last executing test programs: 37.847533551s ago: executing program 1 (id=1573): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 37.790673082s ago: executing program 1 (id=1576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="05000000060000003e00000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)="27100745834a2967e956063eb8afcbaafba52b36119b28da1945a97e9525ba4a3578dd11e73f2ab76e82077f6040969e5ee1d4a2098bebbebe2ceb8433fce841b5eec8c3a3d11b3838783db0db64215d7aba9d8ab6cf1b4f9c700e7d2094a7c3a4ef0ff4174c500115751b6ed2e1e7b91827dd754b", &(0x7f0000000740), 0x1003, r0}, 0x38) close(0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) 37.678369469s ago: executing program 1 (id=1579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.56312824s ago: executing program 1 (id=1581): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc, 0x8}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) umount2(&(0x7f0000001b00)='./file0\x00', 0x1) 37.21331833s ago: executing program 1 (id=1587): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) sendmmsg$inet_sctp(r0, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x4040804) sendto$inet(r0, &(0x7f00000002c0)='\x00', 0x1, 0x2000c005, 0x0, 0x0) shutdown(r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 36.731459828s ago: executing program 1 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x11) getdents64(r1, 0xfffffffffffffffe, 0x29) socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 36.134955389s ago: executing program 32 (id=1590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x11) getdents64(r1, 0xfffffffffffffffe, 0x29) socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.465068998s ago: executing program 4 (id=1717): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 9.343531065s ago: executing program 4 (id=1718): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004800, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x10000058, 0x8001, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xffff, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)=ANY=[], 0x24, 0x2) truncate(&(0x7f0000000100)='./file0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b04000000fddbdf25030000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup={0x0, r4}, 0x10}}, 0x20) syz_usb_connect(0x0, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002598f110210494008e280102030109024000010000000009046d00000202ff400524060000052400b77f0d240f0104000000020008000905240600000524"], 0x0) 7.643780519s ago: executing program 3 (id=1723): unshare(0x62040200) unshare(0x20800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r8 = signalfd4(r1, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000002c0)={@empty, @loopback, 0x0, "28def14ada7fe03584396d15257c45a97c7a183aff7b2065d6fa48ad80479a97", 0x800, 0xa1, 0x4, 0x44}, 0x3c) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 7.641622957s ago: executing program 0 (id=1724): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 7.315943486s ago: executing program 0 (id=1727): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0xc}, 0x1b) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) 6.202698938s ago: executing program 5 (id=1729): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3, 0xd8bef8474886e58c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 5.847791121s ago: executing program 4 (id=1730): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) 5.651697318s ago: executing program 4 (id=1732): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x7c, 0x80, 0x9, 0x40, 0x7f, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) 5.399984806s ago: executing program 0 (id=1734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.21371814s ago: executing program 3 (id=1736): r0 = socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0b26814fbf2a0af3c2afada3bc719f06208520437142a458fd2e578e0634d4254d37f59ab707dd6b5462d8bbcbf65cccfa4c7f2e09dadd369d1b66d2c244ececc58df0eaae9feec71c26b7ec2ec5a7", @ANYBLOB="010829bd7000fbdbdf25140000001c0007"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18800018}, 0xc, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect(0x4, 0x9a2, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={0x0}) r5 = syz_open_dev$sg(0x0, 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000005c0)=ANY=[]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000011c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r7, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x218, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x8, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0xff84}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) 4.4336207s ago: executing program 0 (id=1739): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4.045854436s ago: executing program 0 (id=1741): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x4010, 0xffffffffffffffff, 0xb299b000) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = socket(0x2c, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x58, 0x0, 0x6}, 0xc) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000300), 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000040)={0x980915, 0x3, @value=0x140000000000}) r7 = socket(0x1e, 0x6, 0x8) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @private2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xd0]}}, 0x5c) r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2b, 0x3, 0x3, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x1, 0x7, 0x4, 0x8}}) r9 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0x81}}]}, 0x44}}, 0x0) 3.484581866s ago: executing program 4 (id=1745): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 2.964386968s ago: executing program 5 (id=1746): unshare(0x62040200) unshare(0x20800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r8 = signalfd4(r1, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000002c0)={@empty, @loopback, 0x0, "28def14ada7fe03584396d15257c45a97c7a183aff7b2065d6fa48ad80479a97", 0x800, 0xa1, 0x4, 0x44}, 0x3c) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 2.548936268s ago: executing program 4 (id=1747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r5}, 0x2}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$xdp(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="43cb1c7035", 0x5}, {&(0x7f00000002c0)="7694", 0x2}], 0x2, 0x0, 0x0, 0x20004000}, 0x5880) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x808208}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa2, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "717e414ba6a6"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0xfe, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) 2.472410242s ago: executing program 2 (id=1748): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x102) 2.235153457s ago: executing program 2 (id=1749): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f00004aa000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.099739445s ago: executing program 2 (id=1750): socket$packet(0x11, 0x2, 0x300) syz_clone(0x2a809000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) 1.861209941s ago: executing program 2 (id=1751): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.640007066s ago: executing program 5 (id=1752): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0xa, &(0x7f0000000340)}) 1.63271378s ago: executing program 2 (id=1753): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x8000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x31, 0x8000003a, 0xd, 0x16, 0x1, 0x18000, 0x1, 0x88000000, 0xe755a3d832dace16}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6(0x2d, 0x806, 0x0) socket(0x25, 0x80000, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x3, 0x9, @mcast1, 0xfffffffa}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) renameat2(r4, &(0x7f00000002c0)='./file0\x00', r4, &(0x7f00000003c0)='./bus\x00', 