last executing test programs: 14.452719909s ago: executing program 4 (id=2144): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_ublk_setup_io_uring(0x49ef, &(0x7f00000001c0)={0x0, 0x800030a6, 0x8, 0xfffffffd, 0x2b1}, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000380)) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) inotify_init1(0x800) r2 = timerfd_create(0x0, 0x0) close_range(r2, r2, 0x0) ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x1310}, {r2, 0x8190}, {0xffffffffffffffff, 0x80}], 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x9, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x3ff, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) unshare(0x8040480) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 10.05008723s ago: executing program 4 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d050005000200000005"], 0x50}}, 0x0) 9.137906205s ago: executing program 4 (id=2163): io_setup(0x2278, 0x0) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @multicast1, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xb00}}}}}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0xc840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='tmpfs\x00', 0x8810, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() setrlimit(0x1, 0x0) 7.262640302s ago: executing program 0 (id=2170): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)) r2 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x20, 0x16, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000080)={&(0x7f00000004c0)=[{0x5, 0x201, 0x0, 0x0}, {0x2cbd, 0x11, 0x0, 0x0}, {0x2, 0x6000, 0x93, &(0x7f00000003c0)="3ec66602e9fdf31c44b7e460dda4df2e1edaee3e8dc83ebcb69ba8b13ef12b32d9d1eebb4d10d4aff6df5450fd5badb4b6a5b44bc98dfbfcb693eaf9b2e3cf0d49b5addaff9032ba1a6b4f8f1d5db19525c75f64dba4d8bc29224cb22270897de5c0444888e8501925f261e651a7db113c2031febefd496a7eaf6588a643f829177ca755d57f518baca1392fcc645dfda31292"}, {0x400, 0x1801, 0x99, &(0x7f0000000580)="fdfcb1b52023128e98469064255211db1a48ef2a8e4fb7ff2ebdc72897ef65044ab99f9b8a825e3daf70cf6e5b683fbe8286c3aa65ee63fa5a2dbc9f7f6f2d59fb4f14dfabc0c20b7070fad87f0df2a58e5b06be00bc7dad14db7a09f97a9d11759cddaabfbe8c229feb13d22038ff1c02a7d0266decab6b0a518b0c215e9a9fd5daa43f2c1f98e8b4e032207d85f8146c14ecda26bae8d267"}], 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x7813, 0x10000, 0x4000000}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2affff0000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x24}}, 0x20000800) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r7, 0x2, 0x28, &(0x7f0000000100)=""/8) 7.094199701s ago: executing program 1 (id=2172): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r3, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESOCT=r3], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916a", 0xe}], 0x1}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r6) 7.042520109s ago: executing program 2 (id=2173): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) 6.962945107s ago: executing program 4 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000007311a1080000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x4) sendto$packet(r1, &(0x7f0000000080)="49abfb418069bad933ce6f35fade18af5b06c0", 0x13, 0x24040000, &(0x7f00000001c0)={0x11, 0x1b, r2, 0x1, 0xc, 0x6, @local}, 0x14) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000140)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000f80902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x3f00, @void}, 0x10) 6.089132905s ago: executing program 2 (id=2175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/48, 0x30) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) syz_clone3(&(0x7f00000005c0)={0x20220000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2b}, &(0x7f0000000380)=""/32, 0x20, &(0x7f00000003c0)=""/139, &(0x7f0000000480)=[r0, r0], 0x2}, 0x58) close(r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) 5.83826505s ago: executing program 3 (id=2176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x200480d0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000300)='val\x00', 0x3, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400), 0x100) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 5.726486113s ago: executing program 0 (id=2177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="bad0a5b32a79", 0x6, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840), 0x0, 0x406, 0x0) 4.527222466s ago: executing program 2 (id=2178): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd25, 0xffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) 4.423794594s ago: executing program 3 (id=2179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x40) 4.316473335s ago: executing program 0 (id=2180): io_setup(0x8, &(0x7f0000000540)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4.301429732s ago: executing program 2 (id=2181): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.237172266s ago: executing program 3 (id=2182): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000340)='0fc5:1227:', 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9}, 0x94) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r7, 0x3, 0x0, @void}, 0x10) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r8, &(0x7f0000000140)='()', 0x2) 4.228295645s ago: executing program 2 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = syz_open_dev$sg(0x0, 0x6f60, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, 0x0) clock_settime(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000003, 0x0, 0x13f, 0x2}}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4.091509074s ago: executing program 3 (id=2184): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1e0, 0x268, 0x33a, 0x0, 0x268, 0x318, 0x460, 0x460, 0x318, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x18c, 0x1d4, 0xd8000000, {0x9402}, [@inet=@rpfilter={{0x24}, {0xc}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@private2={0xfc, 0x2, '\x00', 0x5}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0xff, 0xff], @ipv4=@loopback, [0x0, 0x0, 0xff], 0xa, 0x6, 0x21, 0x4e20, 0x4e21, 0x4e21, 0x4e23, 0x4, 0x4}, 0x1, 0x808, 0x4e22, 0x4e20, 0x4e23, 0x4e23}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth1_to_bond\x00', {0xfff}}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x404) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) fchmod(0xffffffffffffffff, 0x22) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c351) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f0000000280)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.052151167s ago: executing program 1 (id=2185): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x62, 0x31, 0x33, 0x32, 0x61, 0x62, 0x32, 0x30, 0x39, 0x39, 0x37, 0x35, 0x622adb5809077277, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccdd2b4f1e562233445566778899aabbccddeeff00001168b07846d524b29db701e5ddeeff8000", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x63, 0x37, 0x66, 0x34, 0x61, 0x53, 0x31, 0x37, 0x66, 0x32, 0x66, 0x64, 0x32, 0x34]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f0000000800)={0x0, "92e519a6d305e905204f5e46fc4083d981e1a4b851e8de84e99119e779d01efe5755bfb476c1be3901f241fffb6f7ec2e472b606a76ac8e56b9b182aefb78488", 0x13}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x18}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x53, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x32, 0x36, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), 0x0, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x34, 0x30, 0x61, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddaeff00112233445566778899aabbccddeeff00112233445566778899b1bbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 3.984914103s ago: executing program 1 (id=2186): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 3.752666733s ago: executing program 3 (id=2187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(0x0, 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x4242c2, 0x0) ioctl$XFS_IOC_FSINUMBERS(r7, 0xc0205867, &(0x7f0000000800)={0x0, 0x8, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r8, 0x0, 0x27) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) 3.120241651s ago: executing program 4 (id=2188): socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000808, 0x0, 0x0) mq_open(&(0x7f0000000500)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\x8a\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|L\xca%;5w?R', 0x2, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 3.032226618s ago: executing program 1 (id=2189): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x62, 0x31, 0x33, 0x32, 0x61, 0x62, 0x32, 0x30, 0x39, 0x39, 0x37, 0x35, 0x622adb5809077277, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccdd2b4f1e562233445566778899aabbccddeeff00001168b07846d524b29db701e5ddeeff8000", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x63, 0x37, 0x66, 0x34, 0x61, 0x53, 0x31, 0x37, 0x66, 0x32, 0x66, 0x64, 0x32, 0x34]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f0000000800)={0x0, "92e519a6d305e905204f5e46fc4083d981e1a4b851e8de84e99119e779d01efe5755bfb476c1be3901f241fffb6f7ec2e472b606a76ac8e56b9b182aefb78488", 0x13}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x32, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x18}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x53, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x32, 0x36, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x34, 0x30, 0x61, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddaeff00112233445566778899aabbccddeeff00112233445566778899b1bbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 2.353363528s ago: executing program 3 (id=2190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80), 0x0, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x200480d0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000300)='val\x00', 0x3, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400), 0x100) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.254977689s ago: executing program 1 (id=2191): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1.246908632s ago: executing program 0 (id=2192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x40) 1.024008468s ago: executing program 0 (id=2193): inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 978.602156ms ago: executing program 0 (id=2194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x1, 0xffbfffff, 0x400000, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e25}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x58}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r5, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18060000567039f1ead80000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152, 0x0, 0x0, '\x00', r3}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@mcast1, @loopback, @remote, 0x1, 0x2, 0x5, 0x400, 0xb8, 0xd30048, r3}) 856.625031ms ago: executing program 2 (id=2195): setsockopt(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r0, 0x0, 0x20202, 0x0, 0x2, 0x0, &(0x7f0000000300)}, 0x0, 0x0}) r2 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) 812.201828ms ago: executing program 4 (id=2196): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 0s ago: executing program 1 (id=2197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) kernel console output (not intermixed with test programs): as 1 interface, different from the descriptor's value: 66 [ 525.052904][ T978] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 525.052918][ T978] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 525.086984][ T978] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 525.087008][ T978] usb 4-1: Product: syz [ 525.087020][ T978] usb 4-1: Manufacturer: syz [ 525.134911][ T978] cdc_wdm 4-1:1.0: skipping garbage [ 525.134924][ T978] cdc_wdm 4-1:1.0: skipping garbage [ 525.141354][ T978] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 525.141372][ T978] cdc_wdm 4-1:1.0: Unknown control protocol [ 525.338526][ T9941] atomic_op ffff88807f1919e0 conn xmit_atomic 0000000000000000 [ 525.929130][ T9944] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1223'. [ 525.933074][ T9944] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1223'. [ 527.050273][ T9948] Set syz1 is full, maxelem 1021 reached [ 527.050813][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.054338][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.166880][ T1216] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 527.261310][ T8792] usb 4-1: USB disconnect, device number 25 [ 527.335593][ T1216] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 527.340159][ T1216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.340197][ T1216] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 527.340230][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.561346][ T1216] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -22 [ 527.573088][ T1216] usb 2-1: USB disconnect, device number 22 [ 527.810673][ T5601] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 528.057960][ T92] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 528.490751][ T92] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 528.607264][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.008968][ T92] usb 3-1: config 0 descriptor?? [ 529.255163][ T92] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 529.303583][ T9964] Set syz1 is full, maxelem 1021 reached [ 530.100878][ T9970] kAFS: bad VL server IP address [ 530.159779][ T92] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 530.159796][ T92] [drm] Initialized udl on minor 1 [ 530.262379][ T9971] input: syz0 as /devices/virtual/input/input38 [ 530.543714][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 530.543731][ T31] audit: type=1400 audit(1790550090.234:593): avc: denied { bind } for pid=9974 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 530.572957][ T31] audit: type=1400 audit(1790550090.264:594): avc: denied { map } for pid=9974 comm="syz.0.1235" path="socket:[29688]" dev="sockfs" ino=29688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 530.573024][ T31] audit: type=1400 audit(1790550090.264:595): avc: denied { read write } for pid=9974 comm="syz.0.1235" path="socket:[29688]" dev="sockfs" ino=29688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 530.933770][ T9980] atomic_op ffff88802bba61e0 conn xmit_atomic 0000000000000000 [ 532.554101][ T9984] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 532.998319][ T1216] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 533.148055][ T1216] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 533.167109][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.167136][ T1216] usb 4-1: Product: syz [ 533.167149][ T1216] usb 4-1: Manufacturer: syz [ 533.167183][ T1216] usb 4-1: SerialNumber: syz [ 533.258444][ T5698] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 534.297892][ T9994] netlink: 'syz.3.1239': attribute type 12 has an invalid length. [ 534.331263][ T7762] usb 4-1: USB disconnect, device number 26 [ 534.356791][ T31] audit: type=1400 audit(1790550094.024:596): avc: denied { read write } for pid=9993 comm="syz.3.1239" name="sg0" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 534.356841][ T31] audit: type=1400 audit(1790550094.024:597): avc: denied { open } for pid=9993 comm="syz.3.1239" path="/dev/sg0" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 534.418580][ T5698] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 534.418732][ T5698] ath9k_htc: Failed to initialize the device [ 534.445003][ T7762] usb 4-1: ath9k_htc: USB layer deinitialized [ 535.302028][ T92] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 535.621523][ T92] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 535.659025][ T92] usb 3-1: USB disconnect, device number 22 [ 535.664464][ T1216] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 535.810491][ T1216] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 535.931345][ T5601] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 536.123175][T10027] input: syz0 as /devices/virtual/input/input40 [ 536.538192][T10036] atomic_op ffff88807f44b1e0 conn xmit_atomic 0000000000000000 [ 537.585126][T10046] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1251'. [ 540.838985][ T978] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 541.227554][ T978] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 541.229383][ T978] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.229402][ T978] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.229415][ T978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 541.229431][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.231329][ T978] usb 1-1: config 0 descriptor?? [ 541.684458][ T978] hid_parser_main: 8 callbacks suppressed [ 541.684480][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.684502][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.684520][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690653][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690678][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690695][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690712][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690729][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690746][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.690762][ T978] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0 [ 541.874420][ T978] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -71 [ 541.889883][ T978] usb 1-1: USB disconnect, device number 23 [ 544.144112][T10080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 544.668056][ T5785] kernel read not supported for file /kmsg (pid: 5785 comm: kworker/0:7) [ 547.022889][T10117] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 547.117515][ T5601] Bluetooth: hci3: link tx timeout [ 547.117880][ T5601] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 547.806143][T10137] syz.1.1275 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 547.806170][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.1.