120.738976][ T3090] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 120.848968][ T43] Unregistered device nBox DVB-T Dongle [ 120.855426][ T3090] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 120.879409][ T43] as10x_usb: device has been disconnected [ 120.892132][ T3090] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 120.905206][ T3090] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 120.914473][ T3090] usb 5-1: Manufacturer: syz [ 120.921289][ T3090] usb 5-1: SerialNumber: syz [ 121.300524][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 121.370310][ T6758] input: syz1 as /devices/virtual/input/input7 [ 121.480541][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 121.497243][ T9] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 121.516650][ T9] usb 1-1: config 0 has no interface number 0 [ 121.535910][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 121.554226][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.571972][ T9] usb 1-1: Product: syz [ 121.583898][ T9] usb 1-1: Manufacturer: syz [ 121.595764][ T9] usb 1-1: SerialNumber: syz [ 121.604845][ T9] usb 1-1: config 0 descriptor?? [ 121.616357][ T9] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 121.628248][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 121.637629][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 121.650868][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.661347][ T9] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 121.671928][ T9] usb 1-1: media controller created [ 121.680327][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 121.687387][ T9] dw2102: i2c transfer failed. [ 121.693218][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 121.699541][ T9] dw2102: i2c transfer failed. [ 121.704981][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 121.712532][ T9] dw2102: i2c transfer failed. [ 121.717376][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 121.723600][ T9] dw2102: i2c transfer failed. [ 121.728436][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 121.738746][ T9] dw2102: i2c transfer failed. [ 121.746230][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 121.752306][ T9] dw2102: i2c transfer failed. [ 121.757260][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 121.757564][ T5857] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 121.814757][ T6756] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 121.826912][ T6756] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 121.835307][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.0.192 Not tainted syzkaller #0 PREEMPT(full) [ 121.844496][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 121.854531][ T6756] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 121.860419][ T6756] Code: 9a 19 fa 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 121.880012][ T6756] RSP: 0018:ffffc900034a7c18 EFLAGS: 00010246 [ 121.886066][ T6756] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90004f53000 [ 121.894028][ T6756] RDX: 0000000000000000 RSI: ffffffff87ed60d0 RDI: ffff888028a26328 [ 121.902097][ T6756] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 121.910137][ T6756] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000 [ 121.918087][ T6756] R13: ffff88806bd43d02 R14: 0000000000000000 R15: ffff88806bd43d00 [ 121.926040][ T6756] FS: 00007f96ea84d6c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 121.934969][ T6756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.941535][ T6756] CR2: 000000110c3db845 CR3: 000000005c834000 CR4: 00000000003526f0 [ 121.949504][ T6756] Call Trace: [ 121.952762][ T6756] [ 121.955682][ T6756] __i2c_transfer+0x5e1/0x1610 [ 121.960440][ T6756] ? __pfx___i2c_transfer+0x10/0x10 [ 121.965640][ T6756] ? rt_mutex_slowtrylock+0x93/0x100 [ 121.970922][ T6756] i2c_transfer+0x15f/0x380 [ 121.975409][ T6756] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 121.980332][ T6756] i2cdev_ioctl+0x19d/0x830 [ 121.984825][ T6756] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 121.989836][ T6756] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 121.994860][ T6756] __x64_sys_ioctl+0x18e/0x210 [ 121.999627][ T6756] do_syscall_64+0xc9/0xf80 [ 122.004115][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.009987][ T6756] RIP: 0033:0x7f96e999acb9 [ 122.014383][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.033978][ T6756] RSP: 002b:00007f96ea84d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.042393][ T6756] RAX: ffffffffffffffda RBX: 00007f96e9c15fa0 RCX: 00007f96e999acb9 [ 122.050359][ T6756] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 122.058307][ T6756] RBP: 00007f96e9a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 122.066258][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.074209][ T6756] R13: 00007f96e9c16038 R14: 00007f96e9c15fa0 R15: 00007ffef3e4dcb8 [ 122.082166][ T6756] [ 122.085165][ T6756] Modules linked in: [ 122.089368][ T6756] ---[ end trace 0000000000000000 ]--- [ 122.099487][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.141172][ T6756] RIP: 0010:su3000_i2c_transfer+0x607/0xd90 [ 122.150737][ T6756] Code: 9a 19 fa 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 23 06 00 00 48 8b 5b 08 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 20 38 d0 7f 08 84 c0 0f 85 f4 05 00 00 48 8b 44 24 10 [ 122.179403][ T6756] RSP: 0018:ffffc900034a7c18 EFLAGS: 00010246 [ 122.186935][ T6756] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffffc90004f53000 [ 122.196971][ T6756] RDX: 0000000000000000 RSI: ffffffff87ed60d0 RDI: ffff888028a26328 [ 122.206654][ T6756] RBP: 0000000000001900 R08: 0000000000000003 R09: 0000000000001a00 [ 122.215133][ T6756] R10: 0000000000001900 R11: 0000000000000000 R12: dffffc0000000000 [ 122.225730][ T6756] R13: ffff88806bd43d02 R14: 0000000000000000 R15: ffff88806bd43d00 [ 122.234429][ T6756] FS: 00007f96ea84d6c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 122.244522][ T6756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.251956][ T6756] CR2: 000000110c3db845 CR3: 000000005c834000 CR4: 00000000003526f0 [ 122.261611][ T5857] usb 2-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 122.261693][ T6756] Kernel panic - not syncing: Fatal exception [ 122.272069][ T6756] Kernel Offset: disabled