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001", @ANYRESHEX, @ANYBLOB="785454f63ace2532535fe418e26a717fb1f470cbce39e577ca8ca7fd3ef37ed255183ecba11f"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='reno', 0x4) 1.455015641s ago: executing program 5 (id=1754): r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) 1.311478634s ago: executing program 5 (id=1755): io_uring_setup(0x68f6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x80) 1.184519951s ago: executing program 3 (id=1756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 1.181049271s ago: executing program 5 (id=1757): syz_usb_connect(0x1, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120000ffffffee0904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.025394798s ago: executing program 0 (id=1758): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r2, 0x9, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x10, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x6, 0xffffffff, 0x1, 0x4, 0xfffffffe, 0x20}) r6 = eventfd(0xfffffffd) read$eventfd(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="580000000000001000000000000000006b0000000d0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 996.355547ms ago: executing program 3 (id=1759): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb}) 859.351244ms ago: executing program 3 (id=1760): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000480)={0x3, 0x1, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) 43.139123ms ago: executing program 2 (id=1761): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) close_range(r0, r0, 0x0) 0s ago: executing program 3 (id=1762): unshare(0x62040200) unshare(0x20800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r8 = signalfd4(r1, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000002c0)={@empty, @loopback, 0x0, "28def14ada7fe03584396d15257c45a97c7a183aff7b2065d6fa48ad80479a97", 0x800, 0xa1, 0x4, 0x44}, 0x3c) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, 0x0) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) kernel console output (not intermixed with test programs): k_file_ioctl_common+0x146/0x410 [ 443.593762][T10539] ? __fget_files+0x21f/0x3d0 [ 443.593784][T10539] security_file_ioctl+0xd3/0x230 [ 443.593806][T10539] __x64_sys_ioctl+0xb7/0x210 [ 443.593833][T10539] do_syscall_64+0x106/0xf80 [ 443.593853][T10539] ? clear_bhb_loop+0x40/0x90 [ 443.593877][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.593895][T10539] RIP: 0033:0x7f8e43f9c629 [ 443.593913][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.593930][T10539] RSP: 002b:00007f8e44d9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.593950][T10539] RAX: ffffffffffffffda RBX: 00007f8e44215fa0 RCX: 00007f8e43f9c629 [ 443.593962][T10539] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 443.593973][T10539] RBP: 00007f8e44d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 443.593984][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.593995][T10539] R13: 00007f8e44216038 R14: 00007f8e44215fa0 R15: 00007fff28c1b358 [ 443.594020][T10539] [ 443.634139][T10539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.796855][ T61] team0 (unregistering): Port device team_slave_1 removed [ 443.813267][ T61] team0 (unregistering): Port device team_slave_0 removed [ 443.946925][T10539] kvm: pic: level sensitive irq not supported [ 443.947394][T10539] kvm: pic: single mode not supported [ 443.985570][T10432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.003783][T10539] kvm: pic: single mode not supported [ 444.003858][T10539] kvm: pic: single mode not supported [ 444.010071][T10539] kvm: pic: level sensitive irq not supported [ 444.018735][T10528] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 444.023502][ T793] usb 4-1: USB disconnect, device number 38 [ 444.049814][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'. [ 444.084299][ T793] cypress_m8 4-1:33.214: device disconnected [ 444.128026][T10432] team0: Port device team_slave_0 added [ 444.161719][T10432] team0: Port device team_slave_1 added [ 444.299786][T10432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.335419][T10432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.365379][T10432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.481896][ T793] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 444.650762][ T793] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 444.692281][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.860071][T10432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.879278][ T793] usb 2-1: config 0 descriptor?? [ 444.895894][T10432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.934694][T10432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.936879][ T793] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 445.107001][T10432] hsr_slave_0: entered promiscuous mode [ 445.705707][T10432] hsr_slave_1: entered promiscuous mode [ 445.736748][T10432] debugfs: 'hsr0' already exists in 'hsr' [ 445.758156][T10432] Cannot create hsr debugfs directory [ 445.926190][ T793] gp8psk: usb in 128 operation failed. [ 445.943588][ T793] gp8psk: usb in 137 operation failed. [ 445.957801][T10545] SELinux: failed to load policy [ 445.973217][ T793] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 446.030448][ T793] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 446.082909][ T793] usb 2-1: USB disconnect, device number 38 [ 446.830666][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 446.830705][ T29] audit: type=1400 audit(2000000008.671:772): avc: denied { shutdown } for pid=10577 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 448.501738][T10598] lo speed is unknown, defaulting to 1000 [ 448.892530][T10599] lo speed is unknown, defaulting to 1000 [ 449.365123][T10597] SELinux: failed to load policy [ 449.532902][T10616] binder: 10608:10616 ioctl c0306201 0 returned -14 [ 450.006590][ T5913] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 450.086176][T10432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.169799][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 450.189252][T10432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.227163][T10632] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 450.236135][T10632] team0: Port device batadv1 added [ 450.252767][T10432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 450.261805][ T5913] usb 1-1: config 33 has an invalid interface number: 214 but max is 1 [ 450.282572][ T5913] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 450.340845][T10432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.354790][ T5913] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 450.390599][ T5913] usb 1-1: config 33 has no interface number 0 [ 450.440341][ T5913] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 450.469544][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.514374][ T5913] usb 1-1: Product: syz [ 450.537075][ T5913] usb 1-1: Manufacturer: syz [ 450.558145][ T5913] usb 1-1: SerialNumber: syz [ 451.504863][ T5913] cypress_m8 1-1:33.214: HID->COM RS232 Adapter converter detected [ 451.535506][ T5913] cyphidcom ttyUSB0: required endpoint is missing [ 451.658245][T10432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.694428][T10432] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.739074][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.746205][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.777353][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.784518][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.287479][ T5913] usb 1-1: USB disconnect, device number 36 [ 453.352036][ T5913] cypress_m8 1-1:33.214: device disconnected [ 454.073595][T10655] SELinux: failed to load policy [ 