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.806185][T10137] Tainted: [L]=SOFTLOCKUP [ 547.806189][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 547.806195][T10137] Call Trace: [ 547.806199][T10137] [ 547.806207][T10137] dump_stack_lvl+0x100/0x190 [ 547.806227][T10137] dump_header+0xfb/0x606 [ 547.806241][T10137] oom_kill_process.cold+0xd/0x380 [ 547.806255][T10137] out_of_memory+0x340/0x14f0 [ 547.806274][T10137] ? __pfx_out_of_memory+0x10/0x10 [ 547.806294][T10137] mem_cgroup_out_of_memory+0xc6/0x130 [ 547.806309][T10137] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 547.806322][T10137] ? find_held_lock+0x2b/0x80 [ 547.806341][T10137] ? do_raw_spin_unlock+0x145/0x1e0 [ 547.806357][T10137] ? _raw_spin_unlock+0x28/0x50 [ 547.806375][T10137] try_charge_memcg+0x783/0xf60 [ 547.806392][T10137] ? __pfx_try_charge_memcg+0x10/0x10 [ 547.806416][T10137] ? find_held_lock+0x2b/0x80 [ 547.806438][T10137] ? rcu_read_unlock+0x17/0x60 [ 547.806454][T10137] ? rcu_read_unlock+0x17/0x60 [ 547.806470][T10137] ? find_held_lock+0x2b/0x80 [ 547.806489][T10137] ? rcu_read_unlock+0x17/0x60 [ 547.806502][T10137] charge_memcg+0x1ae/0x210 [ 547.806513][T10137] __mem_cgroup_charge+0x2b/0x1c0 [ 547.806526][T10137] do_anonymous_page+0xaf1/0x2050 [ 547.806548][T10137] ? __pfx_do_anonymous_page+0x10/0x10 [ 547.806565][T10137] ? rcu_read_unlock+0x2d/0xb0 [ 547.806575][T10137] ? rcu_read_unlock+0x2d/0xb0 [ 547.806585][T10137] ? __pte_offset_map+0x179/0x310 [ 547.806600][T10137] __handle_mm_fault+0x1ff3/0x2f60 [ 547.806620][T10137] ? lock_vma_under_rcu+0x11d/0x590 [ 547.806637][T10137] ? __pfx___handle_mm_fault+0x10/0x10 [ 547.806658][T10137] ? lock_vma_under_rcu+0x17c/0x590 [ 547.806684][T10137] ? lock_acquire+0x1d1/0x380 [ 547.806701][T10137] handle_mm_fault+0x363/0xa20 [ 547.806721][T10137] do_user_addr_fault+0x59c/0x12f0 [ 547.806749][T10137] exc_page_fault+0x6f/0xd0 [ 547.806767][T10137] asm_exc_page_fault+0x26/0x30 [ 547.806784][T10137] RIP: 0033:0x7f8be1d4c69f [ 547.806800][T10137] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 547.806816][T10137] RSP: 002b:00007f8be2cffff0 EFLAGS: 00010246 [ 547.806831][T10137] RAX: 00007f8be2d000d0 RBX: 0000000000020000 RCX: 00007f8be2cffff0 [ 547.806842][T10137] RDX: 00007f8be1e518cb RSI: 0000000000000023 RDI: 00007f8be2d000d0 [ 547.806853][T10137] RBP: 00007f8be2ce1000 R08: 0000000000000000 R09: 00007ffe2d576797 [ 547.806865][T10137] R10: 0000000000000008 R11: 0000000000000202 R12: 00007f8be2d000d0 [ 547.806875][T10137] R13: 000000000000006e R14: 00007ffe2d5766b0 R15: 00007ffe2d576798 [ 547.806902][T10137] [ 547.995529][T10139] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 547.995529][T10139] [ 547.995548][T10139] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 547.995591][T10139] CIFS: Attempting to mount //127.0.0.1/share [ 548.990195][T10137] memory: usage 0kB, limit 0kB, failcnt 19 [ 548.990216][T10137] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 548.990226][T10137] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 548.990237][T10137] Memory cgroup stats for /syz1/test: [ 548.990383][T10137] cache 0 [ 548.990390][T10137] rss 0 [ 548.990395][T10137] rss_huge 0 [ 548.990400][T10137] shmem 0 [ 548.990406][T10137] mapped_file 0 [ 548.990412][T10137] dirty 0 [ 548.990417][T10137] writeback 0 [ 548.990423][T10137] workingset_refault_anon 0 [ 548.990430][T10137] workingset_refault_file 0 [ 548.990436][T10137] swap 0 [ 548.990442][T10137] swapcached 0 [ 548.990448][T10137] pgpgin 0 [ 548.990454][T10137] pgpgout 0 [ 548.990459][T10137] pgfault 0 [ 548.990465][T10137] pgmajfault 0 [ 548.990471][T10137] inactive_anon 0 [ 548.990477][T10137] active_anon 0 [ 548.990483][T10137] inactive_file 0 [ 548.990489][T10137] active_file 0 [ 548.990496][T10137] unevictable 0 [ 548.990501][T10137] hierarchical_memory_limit 0 [ 548.990508][T10137] hierarchical_memsw_limit 9223372036854771712 [ 548.990516][T10137] total_cache 0 [ 548.990522][T10137] total_rss 0 [ 548.990528][T10137] total_rss_huge 0 [ 548.990534][T10137] total_shmem 0 [ 548.990540][T10137] total_mapped_file 0 [ 548.990547][T10137] total_dirty 0 [ 548.990552][T10137] total_writeback 0 [ 548.990559][T10137] total_workingset_refault_anon 0 [ 548.990565][T10137] total_workingset_refault_file 0 [ 548.990572][T10137] total_swap 0 [ 548.990578][T10137] total_swapcached 0 [ 548.990584][T10137] total_pgpgin 0 [ 548.990590][T10137] total_pgpgout 0 [ 548.990596][T10137] total_pgfault 0 [ 548.990601][T10137] total_pgmajfault 0 [ 548.990607][T10137] total_inactive_anon 0 [ 548.990612][T10137] total_active_anon 0 [ 548.990618][T10137] total_inactive_file 0 [ 548.990623][T10137] total_active_file 0 [ 548.990629][T10137] total_unevictable 0 [ 548.990635][T10137] anon_cost 0 [ 548.990640][T10137] file_cost 0 [ 548.990645][T10137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.1275,pid=10134,uid=0 [ 548.992894][T10137] Memory cgroup out of memory: Killed process 10134 (syz.1.1275) total-vm:104436kB, anon-rss:1428kB, file-rss:23232kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 549.045536][T10139] CIFS: VFS: cifs_mount failed w/return code = -112 [ 549.188990][T10122] Bluetooth: hci3: command 0x0406 tx timeout [ 550.340358][T10148] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 551.420069][T10170] syz_tun: left allmulticast mode [ 551.420088][T10170] syz_tun: left promiscuous mode [ 551.421705][T10170] bridge0: port 3(syz_tun) entered disabled state [ 551.515346][T10170] bridge_slave_0: left allmulticast mode [ 551.515366][T10170] bridge_slave_0: left promiscuous mode [ 551.515461][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.599016][T10170] bridge_slave_1: left allmulticast mode [ 551.599034][T10170] bridge_slave_1: left promiscuous mode [ 551.599124][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.650913][T10170] bond0: (slave bond_slave_0): Releasing backup interface [ 551.682791][T10170] bond0: (slave bond_slave_1): Releasing backup interface [ 551.718951][T10170] team0: Port device team_slave_0 removed [ 551.758214][T10170] team0: Port device team_slave_1 removed [ 551.758674][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.758686][T10170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.775841][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.775862][T10170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.793816][T10170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 553.282533][T10189] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 553.282533][T10189] [ 553.282564][T10189] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 553.282593][T10189] CIFS: Attempting to mount //127.0.0.1/share [ 553.283006][T10189] CIFS: VFS: Error connecting to socket. Aborting operation. [ 553.283023][T10189] CIFS: VFS: cifs_mount failed w/return code = -22 [ 556.880442][ T31] audit: type=1400 audit(1790550372.147:598): avc: denied { getopt } for pid=10204 comm="syz.1.1294" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 557.970462][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.970513][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.970919][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 558.799191][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 559.710988][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1296'. [ 559.745021][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1296'. [ 561.826417][ T5803] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 561.978424][ T5803] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 561.979544][ T5803] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 561.979567][ T5803] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 561.979584][ T5803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 561.979620][ T5803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 561.979643][ T5803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 561.986121][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 561.986146][ T5803] usb 3-1: Product: syz [ 561.986159][ T5803] usb 3-1: Manufacturer: syz [ 562.001720][ T5803] cdc_wdm 3-1:1.0: skipping garbage [ 562.001738][ T5803] cdc_wdm 3-1:1.0: skipping garbage [ 562.010064][ T5803] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 562.010084][ T5803] cdc_wdm 3-1:1.0: Unknown control protocol [ 562.072749][T10244] can0: slcan on ptm0. [ 562.159212][T10244] can0 (unregistered): slcan off ptm0. [ 563.115860][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.116192][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.412038][ T5803] usb 3-1: USB disconnect, device number 23 [ 566.625481][T10287] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 566.625481][T10287] [ 566.625498][T10287] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 566.625527][T10287] CIFS: Attempting to mount //127.0.0.1/share [ 568.141192][T10287] CIFS: VFS: cifs_mount failed w/return code = -112 [ 568.412614][T10305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1314'. [ 568.415332][T10305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1314'. [ 568.434748][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 568.446386][T10305] hsr_slave_0: left promiscuous mode [ 568.464696][T10305] hsr_slave_1: left promiscuous mode [ 568.756697][ T92] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 568.909590][ T92] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 568.910468][ T92] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 568.910492][ T92] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 568.910515][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 568.910552][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 568.910576][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 568.911901][ T92] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 568.911921][ T92] usb 2-1: Product: syz [ 568.911934][ T92] usb 2-1: Manufacturer: syz [ 569.007638][ T92] cdc_wdm 2-1:1.0: skipping garbage [ 569.007659][ T92] cdc_wdm 2-1:1.0: skipping garbage [ 569.032908][ T92] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 569.032929][ T92] cdc_wdm 2-1:1.0: Unknown control protocol [ 570.142341][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.142730][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.371532][ T92] usb 2-1: USB disconnect, device number 23 [ 574.626887][T10122] Bluetooth: hci1: link tx timeout [ 574.627257][T10122] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 574.663907][ T5601] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 576.685451][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1340'. [ 581.144507][T10122] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 587.128178][T10122] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 588.225328][T10440] 9p: Bad value for 'rfdno' [ 592.845870][T10468] can0: slcan on ptm0. [ 592.927170][T10468] can0 (unregistered): slcan off ptm0. [ 594.408537][T10486] ip_tables: iptables: counters copy to user failed while replacing table [ 594.667698][T10122] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 596.347074][T10499] F2FS-fs: Conflicting test_dummy_encryption options [ 599.838121][T10525] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 599.838121][T10525] [ 599.838136][T10525] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 599.838170][T10525] CIFS: Attempting to mount //127.0.0.1/share [ 600.327342][T10122] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 600.937572][T10525] CIFS: VFS: cifs_mount failed w/return code = -112 [ 601.593464][T10544] F2FS-fs: Conflicting test_dummy_encryption options [ 602.857303][ T5698] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 602.986131][ T5698] usb 3-1: device descriptor read/64, error -71 [ 603.101672][ T31] audit: type=1400 audit(1790550674.796:599): avc: denied { mount } for pid=10556 comm="syz.0.1394" name="/" dev="ramfs" ino=32936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 603.144490][ T31] audit: type=1804 audit(1790550674.836:600): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1394" name="bus" dev="ramfs" ino=32938 res=1 errno=0 [ 603.145554][ T31] audit: type=1804 audit(1790550674.836:601): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1394" name="bus" dev="ramfs" ino=32938 res=1 errno=0 [ 603.276129][ T5698] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 603.417553][ T5698] usb 3-1: device descriptor read/64, error -71 [ 603.536309][ T5698] usb usb3-port1: attempt power cycle [ 604.166719][ T5698] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 604.187436][ T5698] usb 3-1: device descriptor read/8, error -71 [ 604.836015][ T5698] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 604.856644][ T5698] usb 3-1: device descriptor read/8, error -71 [ 604.977085][ T5698] usb usb3-port1: unable to enumerate USB device [ 605.129272][T10578] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 605.129272][T10578] [ 605.129294][T10578] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 605.129339][T10578] CIFS: Attempting to mount //127.0.0.1/share [ 605.489495][T10122] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 605.902644][ T92] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 605.943101][T10578] CIFS: VFS: Error connecting to socket. Aborting operation. [ 605.943126][T10578] CIFS: VFS: cifs_mount failed w/return code = -4 [ 606.523922][ T92] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 606.524819][ T92] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.547559][ T92] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.549725][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.549821][ T92] usb 1-1: Product: syz [ 606.549830][ T92] usb 1-1: Manufacturer: syz [ 606.549838][ T92] usb 1-1: SerialNumber: syz [ 606.593135][ T92] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 606.608900][ T92] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 606.612693][ T92] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 608.023603][T10581] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 608.023794][T10581] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 608.023815][T10581] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 608.023946][T10581] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 608.806931][ T7762] usb 1-1: USB disconnect, device number 24 [ 609.395000][ T7762] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 609.428627][ T7762] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 609.429043][ T7762] ti_usb_3410_5052 1-1:2.0: device disconnected [ 610.705350][T10629] F2FS-fs: Conflicting test_dummy_encryption options [ 611.611047][T10122] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 612.002081][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1418'. [ 612.654617][ T31] audit: type=1804 audit(1790550940.343:602): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1419" name="bus" dev="ramfs" ino=33121 res=1 errno=0 [ 612.698689][ T31] audit: type=1804 audit(1790550940.393:603): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1419" name="bus" dev="ramfs" ino=33121 res=1 errno=0 [ 612.773140][T10649] can0: slcan on ptm0. [ 612.886104][T10649] can0 (unregistered): slcan off ptm0. [ 614.584144][T10666] netlink: 'syz.3.1422': attribute type 4 has an invalid length. [ 615.826130][ T978] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 615.998686][ T978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 616.005530][ T978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 616.005556][ T978] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 616.005574][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 616.005611][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 616.005634][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 616.018525][ T978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.018546][ T978] usb 2-1: Product: syz [ 616.018559][ T978] usb 2-1: Manufacturer: syz [ 616.061713][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 616.061729][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 616.070627][ T978] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 616.070647][ T978] cdc_wdm 2-1:1.0: Unknown control protocol [ 616.342847][ T31] audit: type=1400 audit(1790550944.033:604): avc: denied { read } for pid=10688 comm="syz.3.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.404174][ T31] audit: type=1400 audit(1790550944.093:605): avc: denied { nlmsg_read } for pid=10688 comm="syz.3.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.481607][T10691] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1431'. [ 616.811180][T10122] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 616.847019][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.847393][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.032587][T10697] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 617.107220][ T92] usb 2-1: USB disconnect, device number 24 [ 617.234289][T10699] Set syz1 is full, maxelem 1021 reached [ 617.341501][T10122] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 617.341808][T10122] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 617.445219][T10705] can0: slcan on ptm0. [ 617.517945][T10705] can0 (unregistered): slcan off ptm0. [ 619.461940][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.462012][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.464041][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 620.416694][ T7762] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 620.617793][ T7762] usb 3-1: Using ep0 maxpacket: 32 [ 620.642115][ T7762] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 620.650331][ T7762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.650421][ T7762] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.656543][ T7762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.656560][ T7762] usb 3-1: Product: syz [ 620.656568][ T7762] usb 3-1: Manufacturer: syz [ 620.656577][ T7762] usb 3-1: SerialNumber: syz [ 620.657870][ T7762] usb 3-1: config 0 descriptor?? [ 622.528995][T10738] Set syz1 is full, maxelem 1021 reached [ 622.823027][ T31] audit: type=1400 audit(1790550950.513:606): avc: denied { accept } for pid=10742 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 622.918946][T10746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1447'. [ 622.961693][ T5698] usb 3-1: USB disconnect, device number 28 [ 623.176083][ T7762] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 623.298885][T10122] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 623.327344][ T7762] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 623.329302][ T7762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 623.329321][ T7762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 623.329334][ T7762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 623.331638][ T7762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.331653][ T7762] usb 2-1: Product: syz [ 623.331662][ T7762] usb 2-1: Manufacturer: syz [ 623.331671][ T7762] usb 2-1: SerialNumber: syz [ 623.336708][ T7762] usb 2-1: config 0 descriptor?? [ 623.495912][ T5698] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 623.553185][ T7762] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 624.228144][ T5698] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.246822][ T5698] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 624.246848][ T5698] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 624.246866][ T5698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 624.246902][ T5698] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 624.246925][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 624.246950][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 624.347486][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.347508][ T5698] usb 3-1: Product: syz [ 624.347519][ T5698] usb 3-1: Manufacturer: syz [ 624.400389][ T5698] cdc_wdm 3-1:1.0: skipping garbage [ 624.400409][ T5698] cdc_wdm 3-1:1.0: skipping garbage [ 624.400468][ T5698] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 624.430564][ T7762] usb 2-1: USB disconnect, device number 25 [ 625.051308][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.051525][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.055845][T10784] atomic_op ffff888035a7d1e0 conn xmit_atomic 0000000000000000 [ 626.887784][T10788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1458'. [ 627.106626][ T5698] usb 3-1: USB disconnect, device number 29 [ 631.315807][T10830] atomic_op ffff888034aa09e0 conn xmit_atomic 0000000000000000 [ 632.175829][ T5698] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 632.315961][ T978] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 632.357608][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 632.358169][ T5698] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 632.359018][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.359037][ T5698] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.360732][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.360753][ T5698] usb 1-1: Product: syz [ 632.360767][ T5698] usb 1-1: Manufacturer: syz [ 632.360781][ T5698] usb 1-1: SerialNumber: syz [ 632.364272][ T5698] usb 1-1: config 0 descriptor?? [ 632.465926][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 632.470299][ T978] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.471893][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.471916][ T978] usb 2-1: config 0 has no interface number 0 [ 632.471946][ T978] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.471982][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.479989][ T978] usb 2-1: config 0 descriptor?? [ 632.489325][ T978] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 632.733556][ T31] audit: type=1400 audit(1790551472.427:607): avc: denied { ioctl } for pid=10835 comm="syz.1.1473" path="socket:[34612]" dev="sockfs" ino=34612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.760663][ T31] audit: type=1400 audit(1790551472.427:608): avc: denied { sqpoll } for pid=10835 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 632.787060][ T31] audit: type=1400 audit(1790551472.477:609): avc: denied { map } for pid=10835 comm="syz.1.1473" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 632.967266][ T5698] usb 2-1: USB disconnect, device number 26 [ 634.665604][T10877] atomic_op ffff88807e6c59e0 conn xmit_atomic 0000000000000000 [ 635.084963][ T978] usb 1-1: USB disconnect, device number 25 [ 635.259783][ T59] IPVS: starting estimator thread 0... [ 635.375871][T10887] IPVS: using max 48 ests per chain, 115200 per kthread [ 635.416368][T10890] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1489'. [ 635.542479][ T31] audit: type=1804 audit(1790551475.237:610): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1491" name="bus" dev="ramfs" ino=34848 res=1 errno=0 [ 635.543318][ T31] audit: type=1804 audit(1790551475.237:611): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1491" name="bus" dev="ramfs" ino=34848 res=1 errno=0 [ 635.625886][ T978] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 636.280178][ T7762] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 636.369600][ T978] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.399021][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.399048][ T978] usb 1-1: Product: syz [ 636.399061][ T978] usb 1-1: Manufacturer: syz [ 636.399074][ T978] usb 1-1: SerialNumber: syz [ 636.429172][ T7762] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 636.434039][ T7762] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.436566][ T7762] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.441901][ T7762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.441922][ T7762] usb 2-1: Product: syz [ 636.441934][ T7762] usb 2-1: Manufacturer: syz [ 636.441946][ T7762] usb 2-1: SerialNumber: syz [ 636.469348][ T7762] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 636.519284][ T5697] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.532394][ T7762] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 636.565425][ T7762] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 636.860320][T10902] syzkaller0: entered promiscuous mode [ 636.860342][T10902] syzkaller0: entered allmulticast mode [ 637.060474][T10886] netlink: 'syz.0.1487': attribute type 12 has an invalid length. [ 637.081194][ T5698] usb 1-1: USB disconnect, device number 26 [ 637.313499][T10910] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1493'. [ 637.933943][T10891] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 637.954197][ T5697] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 637.954251][T10891] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 637.954319][T10891] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 637.954330][ T5697] ath9k_htc: Failed to initialize the device [ 637.954933][T10891] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 637.955005][ T5698] usb 1-1: ath9k_htc: USB layer deinitialized [ 638.003667][ T5785] usb 2-1: USB disconnect, device number 27 [ 638.056142][ T5785] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 638.076864][ T7762] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 638.167833][ T5785] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 638.238051][ T5785] ti_usb_3410_5052 2-1:2.0: device disconnected [ 638.306841][ T7762] usb 3-1: Using ep0 maxpacket: 32 [ 638.307567][ T7762] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 638.308757][ T7762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.308779][ T7762] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 638.313899][ T7762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.313925][ T7762] usb 3-1: Product: syz [ 638.313940][ T7762] usb 3-1: Manufacturer: syz [ 638.313954][ T7762] usb 3-1: SerialNumber: syz [ 638.318730][ T7762] usb 3-1: config 0 descriptor?? [ 638.536593][T10923] atomic_op ffff88802d6da9e0 conn xmit_atomic 0000000000000000 [ 639.032102][T10930] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1502'. [ 640.238946][ T92] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 640.553013][ T92] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 640.558523][ T92] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 640.558549][ T92] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 640.558564][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 640.558597][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 640.558618][ T92] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 640.559853][ T5785] usb 3-1: USB disconnect, device number 30 [ 640.562106][ T92] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 640.562124][ T92] usb 2-1: Product: syz [ 640.562137][ T92] usb 2-1: Manufacturer: syz [ 640.628781][ T92] cdc_wdm 2-1:1.0: skipping garbage [ 640.628799][ T92] cdc_wdm 2-1:1.0: skipping garbage [ 640.643759][ T92] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 640.643777][ T92] cdc_wdm 2-1:1.0: Unknown control protocol [ 640.702406][T10952] ip_tables: iptables: counters copy to user failed while replacing table [ 641.110555][ T5785] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 641.446852][ T5785] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 641.448968][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.449023][ T5785] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 641.449045][ T5785] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 641.449061][ T5785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 641.449096][ T5785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 641.449118][ T5785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 641.449325][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.450473][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 641.450495][ T5785] usb 3-1: Product: syz [ 641.450509][ T5785] usb 3-1: Manufacturer: syz [ 641.459638][ T5785] cdc_wdm 3-1:1.0: skipping garbage [ 641.459656][ T5785] cdc_wdm 3-1:1.0: skipping garbage [ 641.471115][ T5785] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 641.471134][ T5785] cdc_wdm 3-1:1.0: Unknown control protocol [ 641.478993][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 642.748584][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.755032][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.755548][ T5785] usb 2-1: USB disconnect, device number 28 [ 643.525975][ T5698] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 643.690177][ T5785] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 643.770222][ T5698] usb 1-1: Using ep0 maxpacket: 32 [ 643.772743][ T5698] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 643.780468][ T5698] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 643.781319][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.781366][ T5698] usb 1-1: config 0 has no interface number 0 [ 643.781648][ T5698] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 643.781714][ T5698] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.254709][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.254734][ T5698] usb 1-1: Product: syz [ 644.254759][ T5698] usb 1-1: Manufacturer: syz [ 644.254772][ T5698] usb 1-1: SerialNumber: syz [ 644.258566][ T5698] usb 1-1: config 0 descriptor?? [ 644.267498][ T5698] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 644.267644][ T5698] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 644.276534][ T5785] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.277431][ T5785] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 644.277450][ T5785] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 644.277465][ T5785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 644.277496][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 644.277518][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 644.280167][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.280188][ T5785] usb 2-1: Product: syz [ 644.280200][ T5785] usb 2-1: Manufacturer: syz [ 644.290590][ T5785] cdc_wdm 2-1:1.0: skipping garbage [ 644.290606][ T5785] cdc_wdm 2-1:1.0: skipping garbage [ 644.294932][ T5785] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 644.294950][ T5785] cdc_wdm 2-1:1.0: Unknown control protocol [ 644.473745][ T5698] usb 3-1: USB disconnect, device number 31 [ 645.575351][T11008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.575777][T11008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.358787][ T5785] usb 2-1: USB disconnect, device number 29 [ 646.421131][ T5698] usb 1-1: USB disconnect, device number 27 [ 646.805989][ T5698] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 646.976739][ T5698] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.977606][ T5698] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.977629][ T5698] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.977646][ T5698] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.977685][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 646.977709][ T5698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 646.978985][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.979006][ T5698] usb 1-1: Product: syz [ 646.979020][ T5698] usb 1-1: Manufacturer: syz [ 646.984027][ T5698] cdc_wdm 1-1:1.0: skipping garbage [ 646.984045][ T5698] cdc_wdm 1-1:1.0: skipping garbage [ 647.080654][ T5698] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 647.080677][ T5698] cdc_wdm 1-1:1.0: Unknown control protocol [ 648.266965][T11031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.276697][T11031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.282483][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 650.902167][ T5698] usb 1-1: USB disconnect, device number 28 [ 652.774207][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 654.066755][ T5698] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 654.236512][ T5698] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 654.241671][ T5698] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 654.241700][ T5698] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 654.241717][ T5698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 654.241798][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 654.241829][ T5698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 654.243559][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 654.243581][ T5698] usb 2-1: Product: syz [ 654.243596][ T5698] usb 2-1: Manufacturer: syz [ 654.536636][ T31] audit: type=1400 audit(1790551494.207:612): avc: denied { write } for pid=11096 comm="syz.2.1551" name="functions" dev="configfs" ino=13302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.770693][ T5698] cdc_wdm 2-1:1.0: skipping garbage [ 654.770713][ T5698] cdc_wdm 2-1:1.0: skipping garbage [ 654.783210][ T5698] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 654.783231][ T5698] cdc_wdm 2-1:1.0: Unknown control protocol [ 655.262601][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.262966][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.389443][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 655.959559][ T5697] usb 2-1: USB disconnect, device number 30 [ 657.311735][ T31] audit: type=1400 audit(1790551497.007:613): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 657.614088][ T5785] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 657.746627][ T92] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 657.766528][ T5785] usb 2-1: Using ep0 maxpacket: 32 [ 657.770283][ T5785] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 657.771235][ T5785] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 657.771257][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.771273][ T5785] usb 2-1: config 0 has no interface number 0 [ 657.771305][ T5785] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 657.771327][ T5785] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.773073][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.773093][ T5785] usb 2-1: Product: syz [ 657.773107][ T5785] usb 2-1: Manufacturer: syz [ 657.773120][ T5785] usb 2-1: SerialNumber: syz [ 657.864247][ T5785] usb 2-1: config 0 descriptor?? [ 657.873433][ T5785] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 657.873684][ T5785] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 657.956373][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 657.957985][ T92] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 657.959066][ T92] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.959088][ T92] usb 1-1: config 0 has no interface number 0 [ 657.959117][ T92] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 657.959135][ T92] usb 1-1: config 0 interface 1 has no altsetting 0 [ 657.961608][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.961631][ T92] usb 1-1: Product: syz [ 657.961643][ T92] usb 1-1: Manufacturer: syz [ 657.961658][ T92] usb 1-1: SerialNumber: syz [ 657.964287][ T92] usb 1-1: config 0 descriptor?? [ 658.208091][ T92] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 658.212541][ T92] cx231xx 1-1:0.1: Failed to read PCB config [ 658.212594][ T92] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 658.243653][ T92] usb 1-1: USB disconnect, device number 29 [ 658.381871][T11160] Set syz1 is full, maxelem 1021 reached [ 658.513570][T11158] xt_CONNSECMARK: invalid mode: 0 [ 659.685700][ T5697] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 659.775675][ T92] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 659.905645][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 659.907997][ T5697] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 659.909134][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 659.909154][ T5697] usb 1-1: config 0 has no interface number 0 [ 659.909179][ T5697] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 659.909196][ T5697] usb 1-1: config 0 interface 1 has no altsetting 0 [ 659.960619][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.960643][ T5697] usb 1-1: Product: syz [ 659.960657][ T5697] usb 1-1: Manufacturer: syz [ 659.960669][ T5697] usb 1-1: SerialNumber: syz [ 659.970054][ T5697] usb 1-1: config 0 descriptor?? [ 660.184594][ T5785] usb 2-1: USB disconnect, device number 31 [ 660.227421][ T5697] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 660.234074][ T5697] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 660.361252][ T5697] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 660.364394][ T5697] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 660.368960][ T5697] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 660.370187][ T5697] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 660.370476][ T5697] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 660.370492][ T5697] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 660.494344][T11147] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 660.498642][ T5697] i2c i2c-2: Added multiplexed i2c bus 4 [ 660.514465][ T5697] i2c i2c-2: Added multiplexed i2c bus 5 [ 660.514971][ T5697] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 660.514984][ T5697] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 660.539905][ T92] usb 3-1: device descriptor read/64, error -71 [ 660.543008][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 661.170897][ T5697] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 661.178189][ T5697] usb 1-1: USB disconnect, device number 30 [ 661.215589][ T92] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 661.376291][ T92] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 661.377164][ T92] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 661.377187][ T92] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 661.377204][ T92] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 661.377240][ T92] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 661.377265][ T92] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 661.378978][ T92] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.379000][ T92] usb 3-1: Product: syz [ 661.379013][ T92] usb 3-1: Manufacturer: syz [ 661.395671][ T92] cdc_wdm 3-1:1.0: skipping garbage [ 661.395689][ T92] cdc_wdm 3-1:1.0: skipping garbage [ 661.502758][ T92] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 661.502780][ T92] cdc_wdm 3-1:1.0: Unknown control protocol [ 662.715276][ T8792] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 662.818157][T11189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.818508][T11189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.875733][ T8792] usb 1-1: Using ep0 maxpacket: 32 [ 662.876940][ T8792] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 662.877815][ T8792] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 662.877837][ T8792] usb 1-1: config 0 has no interface number 0 [ 662.877869][ T8792] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 662.877888][ T8792] usb 1-1: config 0 interface 1 has no altsetting 0 [ 662.879618][ T8792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.879638][ T8792] usb 1-1: Product: syz [ 662.879651][ T8792] usb 1-1: Manufacturer: syz [ 662.879671][ T8792] usb 1-1: SerialNumber: syz [ 662.882036][ T8792] usb 1-1: config 0 descriptor?? [ 663.056835][ T5785] usb 3-1: USB disconnect, device number 33 [ 663.101342][ T8792] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 663.103502][ T8792] cx231xx 1-1:0.1: Failed to read PCB config [ 663.103545][ T8792] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 663.159275][ T8792] usb 1-1: USB disconnect, device number 31 [ 664.465930][ T8792] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 664.627029][ T8792] usb 1-1: Using ep0 maxpacket: 32 [ 664.628952][ T8792] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 664.632877][ T8792] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 664.632903][ T8792] usb 1-1: config 0 has no interface number 0 [ 664.632934][ T8792] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 664.632954][ T8792] usb 1-1: config 0 interface 1 has no altsetting 0 [ 664.635304][ T8792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.635326][ T8792] usb 1-1: Product: syz [ 664.635340][ T8792] usb 1-1: Manufacturer: syz [ 664.635354][ T8792] usb 1-1: SerialNumber: syz [ 664.723331][ T8792] usb 1-1: config 0 descriptor?? [ 666.292472][ T8792] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 666.313734][ T8792] cx231xx 1-1:0.1: Failed to read PCB config [ 666.313790][ T8792] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 666.330373][ T8792] usb 1-1: USB disconnect, device number 32 [ 667.477218][ T5705] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 667.628184][ T5705] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.631741][ T5705] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 667.631770][ T5705] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 667.631787][ T5705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 667.631822][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 667.631845][ T5705] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 667.633464][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.633520][ T5705] usb 3-1: Product: syz [ 667.633534][ T5705] usb 3-1: Manufacturer: syz [ 667.649607][ T5705] cdc_wdm 3-1:1.0: skipping garbage [ 667.649626][ T5705] cdc_wdm 3-1:1.0: skipping garbage [ 667.660618][ T5705] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 667.660638][ T5705] cdc_wdm 3-1:1.0: Unknown control protocol [ 668.666578][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.719108][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.859114][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 670.876747][ T5785] usb 3-1: USB disconnect, device number 34 [ 673.710232][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 674.776404][ T978] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 674.928518][ T978] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 674.931984][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.946550][ T978] usb 1-1: config 0 descriptor?? [ 674.958521][T11315] netlink: 'syz.3.1620': attribute type 12 has an invalid length. [ 675.594285][ T978] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 675.935287][ T978] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 675.935316][ T978] [drm] Initialized udl on minor 1 [ 676.288759][T11304] xt_CONNSECMARK: invalid mode: 0 [ 676.351195][T11329] netlink: 'syz.3.1623': attribute type 12 has an invalid length. [ 680.448383][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.448458][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.449175][ T1309] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 680.960139][ T978] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 680.961667][ T978] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 681.103885][ T978] usb 1-1: USB disconnect, device number 33 [ 685.058717][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 40132 jiffies old. [ 685.936721][T11410] xt_CONNSECMARK: invalid mode: 0 [ 685.996476][ T978] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 688.681518][T11433] bridge0: port 3(syz_tun) entered disabled state [ 688.707270][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.707528][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.719431][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.787643][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.996393][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1654'. [ 690.157305][T11455] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1657'. [ 690.360552][T11437] bridge0: port 3(syz_tun) entered blocking state [ 690.360665][T11437] bridge0: port 3(syz_tun) entered forwarding state [ 690.387653][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.395249][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.415904][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.490291][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.490391][T11437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.500665][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.500785][T11437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.543664][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.558332][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.633705][T11437] veth1_vlan: left promiscuous mode [ 690.641198][T11437] veth0_vlan: left promiscuous mode [ 690.659901][T11437] veth0_vlan: entered promiscuous mode [ 690.725255][T11437] veth1_vlan: entered promiscuous mode [ 690.807355][T11437] veth1_macvtap: left promiscuous mode [ 690.807934][T11437] veth0_macvtap: left promiscuous mode [ 690.811120][T11437] veth0_macvtap: entered promiscuous mode [ 690.814982][T11437] veth1_macvtap: entered promiscuous mode [ 690.852835][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.853596][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.854145][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.863560][T11437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.872196][T11437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.036636][T11447] bridge0: port 3(syz_tun) entered blocking state [ 691.044283][T11447] bridge0: port 3(syz_tun) entered disabled state [ 691.044384][T11447] syz_tun: entered allmulticast mode [ 691.055910][T11447] syz_tun: entered promiscuous mode [ 691.057001][T11447] bridge0: port 3(syz_tun) entered blocking state [ 691.057068][T11447] bridge0: port 3(syz_tun) entered forwarding state [ 691.208476][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 691.356578][T10122] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 692.947747][T10122] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 692.948116][T10122] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 693.207565][ T31] audit: type=1400 audit(1790552812.895:614): avc: denied { write } for pid=11485 comm="syz.2.1668" name="subsystems" dev="configfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.268630][ T31] audit: type=1400 audit(1790552812.965:615): avc: denied { mount } for pid=11485 comm="syz.2.1668" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 694.696094][ T31] audit: type=1400 audit(1790552813.655:616): avc: denied { write } for pid=11485 comm="syz.2.1668" name="ports" dev="configfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 695.761616][ T7641] nvmet: connect request for invalid subsystem testsubsys! [ 695.801450][T11495] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 697.134453][T11502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.143351][T11502] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.166912][T11502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.100748][T11502] veth1_vlan: left promiscuous mode [ 698.104245][T11502] »»»»»»: left promiscuous mode [ 698.126885][T11502] veth1_vlan: entered promiscuous mode [ 698.132886][T11502] veth1_macvtap: left promiscuous mode [ 698.133841][T11502] veth0_macvtap: left promiscuous mode [ 698.153402][T11502] veth0_macvtap: entered promiscuous mode [ 698.274906][T11502] veth1_macvtap: entered promiscuous mode [ 698.291589][T11502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 698.292964][T11502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.293866][T11502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.296407][T11502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.874506][T11502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.886465][T11502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.018577][T10122] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 699.164386][T11543] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 699.223889][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 699.379529][T11547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 699.381864][T11543] bond2: entered