454.429744][T10432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.590332][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 455.599674][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 455.998431][ T793] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 456.374562][ T29] audit: type=1400 audit(2000000001.826:773): avc: denied { write } for pid=10742 comm="syz.2.1255" name="file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.410606][ T29] audit: type=1400 audit(2000000001.826:774): avc: denied { open } for pid=10742 comm="syz.2.1255" path="/248/file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.434148][ T29] audit: type=1400 audit(2000000001.826:775): avc: denied { ioctl } for pid=10742 comm="syz.2.1255" path="/248/file0" dev="tmpfs" ino=1318 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 456.499457][T10432] veth0_vlan: entered promiscuous mode [ 456.547362][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 456.551841][T10432] veth1_vlan: entered promiscuous mode [ 456.572394][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 456.604980][ T793] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 456.648525][ T793] usb 2-1: config 0 has no interface number 0 [ 456.654687][ T793] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 456.703086][ T793] usb 2-1: config 0 interface 88 has no altsetting 0 [ 456.711557][T10432] veth0_macvtap: entered promiscuous mode [ 456.742204][ T793] usb 2-1: string descriptor 0 read error: -22 [ 456.748977][ T793] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 456.788502][ T793] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 456.797943][T10432] veth1_macvtap: entered promiscuous mode [ 456.829023][ T793] usb 2-1: config 0 descriptor?? [ 456.880734][ T793] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input22 [ 456.889759][T10432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.033444][T10432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.099001][ T3017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.125661][ T3017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.574947][ T3017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.589264][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 457.657450][ T3017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.006601][T10775] SELinux: failed to load policy [ 458.026342][T10766] binder: 10757:10766 ioctl c0306201 0 returned -14 [ 458.050607][T10770] tipc: Enabling of bearer rejected, already enabled [ 458.174418][ T5878] usb 2-1: USB disconnect, device number 39 [ 458.234192][T10759] lo speed is unknown, defaulting to 1000 [ 458.408511][ T5913] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 458.569236][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.579704][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 458.604931][ T5913] usb 3-1: config 33 has an invalid interface number: 214 but max is 1 [ 458.619931][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.628305][ T5913] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 458.644600][ T5913] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 458.654131][ T5913] usb 3-1: config 33 has no interface number 0 [ 458.824066][ T5913] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 458.848474][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.875292][ T5913] usb 3-1: Product: syz [ 458.972501][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.981772][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.277365][ T5913] usb 3-1: Manufacturer: syz [ 459.284033][ T29] audit: type=1400 audit(2000000000.230:776): avc: denied { mounton } for pid=10432 comm="syz-executor" path="/root/syzkaller.Wj47op/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 459.313235][ T5913] usb 3-1: SerialNumber: syz [ 459.331688][ T5913] cypress_m8 3-1:33.214: HID->COM RS232 Adapter converter detected [ 459.370729][ T5913] cyphidcom ttyUSB0: required endpoint is missing [ 459.379478][ T29] audit: type=1400 audit(2000000000.272:777): avc: denied { mounton } for pid=10432 comm="syz-executor" path="/root/syzkaller.Wj47op/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 459.542299][ T29] audit: type=1400 audit(2000000000.272:778): avc: denied { mounton } for pid=10432 comm="syz-executor" path="/root/syzkaller.Wj47op/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 459.834163][ T5913] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 459.848642][ T793] usb 3-1: USB disconnect, device number 39 [ 459.856774][ T29] audit: type=1400 audit(2000000000.766:779): avc: denied { mounton } for pid=10432 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 459.881605][ T793] cypress_m8 3-1:33.214: device disconnected [ 459.895630][ T29] audit: type=1400 audit(2000000000.766:780): avc: denied { mount } for pid=10432 comm="syz-executor" name="/" dev="gadgetfs" ino=7721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 459.919405][ T29] audit: type=1400 audit(2000000000.766:781): avc: denied { mount } for pid=10432 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 460.008832][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 460.026902][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.061127][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 460.079697][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.129393][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 460.169131][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 460.173842][T10802] FAULT_INJECTION: forcing a failure. [ 460.173842][T10802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.195996][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.4.1204 Not tainted syzkaller #0 PREEMPT(full) [ 460.196019][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.196029][T10802] Call Trace: [ 460.196038][T10802] [ 460.196046][T10802] dump_stack_lvl+0x100/0x190 [ 460.196082][T10802] should_fail_ex.cold+0x5/0xa [ 460.196104][T10802] _copy_from_user+0x2e/0xd0 [ 460.196132][T10802] move_addr_to_kernel+0x65/0x170 [ 460.196161][T10802] __sys_bind+0x11d/0x260 [ 460.196189][T10802] ? __pfx___sys_bind+0x10/0x10 [ 460.196213][T10802] ? __fget_files+0x21f/0x3d0 [ 460.196240][T10802] ? __pfx_ksys_write+0x10/0x10 [ 460.196271][T10802] __x64_sys_bind+0x72/0xb0 [ 460.196294][T10802] ? lockdep_hardirqs_on+0x78/0x100 [ 460.196317][T10802] do_syscall_64+0x106/0xf80 [ 460.196337][T10802] ? clear_bhb_loop+0x40/0x90 [ 460.196361][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.196380][T10802] RIP: 0033:0x7f0bd259c629 [ 460.196397][T10802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.196415][T10802] RSP: 002b:00007f0bd33bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 460.196435][T10802] RAX: ffffffffffffffda RBX: 00007f0bd2816090 RCX: 00007f0bd259c629 [ 460.196447][T10802] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000007 [ 460.196458][T10802] RBP: 00007f0bd33bf090 R08: 0000000000000000 R09: 0000000000000000 [ 460.196468][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.196479][T10802] R13: 00007f0bd2816128 R14: 00007f0bd2816090 R15: 00007fff44c13a98 [ 460.196503][T10802] [ 460.389887][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 460.401972][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 460.413676][ T5913] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 460.976160][ T5913] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 461.018459][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.047955][ T5913] usb 2-1: Product: syz [ 461.059200][ T5913] usb 2-1: Manufacturer: syz [ 461.063873][ T5913] usb 2-1: SerialNumber: syz [ 461.100984][ T5913] usb 2-1: config 0 descriptor?? [ 461.314635][T10789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 461.333141][T10789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 461.363527][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.163220][T10818] lo speed is unknown, defaulting to 1000 [ 462.290852][ T5913] usb 2-1: USB disconnect, device number 40 [ 462.526462][ T29] audit: type=1400 audit(2000000001.070:782): avc: denied { write } for pid=10815 comm="syz.2.