promiscuous mode [ 699.384143][T11543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.482594][ T31] audit: type=1400 audit(1790552819.175:617): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 699.568016][T11544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.568195][T11544] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 699.568204][T11544] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 699.649687][T11544] bond2: (slave wireguard0): making interface the new active one [ 699.649708][T11544] wireguard0: entered promiscuous mode [ 699.670477][T11544] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 701.191156][ T31] audit: type=1400 audit(1790552820.875:618): avc: denied { read } for pid=11559 comm="syz.2.1683" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 701.191197][ T31] audit: type=1400 audit(1790552820.875:619): avc: denied { open } for pid=11559 comm="syz.2.1683" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 701.757767][T11573] netlink: 'syz.3.1687': attribute type 12 has an invalid length. [ 702.146254][ C1] net_ratelimit: 137 callbacks suppressed [ 704.182160][T10122] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 704.855486][ T1216] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 706.495214][ T1216] usb 2-1: Using ep0 maxpacket: 8 [ 706.498089][ T1216] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 706.503421][ T1216] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.503442][ T1216] usb 2-1: config 0 has no interface number 0 [ 706.503473][ T1216] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.503526][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.506011][ T1216] usb 2-1: config 0 descriptor?? [ 706.570129][ T1216] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 707.328421][ T5716] net_ratelimit: 124 callbacks suppressed [ 707.829192][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'. [ 708.165490][ T7762] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 708.205350][ T31] audit: type=1804 audit(1790552827.905:620): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1705" name="bus" dev="ramfs" ino=38057 res=1 errno=0 [ 708.225291][ T31] audit: type=1804 audit(1790552827.905:621): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1705" name="bus" dev="ramfs" ino=38057 res=1 errno=0 [ 708.340545][ T7762] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 708.378080][ T7762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.378099][ T7762] usb 3-1: Product: syz [ 708.378113][ T7762] usb 3-1: Manufacturer: syz [ 708.378128][ T7762] usb 3-1: SerialNumber: syz [ 708.517406][ T7762] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 709.033793][T11630] netlink: 'syz.2.1703': attribute type 12 has an invalid length. [ 709.174927][T11523] usb 3-1: USB disconnect, device number 35 [ 709.592530][ T7762] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 709.614083][ T7762] ath9k_htc: Failed to initialize the device [ 709.621266][T11523] usb 3-1: ath9k_htc: USB layer deinitialized [ 711.335067][T11652] netlink: 'syz.4.1711': attribute type 10 has an invalid length. [ 711.380451][T11652] bridge0: port 3(syz_tun) entered disabled state [ 711.380789][T11652] syz_tun: left allmulticast mode [ 711.380911][T11652] bridge0: port 3(syz_tun) entered disabled state [ 711.487946][T11652] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 711.739062][ T7762] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 712.118171][ T7762] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 712.148224][ T7762] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 712.148245][ T7762] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 712.148262][ T7762] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 712.148313][ T7762] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 712.148336][ T7762] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 712.248076][ T7762] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 712.248094][ T7762] usb 3-1: Product: syz [ 712.248105][ T7762] usb 3-1: Manufacturer: syz [ 712.344269][ T5714] net_ratelimit: 99 callbacks suppressed [ 713.023182][ T7762] cdc_wdm 3-1:1.0: skipping garbage [ 713.023194][ T7762] cdc_wdm 3-1:1.0: skipping garbage [ 713.041867][ T7762] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 713.041882][ T7762] cdc_wdm 3-1:1.0: Unknown control protocol [ 713.397374][ T7762] usb 2-1: USB disconnect, device number 32 [ 713.676306][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.676875][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.517708][T11517] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 714.826915][ T1216] usb 3-1: USB disconnect, device number 36 [ 714.848706][T11668] xt_CONNSECMARK: invalid mode: 0 [ 716.376427][ T1216] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 716.568413][ T1216] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 716.585495][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.597596][ T1216] usb 2-1: config 0 descriptor?? [ 716.908671][ T1216] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 717.356077][ T7641] net_ratelimit: 102 callbacks suppressed [ 718.175492][ T1216] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 718.175510][ T1216] [drm] Initialized udl on minor 1 [ 718.745905][T11696] xt_CONNSECMARK: invalid mode: 0 [ 719.919507][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1733'. [ 719.919546][T11732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 719.941278][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1733'. [ 720.876364][ T7762] kernel read not supported for file /kmsg (pid: 7762 comm: kworker/1:7) [ 722.385275][ C1] net_ratelimit: 170 callbacks suppressed [ 723.185471][ T1216] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 723.185793][ T1216] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 723.342798][ T1216] usb 2-1: USB disconnect, device number 33 [ 723.349987][T11516] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 727.148974][T10122] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 727.204345][ T1216] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 727.537131][ T1216] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 727.570570][ T1216] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 727.570593][ T1216] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 727.570610][ T1216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 727.570667][ T1216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 727.570692][ T1216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 727.585222][ C1] net_ratelimit: 89 callbacks suppressed [ 727.843707][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 727.843724][ T1216] usb 2-1: Product: syz [ 727.843737][ T1216] usb 2-1: Manufacturer: syz [ 728.397711][ T1216] cdc_wdm 2-1:1.0: skipping garbage [ 728.397723][ T1216] cdc_wdm 2-1:1.0: skipping garbage [ 728.399320][ T1216] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 728.399341][ T1216] cdc_wdm 2-1:1.0: Unknown control protocol [ 728.451331][ T7762] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 728.595776][ T7762] usb 3-1: Using ep0 maxpacket: 32 [ 728.597473][ T7762] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 728.600575][ T7762] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.600597][ T7762] usb 3-1: config 0 has no interface number 0 [ 728.600630][ T7762] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 728.600647][ T7762] usb 3-1: config 0 interface 1 has no altsetting 0 [ 729.390596][ T7762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.390614][ T7762] usb 3-1: Product: syz [ 729.390627][ T7762] usb 3-1: Manufacturer: syz [ 729.390641][ T7762] usb 3-1: SerialNumber: syz [ 729.974240][ T7762] usb 3-1: config 0 descriptor?? [ 730.221892][ T7762] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 730.222724][ T7762] cx231xx 3-1:0.1: Failed to read PCB config [ 730.222768][ T7762] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 730.244090][ T7762] usb 3-1: USB disconnect, device number 37 [ 730.333925][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.334486][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.568315][T11515] usb 2-1: USB disconnect, device number 34 [ 732.715008][ C0] net_ratelimit: 165 callbacks suppressed [ 733.588506][T11849] bridge0: port 3(syz_tun) entered disabled state [ 733.635492][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.635739][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.745392][T11515] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 733.905436][T11515] usb 2-1: Using ep0 maxpacket: 16 [ 733.906152][T11515] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.908825][T11515] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.908871][T11515] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.908916][T11515] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 733.910326][T11515] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.910394][T11515] usb 2-1: Manufacturer: syz [ 733.975031][T11515] usb 2-1: config 0 descriptor?? [ 734.170581][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.192368][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.355975][ T5718] usb 2-1: USB disconnect, device number 35 [ 735.050514][T11852] bridge0: port 3(syz_tun) entered blocking state [ 735.050604][T11852] bridge0: port 3(syz_tun) entered forwarding state [ 735.073312][T11852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.092504][T11852] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.126774][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.178887][T11852] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.178986][T11852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.209226][T11852] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.209333][T11852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.250327][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.254363][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.291193][T11852] veth1_vlan: left promiscuous mode [ 735.294242][T11852] vlan0: left promiscuous mode [ 735.309470][T11852] veth1_vlan: entered promiscuous mode [ 735.321478][T11852] veth1_macvtap: left promiscuous mode [ 735.322654][T11852] veth0_macvtap: left promiscuous mode [ 735.324888][T11852] veth0_macvtap: entered promiscuous mode [ 735.352848][T11852] veth1_macvtap: entered promiscuous mode [ 735.373014][T11852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.373959][T11852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.395046][T11524] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 735.407589][T11852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.410728][T11852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.414633][T11852] dummy1: left promiscuous mode [ 735.549431][T11524] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.563055][T11524] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.563076][T11524] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 735.563093][T11524] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.563141][T11524] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 735.563163][T11524] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 735.565825][T11524] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.565842][T11524] usb 2-1: Product: syz [ 735.565854][T11524] usb 2-1: Manufacturer: syz [ 735.585796][T11524] cdc_wdm 2-1:1.0: skipping garbage [ 735.585807][T11524] cdc_wdm 2-1:1.0: skipping garbage [ 735.621758][T11524] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 735.621772][T11524] cdc_wdm 2-1:1.0: Unknown control protocol [ 737.016488][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.018588][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.254890][T11515] usb 2-1: USB disconnect, device number 36 [ 737.495435][ T31] audit: type=1804 audit(1790553113.178:622): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1780" name="bus" dev="ramfs" ino=39665 res=1 errno=0 [ 737.495476][ T31] audit: type=1804 audit(1790553113.178:623): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1780" name="bus" dev="ramfs" ino=39665 res=1 errno=0 [ 738.017461][ T6412] IPVS: starting estimator thread 0... [ 738.125390][T11895] IPVS: using max 44 ests per chain, 105600 per kthread [ 738.224990][ C1] net_ratelimit: 243 callbacks suppressed [ 738.305487][T11515] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 738.375041][ T1216] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 738.480316][T11515] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 738.502261][T11515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.502283][T11515] usb 2-1: Product: syz [ 738.502298][T11515] usb 2-1: Manufacturer: syz [ 738.502312][T11515] usb 2-1: SerialNumber: syz [ 738.545542][ T1216] usb 1-1: Using ep0 maxpacket: 32 [ 738.546552][ T1216] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 738.547600][ T1216] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.547622][ T1216] usb 1-1: config 0 has no interface number 0 [ 738.547654][ T1216] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 738.547679][ T1216] usb 1-1: config 0 interface 1 has no altsetting 0 [ 738.550097][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.550113][ T1216] usb 1-1: Product: syz [ 738.550126][ T1216] usb 1-1: Manufacturer: syz [ 738.550138][ T1216] usb 1-1: SerialNumber: syz [ 738.579542][ T1216] usb 1-1: config 0 descriptor?? [ 738.633534][T11517] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 738.913441][ T1216] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 738.925624][ T1216] cx231xx 1-1:0.1: Failed to read PCB config [ 738.925722][ T1216] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 738.932564][ T1216] usb 1-1: USB disconnect, device number 36 [ 739.147565][T11894] netlink: 'syz.1.1781': attribute type 12 has an invalid length. [ 739.181054][ T7762] usb 2-1: USB disconnect, device number 37 [ 739.467046][T11524] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 739.615243][T11524] usb 1-1: Using ep0 maxpacket: 32 [ 739.615762][T11524] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 739.621635][T11524] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.621654][T11524] usb 1-1: config 0 has no interface number 0 [ 739.621683][T11524] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 739.621701][T11524] usb 1-1: config 0 interface 1 has no altsetting 0 [ 739.625134][T11524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.625151][T11524] usb 1-1: Product: syz [ 739.625168][T11524] usb 1-1: Manufacturer: syz [ 739.625180][T11524] usb 1-1: SerialNumber: syz [ 739.635440][T11524] usb 1-1: config 0 descriptor?? [ 739.670812][T11517] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 739.671022][T11517] ath9k_htc: Failed to initialize the device [ 739.689966][ T7762] usb 2-1: ath9k_htc: USB layer deinitialized [ 739.991281][T11524] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 740.021388][T11524] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 740.126475][T11524] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 740.131841][T11524] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 740.132744][T11524] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 740.133136][T11524] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 740.133458][T11524] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 740.133468][T11524] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 740.230728][T11524] i2c i2c-2: Added multiplexed i2c bus 4 [ 740.232677][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.232997][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.267448][T11524] i2c i2c-2: Added multiplexed i2c bus 5 [ 740.270588][T11524] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 740.270603][T11524] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 740.337690][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 740.537295][T11524] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 740.567906][T11524] usb 1-1: USB disconnect, device number 37 [ 741.667461][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.667501][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.035024][ T7762] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 742.185675][ T7762] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 742.187878][ T7762] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 742.187893][ T7762] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 742.187904][ T7762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 742.187937][ T7762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 742.188005][ T7762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 742.192005][ T7762] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 742.192016][ T7762] usb 1-1: Product: syz [ 742.192025][ T7762] usb 1-1: Manufacturer: syz [ 742.216933][ T7762] cdc_wdm 1-1:1.0: skipping garbage [ 742.216944][ T7762] cdc_wdm 1-1:1.0: skipping garbage [ 742.233196][ T7762] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 742.233215][ T7762] cdc_wdm 1-1:1.0: Unknown control protocol [ 743.575705][T11943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.576023][T11943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.664975][ C1] net_ratelimit: 151 callbacks suppressed [ 743.808475][ T7762] usb 1-1: USB disconnect, device number 38 [ 744.050247][ T6412] nvmet: connect request for invalid subsystem testsubsys! [ 744.062727][T11944] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 747.670922][T11967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1801'. [ 747.773795][T11970] 9p: Bad value for 'rfdno' [ 748.705239][ C0] net_ratelimit: 81 callbacks suppressed [ 749.715639][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 749.817575][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 749.817592][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 749.968962][T11992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 750.091446][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.224341][T11997] bond2: (slave bond0): making interface the new active one [ 750.243809][T11997] bond2: (slave bond0): Enslaving as an active interface with an up link [ 750.780424][ T31] audit: type=1400 audit(1790553382.475:624): avc: denied { create } for pid=12001 comm="syz.0.