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 462.587752][T10817] lo speed is unknown, defaulting to 1000 [ 462.778220][T10827] [U] [ 462.781364][T10827] [U] [ 462.784120][T10827] [U] [ 462.786782][T10827] [U] [ 462.888368][T10827] [U] [ 462.891102][T10827] [U] [ 462.893782][T10827] [U] [ 462.896448][T10827] [U] [ 463.161947][T10827] [U] [ 463.164682][T10827] [U] [ 463.167396][T10827] [U] [ 463.344501][T10829] lo speed is unknown, defaulting to 1000 [ 463.426080][T10836] netlink: 436 bytes leftover after parsing attributes in process `syz.4.1274'. [ 463.455513][ T5912] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 463.523922][T10836] netlink: 436 bytes leftover after parsing attributes in process `syz.4.1274'. [ 463.666229][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 463.693033][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 463.737466][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.836096][ T5912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.846951][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 463.862058][ T5912] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 463.875962][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.209879][ T5912] usb 4-1: config 0 descriptor?? [ 464.872199][ T5871] usb 4-1: USB disconnect, device number 39 [ 464.892029][T10826] [U] [ 465.595267][T10853] netlink: 'syz.0.1278': attribute type 8 has an invalid length. [ 465.703133][T10841] SELinux: failed to load policy [ 465.719803][T10848] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 465.735221][T10848] SELinux: failed to load policy [ 465.944651][T10858] binder: 10854:10858 ioctl c0306201 0 returned -14 [ 466.896106][ T5871] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 467.495084][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 467.526401][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'. [ 467.661440][T10886] netem: invalid attributes len -24 [ 467.697191][ T5871] usb 4-1: config 33 has an invalid interface number: 214 but max is 1 [ 467.715026][T10886] netem: change failed [ 467.715807][ T5871] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 467.739449][ T5871] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 467.763581][ T5871] usb 4-1: config 33 has no interface number 0 [ 467.781048][ T5871] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 467.801634][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.809977][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1285'. [ 467.819027][T10879] netem: invalid attributes len -24 [ 467.824329][T10879] netem: change failed [ 467.839429][ T5871] usb 4-1: Product: syz [ 467.886443][ T5871] usb 4-1: Manufacturer: syz [ 467.894513][ T5871] usb 4-1: SerialNumber: syz [ 467.965842][ T5871] cypress_m8 4-1:33.214: HID->COM RS232 Adapter converter detected [ 468.004992][ T5871] cyphidcom ttyUSB0: required endpoint is missing [ 468.594334][T10900] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 468.625941][T10900] SELinux: failed to load policy [ 469.767259][ T5912] usb 4-1: USB disconnect, device number 40 [ 469.819313][ T5912] cypress_m8 4-1:33.214: device disconnected [ 470.143738][ T29] audit: type=1400 audit(2000000006.477:783): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.37 dest=52938 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 470.332051][T10915] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 470.758082][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1296'. [ 470.767866][T10922] netem: invalid attributes len -24 [ 470.773183][T10922] netem: change failed [ 472.535405][ T5912] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 473.215240][T10940] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1300'. [ 473.325623][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 473.344747][ T5912] usb 3-1: device descriptor read/64, error -71 [ 473.518466][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.539340][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.565133][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.582911][ T5912] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 473.590593][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 473.610062][ T24] usb 1-1: SerialNumber: syz [ 473.715983][ T5912] usb 3-1: device descriptor read/64, error -71 [ 474.561335][ T24] usb 1-1: 0:2 : does not exist [ 474.571641][ T5912] usb usb3-port1: attempt power cycle [ 474.646682][ T24] usb 1-1: USB disconnect, device number 37 [ 474.704686][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.817794][T10951] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 474.926879][T10951] SELinux: failed to load policy [ 478.054763][T10950] SELinux: failed to load policy [ 478.068768][T10962] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 478.136581][T10962] SELinux: failed to load policy [ 479.398735][ T29] audit: type=1400 audit(2000000015.925:784): avc: denied { egress } for pid=0 comm="swapper/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 479.459097][ T29] audit: type=1400 audit(2000000015.925:785): avc: denied { sendto } for pid=0 comm="swapper/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 480.459551][ T5819] Bluetooth: hci3: link tx timeout [ 480.465219][ T5819] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.500985][ T5805] Bluetooth: hci3: link tx timeout [ 480.506221][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.514614][ T5805] Bluetooth: hci3: link tx timeout [ 480.519894][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.527697][ T5805] Bluetooth: hci3: link tx timeout [ 480.533417][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.547176][ T5805] Bluetooth: hci3: link tx timeout [ 480.552341][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.562763][ T5805] Bluetooth: hci3: link tx timeout [ 480.568017][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.575782][ T5805] Bluetooth: hci3: link tx timeout [ 480.580916][ T5805] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 481.872296][T11016] FAULT_INJECTION: forcing a failure. [ 481.872296][T11016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.905019][T11016] CPU: 0 UID: 0 PID: 11016 Comm: syz.4.1317 Not tainted syzkaller #0 PREEMPT(full) [ 481.905041][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.905049][T11016] Call Trace: [ 481.905054][T11016] [ 481.905060][T11016] dump_stack_lvl+0x100/0x190 [ 481.905087][T11016] should_fail_ex.cold+0x5/0xa [ 481.905103][T11016] copy_fpstate_to_sigframe+0x861/0xb20 [ 481.905125][T11016] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 481.905142][T11016] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 481.905161][T11016] ? rcu_is_watching+0x12/0xc0 [ 481.905177][T11016] ? irqentry_exit+0x180/0x670 [ 481.905190][T11016] ? x86_task_fpu+0x5f/0x90 [ 481.905206][T11016] get_sigframe+0x3fb/0x940 [ 481.905225][T11016] ? __pfx_get_sigframe+0x10/0x10 [ 481.905240][T11016] ? siginfo_layout+0x156/0x290 [ 481.905257][T11016] x64_setup_rt_frame+0x12f/0xce0 [ 481.905275][T11016] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 481.905290][T11016] ? __mutex_unlock_slowpath+0x15c/0x790 [ 481.905304][T11016] ? __fget_files+0x215/0x3d0 [ 481.905318][T11016] arch_do_signal_or_restart+0x59e/0x7a0 [ 481.905334][T11016] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 481.905356][T11016] ? ksys_write+0x1ac/0x250 [ 481.905385][T11016] exit_to_user_mode_loop+0x86/0x4a0 [ 481.905415][T11016] do_syscall_64+0x67c/0xf80 [ 481.905434][T11016] ? clear_bhb_loop+0x40/0x90 [ 481.905456][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.905474][T11016] RIP: 