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 752.529226][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.530080][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.921960][T10122] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 753.833768][ T13] net_ratelimit: 128 callbacks suppressed [ 753.937925][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.157866][T12010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.533395][T12026] fuse: Bad value for 'fd' [ 754.926300][T12037] xt_CONNSECMARK: invalid mode: 0 [ 755.216480][T12013] syz_tun: left promiscuous mode [ 755.286947][T12013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.305346][T12013] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.329156][T12013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.489016][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.489106][T12013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.507620][T12013] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.507694][T12013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.580616][T12013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.592188][T12013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.676728][T12013] veth1_vlan: left promiscuous mode [ 755.677754][T12013] veth0_vlan: left promiscuous mode [ 755.686920][T12013] veth0_vlan: entered promiscuous mode [ 755.701931][T12013] veth1_vlan: entered promiscuous mode [ 755.727453][T12013] veth1_macvtap: left promiscuous mode [ 755.738375][T12013] veth0_macvtap: left promiscuous mode [ 755.755708][T12013] veth0_macvtap: entered promiscuous mode [ 755.767256][T12013] veth1_macvtap: entered promiscuous mode [ 755.958127][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 755.966471][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.967413][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.984326][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.568484][T12013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.568856][T12013] bond2: left promiscuous mode [ 756.568865][T12013] wireguard0: left promiscuous mode [ 756.569357][T12013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 756.880125][T12047] netlink: 'syz.3.1829': attribute type 12 has an invalid length. [ 757.034404][T10122] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 757.034475][T10122] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 757.138245][T10122] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 758.838376][ T5704] net_ratelimit: 184 callbacks suppressed [ 759.565101][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 759.787548][T11517] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 759.847666][T12085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.947409][T11517] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.948614][T11517] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.948636][T11517] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 759.948652][T11517] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.948701][T11517] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 759.948727][T11517] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 759.950945][T11517] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.950964][T11517] usb 2-1: Product: syz [ 759.950976][T11517] usb 2-1: Manufacturer: syz [ 760.044075][T11517] cdc_wdm 2-1:1.0: skipping garbage [ 760.044087][T11517] cdc_wdm 2-1:1.0: skipping garbage [ 760.142874][T11517] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 760.142890][T11517] cdc_wdm 2-1:1.0: Unknown control protocol [ 760.810686][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.811233][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.255830][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.286881][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.416662][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.418462][T12101] xt_CONNSECMARK: invalid mode: 0 [ 761.419082][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.680201][T11518] usb 2-1: USB disconnect, device number 38 [ 761.767923][ T6114] nvmet: connect request for invalid subsystem testsubsys! [ 761.776004][T12113] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 762.283937][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.296747][T12092] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.315049][T12092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.544995][T12119] atomic_op ffff88807db0f9e0 conn xmit_atomic 0000000000000000 [ 762.549785][ T31] audit: type=1400 audit(1790553650.241:625): avc: denied { write } for pid=12116 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 763.043644][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.043730][T12092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.092330][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.092375][T12092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.208325][T12092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.237253][T12092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.383306][T10122] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 763.542005][T12092] veth1_vlan: left promiscuous mode [ 763.676833][T12092] veth0_vlan: left promiscuous mode [ 763.803779][T12092] veth0_vlan: entered promiscuous mode [ 764.066075][ C1] net_ratelimit: 217 callbacks suppressed [ 764.101573][T12092] veth1_vlan: entered promiscuous mode [ 764.389815][T12092] veth1_macvtap: left promiscuous mode [ 764.432829][T12092] veth0_macvtap: left promiscuous mode [ 764.538552][T12092] veth0_macvtap: entered promiscuous mode [ 764.739346][T12092] veth1_macvtap: entered promiscuous mode [ 764.812610][T12092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 764.822475][T12128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1852'. [ 764.843954][T12092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 764.849025][T12092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.856586][T12092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.904519][T12092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.918305][T12092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 765.035737][T12110] netlink: 'syz.0.1847': attribute type 12 has an invalid length. [ 767.640981][T12132] xt_CONNSECMARK: invalid mode: 0 [ 767.804786][ T7762] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 767.957710][ T7762] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 767.980288][T12162] atomic_op ffff8880792e69e0 conn xmit_atomic 0000000000000000 [ 768.324592][ T7762] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 768.324612][ T7762] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 768.324627][ T7762] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 768.324674][ T7762] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 768.324748][ T7762] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 768.342317][ T7762] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 768.342334][ T7762] usb 3-1: Product: syz [ 768.342347][ T7762] usb 3-1: Manufacturer: syz [ 768.394005][ T7762] cdc_wdm 3-1:1.0: skipping garbage [ 768.394018][ T7762] cdc_wdm 3-1:1.0: skipping garbage [ 768.463578][ T7762] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 768.463587][ T7762] cdc_wdm 3-1:1.0: Unknown control protocol [ 768.618283][T10122] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 768.784909][ C1] ipvlan_process_outbound: 1 callbacks suppressed [ 769.184913][ C0] net_ratelimit: 246 callbacks suppressed [ 769.883418][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.883961][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.163998][ T7762] usb 3-1: USB disconnect, device number 39 [ 772.863559][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'. [ 773.942875][T12207] atomic_op ffff8880370379e0 conn xmit_atomic 0000000000000000 [ 774.333171][ T7478] net_ratelimit: 148 callbacks suppressed [ 774.386904][ T31] audit: type=1400 audit(1790553918.087:626): avc: denied { connect } for pid=12209 comm="syz.1.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 775.622117][T12224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1877'. [ 777.341914][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1884'. [ 777.716626][ T31] audit: type=1400 audit(1790554177.409:627): avc: denied { read } for pid=12248 comm="syz.1.1887" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 777.721341][ T31] audit: type=1400 audit(1790554177.409:628): avc: denied { open } for pid=12248 comm="syz.1.1887" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 779.348836][ T7641] net_ratelimit: 284 callbacks suppressed [ 780.058106][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.354699][T11523] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 780.516402][T11523] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 780.537532][T11523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.537543][T11523] usb 3-1: Product: syz [ 780.537552][T11523] usb 3-1: Manufacturer: syz [ 780.537560][T11523] usb 3-1: SerialNumber: syz [ 780.649433][ T7762] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 781.175234][T12283] netlink: 'syz.2.1898': attribute type 12 has an invalid length. [ 781.307296][T11523] usb 3-1: USB disconnect, device number 40 [ 781.758170][ T7762] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 781.758359][ T7762] ath9k_htc: Failed to initialize the device [ 781.773682][T11523] usb 3-1: ath9k_htc: USB layer deinitialized [ 781.821074][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 784.119114][ T31] audit: type=1400 audit(1790554951.813:629): avc: denied { write } for pid=12321 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 784.399715][T12332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1916'. [ 784.456103][T12328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1914'. [ 784.465275][ C1] net_ratelimit: 160 callbacks suppressed [ 784.826475][T11516] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 785.015001][T11516] usb 3-1: Using ep0 maxpacket: 8 [ 785.020927][T11516] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 785.040278][T11516] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 785.040365][T11516] usb 3-1: config 0 has no interface number 0 [ 785.040658][T11516] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 785.040913][T11516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.450774][T11516] usb 3-1: config 0 descriptor?? [ 785.458388][T11516] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 786.810192][T11516] usb 3-1: USB disconnect, device number 41 [ 787.774396][ T31] audit: type=1400 audit(1790554955.463:630): avc: denied { create } for pid=12371 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 788.274725][ T43] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.571008][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.571656][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.611666][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.782197][T12364] veth1_vlan: left promiscuous mode [ 788.783164][T12364] veth0_vlan: left promiscuous mode [ 788.799220][T12364] veth0_vlan: entered promiscuous mode [ 788.802904][T12364] veth1_vlan: entered promiscuous mode [ 788.823129][T12364] veth1_macvtap: left promiscuous mode [ 788.824170][T12364] veth0_macvtap: left promiscuous mode [ 788.841191][T12364] veth0_macvtap: entered promiscuous mode [ 788.842895][T12364] veth1_macvtap: entered promiscuous mode [ 788.879223][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.881317][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.882320][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.883285][T12364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.920868][T12364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 788.921835][T12364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 789.008509][T10659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.744643][ C1] net_ratelimit: 305 callbacks suppressed [ 790.863629][T12379] fuse: fd is not a fuse device [ 790.893482][ T31] audit: type=1400 audit(1790554958.583:631): avc: denied { unmount } for pid=12378 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 791.355623][T12389] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 791.582931][T12389] bond3: entered promiscuous mode [ 791.594923][T12389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.670754][T12397] futex_wake_op: syz.0.1934 tries to shift op by 144; fix this program [ 791.732524][T12392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.747241][T12392] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 791.747257][T12392] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 791.946407][T12392] bond3: (slave wireguard1): making interface the new active one [ 791.946425][T12392] wireguard1: entered promiscuous mode [ 791.948480][T12392] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 793.443438][T12405] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.483762][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 793.580822][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 793.580840][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 793.809094][T12412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.885825][ T31] audit: type=1400 audit(1790555217.581:632): avc: denied { read } for pid=5264 comm="dhcpcd" name="n69" dev="tmpfs" ino=7086 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.885863][ T31] audit: type=1400 audit(1790555217.581:633): avc: denied { open } for pid=5264 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=7086 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.885897][ T31] audit: type=1400 audit(1790555217.581:634): avc: denied { getattr } for pid=5264 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=7086 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 794.406952][T12432] can0: slcan on ptm0. [ 794.790763][ T6076] net_ratelimit: 161 callbacks suppressed [ 795.359481][T12439] can0 (unregistered): slcan off ptm0. [ 795.976477][T12458] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 795.977298][T12460] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1950'. [ 796.296456][T12458] bond2: entered promiscuous mode [ 796.296829][T12458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.342387][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1953'. [ 796.355351][ T31] audit: type=1400 audit(1790555220.051:635): avc: denied { write } for pid=12433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.355631][ T31] audit: type=1400 audit(1790555220.051:636): avc: denied { create } for