0033:0x7f0bd255cece [ 481.905491][T11016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 481.905508][T11016] RSP: 002b:00007f0bd33dffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.905527][T11016] RAX: 0000000000000001 RBX: 00007f0bd33e06c0 RCX: 00007f0bd255cece [ 481.905538][T11016] RDX: 0000000000000001 RSI: 00007f0bd33e0090 RDI: 0000000000000003 [ 481.905548][T11016] RBP: 00007f0bd33e0090 R08: 0000000000000000 R09: 0000000000000000 [ 481.905558][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.905568][T11016] R13: 00007f0bd2816038 R14: 00007f0bd2815fa0 R15: 00007fff44c13a98 [ 481.905591][T11016] [ 482.289165][T11022] fuse: Bad value for 'group_id' [ 482.294165][T11022] fuse: Bad value for 'group_id' [ 482.374591][ T5864] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 482.412860][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 482.461257][ T29] audit: type=1400 audit(2000000019.400:786): avc: denied { audit_write } for pid=11021 comm="syz.4.1318" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 482.614701][ T5864] usb 2-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 482.756009][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.870556][ T5864] usb 2-1: config 0 descriptor?? [ 483.462575][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 483.481950][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 483.699926][ T5864] usb 2-1: USB disconnect, device number 41 [ 483.982343][ T29] audit: type=1326 audit(2000000021.006:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11031 comm="syz.0.1322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d1b9c629 code=0x0 [ 484.027819][T11025] SELinux: failed to load policy [ 486.265635][T11064] netlink: 'syz.4.1329': attribute type 8 has an invalid length. [ 486.569400][T11052] SELinux: failed to load policy [ 486.600638][T11057] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 486.744174][T11057] SELinux: failed to load policy [ 487.393120][T11078] lo speed is unknown, defaulting to 1000 [ 488.007162][ T29] audit: type=1326 audit(2000000001.018:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.2.1336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20bf99c629 code=0x0 [ 488.052143][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 488.243048][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 488.269312][ T24] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 488.298165][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 488.334037][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 488.365105][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 488.397254][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 488.408083][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.421578][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.451294][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.710339][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 489.715945][ T24] usbtmc 2-1:16.0: can't read capabilities [ 490.049587][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.644268][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.693828][ T10] usb 2-1: USB disconnect, device number 42 [ 490.779953][T11106] netlink: 'syz.2.1340': attribute type 8 has an invalid length. [ 491.052038][ T29] audit: type=1400 audit(2000000004.209:789): avc: denied { mount } for pid=11099 comm="syz.0.1339" name="/" dev="autofs" ino=32303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 491.091448][T11112] lo: entered allmulticast mode [ 491.111546][ T29] audit: type=1400 audit(2000000004.272:790): avc: denied { read write } for pid=11111 comm="syz.2.1342" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 491.152702][ T29] audit: type=1400 audit(2000000004.272:791): avc: denied { open } for pid=11111 comm="syz.2.1342" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 491.282665][T11111] lo: left allmulticast mode [ 491.629846][ T10] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 491.767279][ T10] usb 5-1: device descriptor read/64, error -71 [ 491.816329][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 491.825413][T11121] netem: invalid attributes len -24 [ 491.830689][T11121] netem: change failed [ 492.910191][ T10] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 493.167814][ T29] audit: type=1326 audit(2000000006.424:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.0.1350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d1b9c629 code=0x0 [ 493.272421][ T10] usb 5-1: device descriptor read/64, error -71 [ 493.511615][ T10] usb usb5-port1: attempt power cycle [ 493.752335][T11146] netlink: 'syz.3.1352': attribute type 8 has an invalid length. [ 493.930200][T11150] FAULT_INJECTION: forcing a failure. [ 493.930200][T11150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.953059][T11150] CPU: 1 UID: 0 PID: 11150 Comm: syz.3.1354 Not tainted syzkaller #0 PREEMPT(full) [ 493.953090][T11150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.953102][T11150] Call Trace: [ 493.953109][T11150] [ 493.953117][T11150] dump_stack_lvl+0x100/0x190 [ 493.953155][T11150] should_fail_ex.cold+0x5/0xa [ 493.953178][T11150] _copy_from_user+0x2e/0xd0 [ 493.953206][T11150] move_addr_to_kernel+0x65/0x170 [ 493.953235][T11150] __sys_connect+0xb5/0x170 [ 493.953260][T11150] ? __pfx___sys_connect+0x10/0x10 [ 493.953284][T11150] ? __fget_files+0x21f/0x3d0 [ 493.953312][T11150] ? __pfx_ksys_write+0x10/0x10 [ 493.953344][T11150] __x64_sys_connect+0x72/0xb0 [ 493.953368][T11150] ? lockdep_hardirqs_on+0x78/0x100 [ 493.953391][T11150] do_syscall_64+0x106/0xf80 [ 493.953409][T11150] ? clear_bhb_loop+0x40/0x90 [ 493.953432][T11150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.953450][T11150] RIP: 0033:0x7fe8c739c629 [ 493.953467][T11150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.953485][T11150] RSP: 002b:00007fe8c8261028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 493.953505][T11150] RAX: ffffffffffffffda RBX: 00007fe8c7615fa0 RCX: 00007fe8c739c629 [ 493.953516][T11150] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 493.953528][T11150] RBP: 00007fe8c8261090 R08: 0000000000000000 R09: 0000000000000000 [ 493.953538][T11150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.953549][T11150] R13: 00007fe8c7616038 R14: 00007fe8c7615fa0 R15: 00007fffc058d2d8 [ 493.953572][T11150] [ 494.024446][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 494.320014][ T5931] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 495.207624][ T10] usb 5-1: device not accepting address 51, error -71 [ 495.634651][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 495.656569][ T5931] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 495.672661][ T5931] usb 2-1: config 0 has no interface number 0 [ 495.698530][ T5931] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 495.713207][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.760689][ T5931] usb 2-1: Product: syz [ 495.786127][ T5931] usb 2-1: Manufacturer: syz [ 495.795320][ T5931] usb 2-1: SerialNumber: syz [ 495.811035][ T5931] usb 2-1: config 0 descriptor?? [ 495.921243][ T5931] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 495.939654][ T5931] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 496.003919][ T29] audit: type=1400 audit(2000000009.406:793): avc: denied { ioctl } for pid=11156 comm="syz.2.1356" path="socket:[32447]" dev="sockfs" ino=32447 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 496.144447][T11165] SELinux: failed to load policy [ 496.570374][ T5878] usb 2-1: USB disconnect, device number 43 [ 497.599077][ T29] audit: type=1326 audit(2000000011.075:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.1.1364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e43f9c629 code=0x0 [ 497.936315][ T29] audit: type=1400 audit(2000000011.369:795): avc: denied { bind } for pid=11176 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 499.025819][ T5878] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 499.217893][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 499.227900][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 499.242453][T11209] binder: 11203:11209 ioctl c0306201 0 returned -14 [ 499.285034][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 499.673738][ T5878] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 499.692230][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.702434][ T5878] usb 1-1: Product: syz [ 499.706621][ T5878] usb 1-1: Manufacturer: syz [ 499.731664][ T5878] usb 1-1: SerialNumber: syz [ 499.753370][ T5878] usb 1-1: config 0 descriptor?? [ 499.767173][ T5878] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23 [ 499.922305][ T24] usb 1-1: USB disconnect, device number 38 [ 500.093035][ T5878] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 500.297906][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 500.305320][ T29] audit: type=1326 audit(2000000013.930:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11220 comm="syz.0.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d1b9c629 code=0x0 [ 501.339707][ T5878] usb 4-1: config 33 has an invalid interface number: 214 but max is 1 [ 501.348087][ T5878] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 501.362908][ T5878] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 501.396729][T11215] SELinux: failed to load policy [ 501.397695][ T5878] usb 4-1: config 33 has no interface number 0 [ 502.136395][T11238] FAULT_INJECTION: forcing a failure. [ 502.136395][T11238] name failslab, interval 1, probability 0, space 0, times 0 [ 502.197930][T11238] CPU: 0 UID: 0 PID: 11238 Comm: syz.4.1378 Not tainted syzkaller #0 PREEMPT(full) [ 502.197961][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.197973][T11238] Call Trace: [ 502.197980][T11238] [ 502.197989][T11238] dump_stack_lvl+0x100/0x190 [ 502.198037][T11238] should_fail_ex.cold+0x5/0xa [ 502.198061][T11238] ? tomoyo_realpath_from_path+0xb6/0x690 [ 502.198084][T11238] should_failslab+0xc2/0x120 [ 502.198113][T11238] __kmalloc_noprof+0xe0/0x850 [ 502.198140][T11238] tomoyo_realpath_from_path+0xb6/0x690 [ 502.198166][T11238] tomoyo_path_number_perm+0x23c/0x580 [ 502.198193][T11238] ? tomoyo_path_number_perm+0x22e/0x580 [ 502.198221][T11238] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.198270][T11238] ? find_held_lock+0x2b/0x80 [ 502.198291][T11238] ? __fget_files+0x215/0x3d0 [ 502.198307][T11238] ? hook_file_ioctl_common+0x146/0x410 [ 502.198336][T11238] ? __fget_files+0x21f/0x3d0 [ 502.198355][T11238] security_file_ioctl+0xd3/0x230 [ 502.198375][T11238] __x64_sys_ioctl+0xb7/0x210 [ 502.198402][T11238] do_syscall_64+0x106/0xf80 [ 502.198422][T11238] ? clear_bhb_loop+0x40/0x90 [ 502.198443][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.198460][T11238] RIP: 0033:0x7f0bd259c629 [ 502.198473][T11238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.198484][T11238] RSP: 002b:00007f0bd33bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.198497][T11238] RAX: ffffffffffffffda RBX: 00007f0bd2816090 RCX: 00007f0bd259c629 [ 502.198504][T11238] RDX: 00002000000000c0 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 502.198511][T11238] RBP: 00007f0bd33bf090 R08: 0000000000000000 R09: 0000000000000000 [ 502.198517][T11238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.198524][T11238] R13: 00007f0bd2816128 R14: 00007f0bd2816090 R15: 00007fff44c13a98 [ 502.198538][T11238] [ 502.198559][T11238] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.756048][ T29] audit: type=1326 audit(2000000016.492:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11245 comm="syz.0.1381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d1b9c629 code=0x0 [ 504.297615][T11255] lo speed is unknown, defaulting to 1000 [ 504.789007][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 504.826768][ T5878] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 504.913548][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.930714][ T5878] usb 4-1: can't set config #33, error -71 [ 504.941470][ T5878] usb 4-1: USB disconnect, device number 41 [ 505.210155][T11257] SELinux: failed to load policy [ 507.457825][T11277] netlink: 166436 bytes leftover after parsing attributes in process `syz.0.1386'. [ 507.467978][T11277] netlink: Conntrack attr has 4 unknown bytes [ 507.650109][T11287] netlink: 'syz.2.1391': attribute type 6 has an invalid length. [ 507.878176][ T29] audit: type=1400 audit(2000000003.947:798): avc: denied { map } for pid=11293 comm="syz.2.1393" path="socket:[32711]" dev="sockfs" ino=32711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 510.389483][ T5878] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 510.399415][ T5913] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 510.589934][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 510.612015][ T5878] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 511.047951][ T5878] usb 1-1: config 0 has no interface number 0 [ 511.058019][ T5878] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 511.065783][ T5913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.068402][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.086482][ T5878] usb 1-1: Product: syz [ 511.090719][ T5878] usb 1-1: Manufacturer: syz [ 511.097400][ T5913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.111553][ T5913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.120992][ T5878] usb 1-1: SerialNumber: syz [ 511.121460][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.131141][ T5878] usb 1-1: config 0 descriptor?? [ 511.180160][ T5878] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 511.200679][ T5878] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 511.368454][ T5913] usb 5-1: GET_CAPABILITIES returned 0 [ 511.380507][ T5913] usbtmc 5-1:16.0: can't read capabilities [ 511.879982][ T5878] usb 1-1: USB disconnect, device number 39 [ 512.166938][T11352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.194571][T11352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.510044][T11363] fuse: Unknown parameter 'f' [ 512.590202][ T29] audit: type=1400 audit(2000000008.786:799): avc: denied { listen } for pid=11356 comm="syz.3.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 514.008709][ T5931] usb 5-1: USB disconnect, device number 53 [ 514.180974][ T29] audit: type=1400 audit(2000000010.529:800): avc: denied { create } for pid=11372 comm="syz.0.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.192140][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 514.540716][T11366] binder: 11364:11366 ioctl c0306201 0 returned -14 [ 514.791297][ T5871] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 515.019494][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 515.052372][ T5871] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 515.098451][ T5871] usb 5-1: config 0 has no interface number 0 [ 515.135672][ T5871] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 515.171004][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.207808][ T5871] usb 5-1: Product: syz [ 515.397531][ T5931] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 515.430029][ T5871] usb 5-1: Manufacturer: syz [ 515.434706][ T5871] usb 5-1: SerialNumber: syz [ 515.480247][ T5871] usb 5-1: config 0 descriptor?? [ 515.526718][ T5871] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 516.155826][ T5871] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 516.171786][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 516.181161][ T5931] usb 3-1: config 33 has an invalid interface number: 214 but max is 1 [ 516.199155][ T5931] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 516.559567][ T5931] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 516.584922][ T5871] usb 5-1: USB disconnect, device number 54 [ 516.621853][ T5931] usb 3-1: config 33 has no interface number 0 [ 516.630719][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 516.652680][ T5931] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 516.677133][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.705773][ T5931] usb 3-1: can't set config #33, error -71 [ 516.719717][ T5931] usb 3-1: USB disconnect, device number 43 [ 516.840102][ T29] audit: type=1400 audit(2000000013.342:801): avc: denied { ioctl } for pid=11390 comm="syz.3.1407" path="socket:[34525]" dev="sockfs" ino=34525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 517.426227][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'. [ 517.435670][T11397] netem: invalid attributes len -24 [ 517.440952][T11397] netem: change failed [ 517.488650][T11404] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 517.527032][T11404] exFAT-fs (nullb0): invalid boot record signature [ 517.590965][T11404] exFAT-fs (nullb0): failed to read boot sector [ 517.651247][T11404] exFAT-fs (nullb0): failed to recognize exfat type [ 517.670463][T11410] vivid-000: kernel_thread() failed [ 517.851326][ T29] audit: type=1400 audit(2000000014.329:802): avc: denied { bind } for pid=11403 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.039383][ T5864] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 519.210272][ T5864] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.307354][ T5864] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.354834][ T5864] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.477086][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.668006][T11427] FAULT_INJECTION: forcing a failure. [ 519.668006][T11427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.734016][ T5864] usb 1-1: GET_CAPABILITIES returned 0 [ 519.749849][T11427] CPU: 1 UID: 0 PID: 11427 Comm: syz.1.1411 Not tainted syzkaller #0 PREEMPT(full) [ 519.749880][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.749891][T11427] Call Trace: [ 519.749899][T11427] [ 519.749907][T11427] dump_stack_lvl+0x100/0x190 [ 519.749945][T11427] should_fail_ex.cold+0x5/0xa [ 519.749973][T11427] _copy_from_user+0x2e/0xd0 [ 519.750000][T11427] copy_msghdr_from_user+0x9f/0x4f0 [ 519.750033][T11427] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 519.750066][T11427] ___sys_sendmsg+0x106/0x1e0 [ 519.750089][T11427] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.750139][T11427] __sys_sendmsg+0x170/0x220 [ 519.750158][T11427] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.750191][T11427] do_syscall_64+0x106/0xf80 [ 519.750213][T11427] ? clear_bhb_loop+0x40/0x90 [ 519.750238][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.750257][T11427] RIP: 0033:0x7f8e43f9c629 [ 519.750273][T11427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.750291][T11427] RSP: 002b:00007f8e44d9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.750311][T11427] RAX: ffffffffffffffda RBX: 00007f8e44215fa0 RCX: 00007f8e43f9c629 [ 519.750322][T11427] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 519.750332][T11427] RBP: 00007f8e44d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 519.750343][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.750353][T11427] R13: 00007f8e44216038 R14: 00007f8e44215fa0 R15: 00007fff28c1b358 [ 519.750376][T11427] [ 519.762784][ T5871] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 519.820318][ T5864] usbtmc 1-1:16.0: can't read capabilities [ 520.014909][T11429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.182553][ T5871] usb 5-1: device descriptor read/64, error -71 [ 520.920065][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.929939][ T5871] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 520.943890][ T5864] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 520.966648][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.106034][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 521.118473][ T5864] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid maxpacket 34222, setting to 1024 [ 521.142208][ T5864] usb 4-1: config 1 interface 0 has no altsetting 0 [ 521.159179][ T5864] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 521.183920][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.206820][ T5864] usb 4-1: Product: syz [ 521.217053][ T5864] usb 4-1: Manufacturer: syz [ 521.221959][ T5913] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 521.236031][ T5864] usb 4-1: SerialNumber: syz [ 521.268056][T11429] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 521.412799][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 521.425449][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 521.436533][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 521.452112][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 521.471599][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 521.593280][ T5913] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 521.643098][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 522.273824][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 522.292903][ T5913] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 522.302550][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.310909][ T5913] usb 3-1: Product: syz [ 522.319392][ T5913] usb 3-1: Manufacturer: syz [ 522.324300][ T5913] usb 3-1: SerialNumber: syz [ 522.330215][ T10] usb 1-1: USB disconnect, device number 40 [ 522.338660][ T5864] usbhid 4-1:1.0: can't add hid device: -71 [ 522.347116][ T5864] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 522.417332][ T5913] usb 3-1: config 0 descriptor?? [ 522.457400][ T5864] usb 4-1: USB disconnect, device number 42 [ 522.474275][T11439] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 522.509984][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.968985][T11439] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=11439 comm=>xev/ [ 523.396812][T11451] SELinux: failed to load policy [ 523.490049][ T5913] usb 3-1: USB disconnect, device number 44 [ 523.514673][ T9968] udevd[9968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.677798][ T5864] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 523.840139][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 523.888576][ T5864] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 523.897546][ T5864] usb 2-1: config 0 has no interface number 0 [ 523.913584][ T5913] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 523.953332][ T5864] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 523.962893][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.992203][ T5864] usb 2-1: Product: syz [ 523.996406][ T5864] usb 2-1: Manufacturer: syz [ 524.000973][ T5864] usb 2-1: SerialNumber: syz [ 524.206294][ T5864] usb 2-1: config 0 descriptor?? [ 524.218431][ T5864] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 524.239201][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 524.257945][ T5913] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 524.266278][ T5864] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 524.274557][ T5913] usb 1-1: config 0 has no interface number 0 [ 524.281001][ T5913] usb 1-1: config 0 interface 184 has no altsetting 0 [ 524.311054][ T5913] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 524.329710][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.351793][ T5913] usb 1-1: Product: syz [ 524.362739][ T5913] usb 1-1: Manufacturer: syz [ 524.369881][ T5913] usb 1-1: SerialNumber: syz [ 524.388182][ T5913] usb 1-1: config 0 descriptor?? [ 524.455115][ T5864] usb 2-1: USB disconnect, device number 44 [ 526.504878][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 526.525302][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.203293][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 