pid=12433 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.356093][ T31] audit: type=1400 audit(1790555220.051:637): avc: denied { write } for pid=12433 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.netdevsim3.link" dev="tmpfs" ino=7103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.357780][ T31] audit: type=1400 audit(1790555220.051:638): avc: denied { append } for pid=12433 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim3.link" dev="tmpfs" ino=7103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.522641][T12464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 796.522973][T12464] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 796.522988][T12464] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 796.597518][T12464] bond2: (slave wireguard1): making interface the new active one [ 796.597536][T12464] wireguard1: entered promiscuous mode [ 796.598951][T12464] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 796.705343][ C1] ipvlan_process_outbound: 1 callbacks suppressed [ 796.908449][ T31] audit: type=1400 audit(1790555220.591:639): avc: denied { write } for pid=12478 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.910767][ T31] audit: type=1400 audit(1790555220.601:640): avc: denied { unlink } for pid=12478 comm="rm" name="resolv.conf.netdevsim3.link" dev="tmpfs" ino=7103 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 797.837752][ T5264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.824527][ C1] net_ratelimit: 104 callbacks suppressed [ 799.953549][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1959'. [ 800.538067][T12511] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1965'. [ 801.480517][T10122] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 802.711571][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1969'. [ 803.105694][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.105736][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.714715][T12547] xt_CONNSECMARK: invalid mode: 0 [ 804.865673][ T7478] net_ratelimit: 182 callbacks suppressed [ 804.966058][ T31] audit: type=1400 audit(1790555484.664:641): avc: denied { write } for pid=12552 comm="syz.1.1979" name="subsystems" dev="configfs" ino=36797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 804.974238][ T31] audit: type=1400 audit(1790555484.664:642): avc: denied { create } for pid=12552 comm="syz.1.1979" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 805.043695][ T31] audit: type=1400 audit(1790555484.734:643): avc: denied { write } for pid=12552 comm="syz.1.1979" name="subsystems" dev="configfs" ino=36797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 805.295848][ T136] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ec277c43-9e1f-4dc8-a4f1-3c1418e3fe2c. [ 805.530204][T12555] nvme nvme0: creating 2 I/O queues. [ 805.551880][T12555] nvme nvme0: new ctrl: "testsubsys" [ 809.289747][T10122] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 810.304433][ C1] net_ratelimit: 158 callbacks suppressed [ 812.604741][ T5726] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 812.647387][ T31] audit: type=1400 audit(1790555492.334:644): avc: denied { bind } for pid=12616 comm="syz.0.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 812.755458][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 812.756170][ T5726] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 812.757568][ T5726] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 812.757590][ T5726] usb 2-1: config 0 has no interface number 0 [ 812.757633][ T5726] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.757687][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.763143][ T5726] usb 2-1: config 0 descriptor?? [ 812.826496][ T5726] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 812.855409][T12632] bridge0: port 3(syz_tun) entered disabled state [ 812.899650][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.900190][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.015200][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 813.015218][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 813.374238][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.418333][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.252273][ T5726] usb 2-1: USB disconnect, device number 39 [ 814.937323][ T136] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.937365][ T136] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.937397][ T136] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.937430][ T136] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.119434][T12633] bridge0: port 3(syz_tun) entered blocking state [ 815.119525][T12633] bridge0: port 3(syz_tun) entered forwarding state [ 815.144978][T12633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.148315][T12633] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.153213][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.407613][T12665] net_ratelimit: 199 callbacks suppressed [ 815.703548][T12633] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.703641][T12633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.707933][T12633] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.708017][T12633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.745548][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.755888][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.792608][T12633] veth1_vlan: left promiscuous mode [ 815.801429][T12633] veth0_vlan: left promiscuous mode [ 815.816493][T12633] veth0_vlan: entered promiscuous mode [ 816.025575][T12633] veth1_vlan: entered promiscuous mode [ 816.031290][T12633] veth1_macvtap: left promiscuous mode [ 816.032223][T12633] veth0_macvtap: left promiscuous mode [ 816.033727][T12633] veth0_macvtap: entered promiscuous mode [ 816.590336][T12633] veth1_macvtap: entered promiscuous mode [ 816.653788][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 816.659323][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 816.674018][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 816.693335][T12633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 816.753561][T12633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.764166][T12633] bond2: left promiscuous mode [ 816.764179][T12633] wireguard1: left promiscuous mode [ 816.778114][T12633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 817.075009][ T6075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.079879][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.082068][ T6075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.082110][ T6075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.376128][ T8792] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 818.504608][ T8792] usb 2-1: device descriptor read/64, error -71 [ 818.766472][ T8792] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 819.351720][ T8792] usb 2-1: device descriptor read/64, error -71 [ 819.527521][ T8792] usb usb2-port1: attempt power cycle [ 820.075614][ T8792] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 820.109907][ T8792] usb 2-1: device descriptor read/8, error -71 [ 820.619892][ T6075] net_ratelimit: 307 callbacks suppressed [ 820.800372][ T8792] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 820.815048][ T8792] usb 2-1: device descriptor read/8, error -71 [ 820.925201][ T8792] usb usb2-port1: unable to enumerate USB device [ 821.214482][ T8792] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 821.384645][ T8792] usb 3-1: Using ep0 maxpacket: 8 [ 821.387009][ T8792] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 821.388114][ T8792] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.388134][ T8792] usb 3-1: config 0 has no interface number 0 [ 821.388168][ T8792] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 821.388237][ T8792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.392884][ T8792] usb 3-1: config 0 descriptor?? [ 821.456860][ T8792] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 821.960637][ T31] audit: type=1400 audit(1790555501.624:645): avc: denied { listen } for pid=12712 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 821.960800][ T31] audit: type=1400 audit(1790555501.624:646): avc: denied { write } for pid=12712 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 821.960922][ T31] audit: type=1400 audit(1790555501.634:647): avc: denied { accept } for pid=12712 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 821.961016][ T31] audit: type=1400 audit(1790555501.644:648): avc: denied { bind } for pid=12712 comm="syz.3.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 824.384705][ C1] ipvlan_process_outbound: 1 callbacks suppressed [ 825.066831][ T31] audit: type=1400 audit(1790555760.763:649): avc: denied { create } for pid=12756 comm="syz.4.2035" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 825.114080][ T31] audit: type=1400 audit(1790555760.803:650): avc: denied { write } for pid=12756 comm="syz.4.2035" name="file2" dev="tmpfs" ino=2204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 825.114125][ T31] audit: type=1400 audit(1790555760.803:651): avc: denied { open } for pid=12756 comm="syz.4.2035" path="/404/file2" dev="tmpfs" ino=2204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 825.229486][ T31] audit: type=1400 audit(1790555760.923:652): avc: denied { ioctl } for pid=12756 comm="syz.4.2035" path="/404/file2" dev="tmpfs" ino=2204 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 825.288541][T12757] SQUASHFS error: Failed to read block 0x0: -5 [ 825.414330][ T31] audit: type=1400 audit(1790555761.103:653): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file0" dev="tmpfs" ino=2205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 825.545132][T11511] usb 3-1: USB disconnect, device number 42 [ 825.664363][ C1] net_ratelimit: 204 callbacks suppressed [ 827.124310][ T8792] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 827.740260][ T8792] usb 3-1: device descriptor read/64, error -71 [ 828.064670][ T8792] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 828.137022][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 828.214317][ T8792] usb 3-1: device descriptor read/64, error -71 [ 828.324864][ T8792] usb usb3-port1: attempt power cycle [ 828.676429][ T8792] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 828.709938][ T8792] usb 3-1: device descriptor read/8, error -71 [ 828.984472][ T8792] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 829.034467][ T8792] usb 3-1: device descriptor read/8, error -71 [ 829.146209][ T8792] usb usb3-port1: unable to enumerate USB device [ 830.944298][ C1] net_ratelimit: 134 callbacks suppressed [ 831.325118][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 831.340327][T12785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.341436][T12785] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.364122][T12785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.593117][T12785] veth1_vlan: left promiscuous mode [ 831.601631][T12785] veth0_vlan: left promiscuous mode [ 831.603654][T12785] veth0_vlan: entered promiscuous mode [ 831.619247][T12785] veth1_vlan: entered promiscuous mode [ 831.630936][T12785] veth1_macvtap: left promiscuous mode [ 831.632001][T12785] veth0_macvtap: left promiscuous mode [ 831.633591][T12785] veth0_macvtap: entered promiscuous mode [ 831.657196][T12785] veth1_macvtap: entered promiscuous mode [ 831.663638][T12785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.677847][T12785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 831.678805][T12785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 831.682762][T12785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 831.683676][T12785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.401662][T12809] bridge0: port 3(syz_tun) entered disabled state [ 832.417353][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.419203][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.791602][T12809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.814684][T12809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.358669][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 833.360363][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 833.600022][T12812] bridge0: port 3(syz_tun) entered blocking state [ 833.600106][T12812] bridge0: port 3(syz_tun) entered forwarding state [ 833.620288][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 833.620490][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 833.624012][T10122] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 833.638446][T12812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.659703][T12812] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.686773][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.735536][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.735587][T12812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.746714][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.746799][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.796819][T12812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.803775][T12812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.841120][T12812] veth1_vlan: left promiscuous mode [ 833.847535][T12812] veth0_vlan: left promiscuous mode [ 833.853237][T12812] veth0_vlan: entered promiscuous mode [ 833.867383][T12812] veth1_vlan: entered promiscuous mode [ 833.891930][T12812] veth1_macvtap: left promiscuous mode [ 833.892438][T12812] veth0_macvtap: left promiscuous mode [ 833.897580][T12812] veth0_macvtap: entered promiscuous mode [ 833.906724][T12812] veth1_macvtap: entered promiscuous mode [ 833.931117][T12812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.934005][T12812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.937736][T12812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.940406][T12812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.977253][T12812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.980081][T12812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 834.124863][T11520] libceph: connect (1)[c::]:6789 error -101 [ 834.125045][T11520] libceph: mon0 (1)[c::]:6789 connect error [ 834.186063][T12832] ceph: No mds server is up or the cluster is laggy [ 834.262202][ T31] audit: type=1400 audit(1790555769.953:654): avc: denied { read } for pid=12839 comm="syz.2.2056" lport=46255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.341192][T12843] SQUASHFS error: Failed to read block 0x0: -5 [ 834.610343][ T31] audit: type=1400 audit(1790555770.303:655): avc: denied { setopt } for pid=12850 comm="syz.1.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 834.611256][ T31] audit: type=1400 audit(1790555770.303:656): avc: denied { read } for pid=12850 comm="syz.1.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 836.394310][ T6075] net_ratelimit: 450 callbacks suppressed [ 837.905087][ C1] ipvlan_process_outbound: 4 callbacks suppressed [ 841.536114][ T5708] net_ratelimit: 179 callbacks suppressed [ 841.858220][T11510] libceph: connect (1)[c::]:6789 error -101 [ 841.858431][T11510] libceph: mon0 (1)[c::]:6789 connect error [ 842.115969][T11510] libceph: connect (1)[c::]:6789 error -101 [ 842.116189][T11510] libceph: mon0 (1)[c::]:6789 connect error [ 842.552532][T12915] ceph: No mds server is up or the cluster is laggy [ 843.817922][T12931] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 843.956300][ T136] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ec277c43-9e1f-4dc8-a4f1-3c1418e3fe2c. [ 844.111778][T12931] nvme nvme1: creating 2 I/O queues. [ 844.143729][T12931] nvme nvme1: new ctrl: "testsubsys" [ 846.628911][ C1] net_ratelimit: 239 callbacks suppressed [ 850.724226][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 850.727642][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 850.785212][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 850.785412][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 851.044613][ T5785] libceph: connect (1)[c::]:6789 error -101 [ 851.044807][ T5785] libceph: mon0 (1)[c::]:6789 connect error [ 851.158879][T12985] ceph: No mds server is up or the cluster is laggy [ 851.904530][ C1] net_ratelimit: 167 callbacks suppressed [ 856.907835][T13045] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2112'. [ 856.931549][T12795] net_ratelimit: 100 callbacks suppressed [ 858.478669][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 861.517064][T12795] libceph: connect (1)[c::]:6789 error -101 [ 861.554644][T12795] libceph: mon0 (1)[c::]:6789 connect error [ 861.867803][T12795] libceph: connect (1)[c::]:6789 error -101 [ 861.921179][T12795] libceph: mon0 (1)[c::]:6789 connect error [ 861.958974][T13096] ceph: No mds server is up or the cluster is laggy [ 861.984115][ C1] net_ratelimit: 139 callbacks suppressed [ 862.467629][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 865.389840][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.389882][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.503983][ C1] net_ratelimit: 166 callbacks suppressed [ 870.704143][T11510] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 870.856890][T11510] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 870.869257][T11510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.869274][T11510] usb 2-1: Product: syz [ 870.869286][T11510] usb 2-1: Manufacturer: syz [ 870.869298][T11510] usb 2-1: SerialNumber: syz [ 870.992298][T11523] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 871.311341][T13177] bridge1: entered promiscuous mode [ 871.311358][T13177] bridge1: entered allmulticast mode [ 871.443845][T13173] netlink: 'syz.1.2130': attribute type 12 has an invalid length. ** 676 printk messages dropped ** ** 178 printk messages dropped ** ** 173 printk messages dropped ** ** 203 printk messages dropped ** ** 157 printk messages dropped ** ** 149 printk messages dropped ** ** 155 printk messages dropped ** ** 158 printk messages dropped ** ** 217 printk messages dropped ** ** 155 printk messages dropped ** ** 152 printk messages dropped ** ** 158 printk messages dropped ** ** 168 printk messages dropped ** ** 162 printk messages dropped ** ** 172 printk messages dropped ** ** 217 printk messages dropped ** ** 159 printk messages dropped ** ** 151 printk messages dropped ** ** 162 printk messages dropped ** ** 149 printk messages dropped ** ** 160 printk messages dropped ** ** 203 printk messages dropped ** ** 157 printk messages dropped ** ** 162 printk messages dropped ** ** 7210 printk messages dropped ** [ 871.787306][T11510] usb 2-1: USB disconnect, device number 44 [ 872.065253][T11523] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 872.065449][T11523] ath9k_htc: Failed to initialize the device [ 872.065960][T11510] usb 2-1: ath9k_htc: USB layer deinitialized [ 872.128212][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 872.553947][ C0] net_ratelimit: 165 callbacks suppressed [ 873.126816][T13190] futex_wake_op: syz.1.2150 tries to shift op by 144; fix this program [ 873.621336][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 874.206753][T13198] syz.0.2152 (13198) used greatest stack depth: 18224 bytes left [ 874.315340][ T1019] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:ec277c43-9e1f-4dc8-a4f1-3c1418e3fe2c. [ 874.353142][T13202] nvme nvme2: creating 2 I/O queues. [ 874.379097][T13202] nvme nvme2: new ctrl: "testsubsys" [ 877.324732][T13247] futex_wake_op: syz.1.2167 tries to shift op by 144; fix this program [ 877.609942][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 878.285030][T13265] net_ratelimit: 105 callbacks suppressed [ 878.285043][T13265] ip_tables: iptables: counters copy to user failed while replacing table [ 880.226311][T13290] futex_wake_op: syz.2.2181 tries to shift op by 144; fix this program [ 880.532036][T13300] SQUASHFS error: Failed to read block 0x0: -5 [ 883.238713][T13317] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 883.238738][T13317] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 883.239982][ T31] audit: type=1400 audit(1790557098.931:657): avc: denied { firmware_load } for pid=13313 comm="syz.4.2188" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 883.283317][T13317] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 883.992409][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 884.104045][T13334] net_ratelimit: 180 callbacks suppressed [ 884.545986][ T29] INFO: rcu_tasks detected stalls on tasks: [ 884.545995][ T29] ffff88801f6fcb00: .. nvcsw: 684/684 holdout: 1 idle_cpu: -1/1 [ 884.546014][ T29] task:kworker/1:0 state:R running task stack:21768 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 884.546069][ T29] Workqueue: usb_hub_wq hub_event [ 884.546099][ T29] Call Trace: [ 884.546105][ T29] [ 884.546116][ T29] __schedule+0x1259/0x6920 [ 884.546149][ T29] ? __page_table_check_zero+0x27f/0x410 [ 884.546188][ T29] ? __pfx___schedule+0x10/0x10 [ 884.546215][ T29] ? mark_held_locks+0x40/0x70 [ 884.546238][ T29] preempt_schedule_irq+0x4e/0x90 [ 884.546266][ T29] irqentry_exit+0x205/0xa10 [ 884.546288][ T29] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 884.546308][ T29] RIP: 0010:unwind_next_frame+0xbd/0x2090 [ 884.546333][ T29] Code: c1 ea 03 80 3c 02 00 0f 85 0c 19 00 00 49 8b 45 38 48 89 44 24 10 e8 52 41 36 00 31 d2 45 31 c9 45 31 c0 48 8d 05 00 00 00 00 <50> b9 02 00 00 00 31 f6 48 c7 c7 a0 c5 de 8e e8 cf c1 2d 00 e8 fa [ 884.546350][ T29] RSP: 0018:ffffc900001f6828 EFLAGS: 00000246 [ 884.546365][ T29] RAX: ffffffff81b9b24d RBX: 0000000000000001 RCX: ffffc900001f67ec [ 884.546377][ T29] RDX: 0000000000000000 RSI: ffffffff87914d16 RDI: ffff88801f6fcfc4 [ 884.546389][ T29] RBP: ffffc900001f68e0 R08: 0000000000000000 R09: 0000000000000000 [ 884.546401][ T29] R10: 0000000000000200 R11: 0000000000063f14 R12: ffffffff81f61160 [ 884.546413][ T29] R13: ffffc900001f6898 R14: 0000000000000000 R15: ffff88801f6fcb00 [ 884.546427][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 884.546451][ T29] ? unwind_next_frame+0xbd/0x2090 [ 884.546475][ T29] ? usb_probe_interface+0x386/0x9b0 [ 884.546498][ T29] ? unwind_next_frame+0xae/0x2090 [ 884.546523][ T29] ? usb_probe_interface+0x386/0x9b0 [ 884.546545][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 884.546566][ T29] arch_stack_walk+0x94/0xf0 [ 884.546596][ T29] ? usb_probe_interface+0x386/0x9b0 [ 884.546618][ T29] stack_trace_save+0x8e/0xc0 [ 884.546636][ T29] ? __pfx_stack_trace_save+0x10/0x10 [ 884.546655][ T29] ? unwind_next_frame+0x3c8/0x2090 [ 884.546677][ T29] ? ret_from_fork_asm+0x1a/0x30 [ 884.546698][ T29] ? stack_depot_save_flags+0x27/0x9f0 [ 884.546723][ T29] kasan_save_stack+0x30/0x50 [ 884.546745][ T29] ? kasan_save_stack+0x30/0x50 [ 884.546765][ T29] ? kasan_save_track+0x14/0x30 [ 884.546784][ T29] ? __kasan_kmalloc+0xaa/0xb0 [ 884.546804][ T29] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 884.546820][ T29] ? dummy_urb_enqueue+0xa3/0x880 [ 884.546840][ T29] ? usb_hcd_submit_urb+0x268/0x2150 [ 884.546858][ T29] ? usb_submit_urb+0x827/0x19b0 [ 884.546878][ T29] ? ath6kl_usb_post_recv_transfers.constprop.0+0x204/0x3d0 [ 884.546899][ T29] ? ath6kl_usb_power_on+0x8e/0x160 [ 884.546934][ T29] ? ath6kl_core_init+0x173/0x11b0 [ 884.546957][ T29] ? ath6kl_usb_probe+0xaea/0x13a0 [ 884.546974][ T29] ? usb_probe_interface+0x386/0x9b0 [ 884.547024][ T29] kasan_save_track+0x14/0x30 [ 884.547045][ T29] __kasan_kmalloc+0xaa/0xb0 [ 884.547068][ T29] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 884.547086][ T29] ? dummy_urb_enqueue+0xa3/0x880 [ 884.547112][ T29] dummy_urb_enqueue+0xa3/0x880 [ 884.547131][ T29] ? usb_hcd_map_urb_for_dma+0x28a/0x1190 [ 884.547154][ T29] usb_hcd_submit_urb+0x268/0x2150 [ 884.547182][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.547211][ T29] usb_submit_urb+0x827/0x19b0 [ 884.547237][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.547267][ T29] ath6kl_usb_post_recv_transfers.constprop.0+0x204/0x3d0 [ 884.547294][ T29] ath6kl_usb_power_on+0x8e/0x160 [ 884.547313][ T29] ath6kl_core_init+0x173/0x11b0 [ 884.547339][ T29] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 884.547358][ T29] ? lockdep_init_map_type+0x5c/0x250 [ 884.547378][ T29] ? __pfx_ath6kl_core_init+0x10/0x10 [ 884.547406][ T29] ? ath6kl_core_create+0x7fd/0xa60 [ 884.547434][ T29] ath6kl_usb_probe+0xaea/0x13a0 [ 884.547461][ T29] usb_probe_interface+0x386/0x9b0 [ 884.547484][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 884.547501][ T29] ? kernfs_put+0x3f/0x60 [ 884.547521][ T29] ? sysfs_create_link+0x68/0xc0 [ 884.547547][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 884.547566][ T29] really_probe+0x241/0xa60 [ 884.547594][ T29] __driver_probe_device+0x210/0x460 [ 884.547618][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.547648][ T29] driver_probe_device+0x4a/0x140 [ 884.547673][ T29] __device_attach_driver+0x1df/0x320 [ 884.547699][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 884.547722][ T29] bus_for_each_drv+0x159/0x1e0 [ 884.547743][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 884.547764][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 884.547783][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 884.547814][ T29] __device_attach+0x1e4/0x4d0 [ 884.547839][ T29] ? __pfx___device_attach+0x10/0x10 [ 884.547865][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 884.583439][ T29] device_initial_probe+0xaf/0xd0 [ 884.583476][ T29] bus_probe_device+0x64/0x160 [ 884.583502][ T29] device_add+0x121d/0x1970 [ 884.583533][ T29] ? __pfx_device_add+0x10/0x10 [ 884.583560][ T29] ? mark_held_locks+0x40/0x70 [ 884.583582][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.583618][ T29] usb_set_configuration+0xd97/0x1c60 [ 884.583664][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 884.583687][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 884.583712][ T29] usb_probe_device+0xef/0x400 [ 884.583729][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 884.583748][ T29] really_probe+0x241/0xa60 [ 884.583775][ T29] __driver_probe_device+0x210/0x460 [ 884.583979][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.584012][ T29] driver_probe_device+0x4a/0x140 [ 884.584037][ T29] __device_attach_driver+0x1df/0x320 [ 884.584064][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 884.584087][ T29] bus_for_each_drv+0x159/0x1e0 [ 884.584108][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 884.584130][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 884.584151][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 884.584189][ T29] __device_attach+0x1e4/0x4d0 [ 884.584215][ T29] ? __pfx___device_attach+0x10/0x10 [ 884.584241][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 884.584272][ T29] device_initial_probe+0xaf/0xd0 [ 884.584299][ T29] bus_probe_device+0x64/0x160 [ 884.584324][ T29] device_add+0x121d/0x1970 [ 884.584353][ T29] ? __pfx_device_add+0x10/0x10 [ 884.584378][ T29] ? usb_detect_static_quirks+0x335/0x3e0 [ 884.584413][ T29] usb_new_device.part.0+0xcc2/0x1686 [ 884.584446][ T29] ? do_raw_spin_lock+0x128/0x260 [ 884.584471][ T29] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 884.584500][ T29] ? mark_held_locks+0x40/0x70 [ 884.584525][ T29] hub_event.cold+0x1e3/0xe90 [ 884.584576][ T29] ? __pfx_hub_event+0x10/0x10 [ 884.584603][ T29] ? __bfs+0x230/0x2a0 [ 884.584623][ T29] ? lock_acquire+0x1d1/0x380 [ 884.584643][ T29] ? process_one_work+0xa2c/0x1b10 [ 884.584674][ T29] ? process_one_work+0x906/0x1b10 [ 884.584702][ T29] ? process_one_work+0x906/0x1b10 [ 884.584735][ T29] process_one_work+0xac7/0x1b10 [ 884.584776][ T29] ? __pfx_process_one_work+0x10/0x10 [ 884.584806][ T29] ? lock_acquire+0x1d1/0x380 [ 884.584835][ T29] ? __pfx_hub_event+0x10/0x10 [ 884.584866][ T29] worker_thread+0x5ef/0xe50 [ 884.584894][ T29] ? kthread+0x13a/0x450 [ 884.584919][ T29] ? __pfx_worker_thread+0x10/0x10 [ 884.584945][ T29] kthread+0x373/0x450 [ 884.584970][ T29] ? __pfx_kthread+0x10/0x10 [ 884.584998][ T29] ret_from_fork+0x730/0xd60 [ 884.585020][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 884.585043][ T29] ? __switch_to+0x800/0x10f0 [ 884.585070][ T29] ? __pfx_kthread+0x10/0x10 [ 884.676485][ T29] ret_from_fork_asm+0x1a/0x30 [ 884.676530][ T29] [ 884.685165][T11520] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 884.845792][T11520] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 884.857205][T11520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.857222][T11520] usb 3-1: Product: syz [ 884.857235][T11520] usb 3-1: Manufacturer: syz [ 884.857248][T11520] usb 3-1: SerialNumber: syz [ 885.067595][T13336] bridge0: port 3(syz_tun) entered disabled state [ 885.111324][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.111561][T13336] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.152514][ T5785] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 885.276618][ T31] audit: type=1400 audit(1790557100.961:658): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 885.276660][ T31] audit: type=1400 audit(1790557100.961:659): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.281400][ T31] audit: type=1400 audit(1790557100.961:660): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.281442][ T31] audit: type=1400 audit(1790557100.971:661): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.281476][ T31] audit: type=1400 audit(1790557100.971:662): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 885.281510][ T31] audit: type=1400 audit(1790557100.971:663): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 885.286382][ T31] audit: type=1400 audit(1790557100.971:664): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 885.745981][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.798385][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.256235][ T5785] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 886.256448][ T5785] ath9k_htc: Failed to initialize the device [ 886.660644][ T6075] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.665077][ T6075] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.666432][ T6075] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.666466][ T6075] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 ** 47915 printk messages dropped ** ** 55 printk messages dropped ** ** 147 printk messages dropped ** ** 219 printk messages dropped ** ** 199 printk messages dropped ** ** 151 printk messages dropped ** ** 158 printk messages dropped ** ** 158 printk messages dropped ** ** 157 printk messages dropped ** ** 156 printk messages dropped ** ** 200 printk messages dropped ** ** 134 printk messages dropped ** ** 151 printk messages dropped ** ** 144 printk messages dropped ** ** 151 printk messages dropped ** ** 150 printk messages dropped ** ** 145 printk messages dropped ** ** 143 printk messages dropped ** ** 249 printk messages dropped ** ** 148 printk messages dropped ** ** 147 printk messages dropped ** ** 151 printk messages dropped ** ** 145 printk messages dropped ** ** 148 printk messages dropped ** ** 154 printk messages dropped ** ** 148 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 175 printk messages dropped ** ** 149 printk messages dropped ** ** 181 printk messages dropped ** ** 147 printk messages dropped ** ** 148 printk messages dropped ** ** 151 printk messages dropped ** ** 149 printk messages dropped ** ** 185 printk messages dropped ** ** 151 printk messages dropped ** ** 183 printk messages dropped ** ** 209 printk messages dropped ** ** 150 printk messages dropped ** ** 146 printk messages dropped ** ** 4843 printk messages dropped ** ** 150 printk messages dropped ** ** 148 printk messages dropped ** ** 181 printk messages dropped ** ** 144 printk messages dropped ** ** 144 printk messages dropped ** ** 153 printk messages dropped ** ** 143 printk messages dropped ** ** 144 printk messages dropped ** ** 148 printk messages dropped ** ** 211 printk messages dropped ** ** 159 printk messages dropped ** ** 146 printk messages dropped ** ** 148 printk messages dropped ** ** 155 printk messages dropped ** ** 148 printk messages dropped ** ** 144 printk messages dropped ** ** 381 printk messages dropped ** ** 290 printk messages dropped ** ** 275 printk messages dropped ** ** 152 printk messages dropped ** ** 224 printk messages dropped ** ** 148 printk messages dropped ** ** 153 printk messages dropped ** ** 154 printk messages dropped ** ** 146 printk messages dropped ** ** 151 printk messages dropped ** ** 147 printk messages dropped ** ** 152 printk messages dropped ** ** 198 printk messages dropped ** ** 196 printk messages dropped ** ** 154 printk messages dropped ** ** 102 printk messages dropped ** ** 170 printk messages dropped ** ** 20 printk messages dropped ** ** 1 printk messages dropped ** [ 887.834895][ T5785] usb 3-1: ath9k_htc: USB layer deinitialized [ 887.875209][ T5726] usb 3-1: USB disconnect, device number 47 [ 889.513799][ C0] net_ratelimit: 161 callbacks suppressed