527.240900][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 527.261625][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 527.349805][ T5913] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 527.379337][ T5913] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 527.420566][ T5913] usb 1-1: USB disconnect, device number 41 [ 527.428584][T11493] FAULT_INJECTION: forcing a failure. [ 527.428584][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.493715][T11493] CPU: 1 UID: 0 PID: 11493 Comm: syz.1.1437 Not tainted syzkaller #0 PREEMPT(full) [ 527.493747][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.493758][T11493] Call Trace: [ 527.493771][T11493] [ 527.493779][T11493] dump_stack_lvl+0x100/0x190 [ 527.493816][T11493] should_fail_ex.cold+0x5/0xa [ 527.493842][T11493] _copy_from_user+0x2e/0xd0 [ 527.493871][T11493] copy_msghdr_from_user+0x9f/0x4f0 [ 527.493899][T11493] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 527.493935][T11493] ___sys_sendmsg+0x106/0x1e0 [ 527.493960][T11493] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.494010][T11493] __sys_sendmsg+0x170/0x220 [ 527.494028][T11493] ? __pfx___sys_sendmsg+0x10/0x10 [ 527.494060][T11493] do_syscall_64+0x106/0xf80 [ 527.494080][T11493] ? clear_bhb_loop+0x40/0x90 [ 527.494103][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.494121][T11493] RIP: 0033:0x7f8e43f9c629 [ 527.494138][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.494155][T11493] RSP: 002b:00007f8e44d9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.494174][T11493] RAX: ffffffffffffffda RBX: 00007f8e44215fa0 RCX: 00007f8e43f9c629 [ 527.494185][T11493] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 527.494196][T11493] RBP: 00007f8e44d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 527.494207][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.494218][T11493] R13: 00007f8e44216038 R14: 00007f8e44215fa0 R15: 00007fff28c1b358 [ 527.494242][T11493] [ 527.545404][ T5871] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 527.996307][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11508 comm=syz.2.1442 [ 528.009200][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11508 comm=syz.2.1442 [ 528.025889][T11506] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 528.071135][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=11508 comm=syz.2.1442 [ 528.210158][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.258433][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.269968][T11509] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 528.281643][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11508 comm=syz.2.1442 [ 528.316345][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.345826][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.429213][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11508 comm=syz.2.1442 [ 528.651115][ T5871] usb 5-1: GET_CAPABILITIES returned 0 [ 528.656669][ T5871] usbtmc 5-1:16.0: can't read capabilities [ 528.790684][T11505] binder: 11500:11505 ioctl c0306201 0 returned -14 [ 529.012291][T11517] sp0: Synchronizing with TNC [ 529.269664][ T5931] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 529.280550][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.300010][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.488241][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 529.506283][ T5931] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 529.522889][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.620263][ T5931] usb 3-1: Product: syz [ 529.756291][ T5931] usb 3-1: Manufacturer: syz [ 529.765428][ T5931] usb 3-1: SerialNumber: syz [ 529.781503][ T5931] usb 3-1: config 0 descriptor?? [ 529.812304][ T5913] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 529.831670][ T5931] gspca_main: se401-2.14.0 probing 047d:5003 [ 529.968155][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 529.988517][ T5913] usb 2-1: config 33 has an invalid interface number: 214 but max is 1 [ 530.019217][ T5913] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 530.056875][ T5913] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 530.089380][ T5913] usb 2-1: config 33 has no interface number 0 [ 530.113373][ T5913] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 530.134679][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.155068][ T5913] usb 2-1: Product: syz [ 530.164675][ T5913] usb 2-1: Manufacturer: syz [ 530.180360][ T5913] usb 2-1: SerialNumber: syz [ 530.199533][ T29] audit: type=1400 audit(2000000027.368:803): avc: denied { shutdown } for pid=11515 comm="syz.2.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 530.201196][ T5931] gspca_se401: ExtraFeatures: 131 [ 530.230939][ T5913] cypress_m8 2-1:33.214: HID->COM RS232 Adapter converter detected [ 530.257031][ T5913] cyphidcom ttyUSB0: required endpoint is missing [ 530.280868][ T5931] gspca_se401: Too many frame sizes [ 530.348142][ T10] usb 5-1: USB disconnect, device number 57 [ 530.736416][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 530.783752][ T5913] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 530.898163][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 530.919480][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 530.926783][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 530.928419][ T10] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 530.933818][ T5913] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 530.950001][ T10] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 530.975709][ T5913] usb 1-1: config 0 has no interface number 0 [ 530.987308][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.002853][ T10] usb 5-1: config 1 has no interface number 1 [ 531.020539][ T10] usb 5-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 531.038201][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.050290][ T10] usb 5-1: config 1 interface 4 has no altsetting 0 [ 531.053712][ T5913] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 531.061171][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.085492][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.085511][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.085554][ T5913] usb 1-1: Product: syz [ 531.094334][ T10] usb 5-1: Product: syz [ 531.119204][ T10] usb 5-1: Manufacturer: syz [ 531.127292][ T10] usb 5-1: SerialNumber: syz [ 531.132033][ T5913] usb 1-1: Manufacturer: syz [ 531.143334][ T5913] usb 1-1: SerialNumber: syz [ 531.167367][ T5913] usb 1-1: config 0 descriptor?? [ 531.182940][ T5913] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 531.200415][ T5913] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 531.391186][T11528] kernel profiling enabled (shift: 0) [ 531.404937][ T5871] usb 1-1: USB disconnect, device number 42 [ 531.622756][ T5871] usb 2-1: USB disconnect, device number 45 [ 531.640799][ T5871] cypress_m8 2-1:33.214: device disconnected [ 531.685687][ T5931] usb 3-1: USB disconnect, device number 45 [ 532.033342][ T29] audit: type=1400 audit(2000000029.299:804): avc: denied { read } for pid=11533 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 532.104578][T11536] FAULT_INJECTION: forcing a failure. [ 532.104578][T11536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.173804][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.1.1447 Not tainted syzkaller #0 PREEMPT(full) [ 532.173832][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.173843][T11536] Call Trace: [ 532.173850][T11536] [ 532.173857][T11536] dump_stack_lvl+0x100/0x190 [ 532.173896][T11536] should_fail_ex.cold+0x5/0xa [ 532.173919][T11536] _copy_from_user+0x2e/0xd0 [ 532.173946][T11536] copy_msghdr_from_user+0x9f/0x4f0 [ 532.173971][T11536] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 532.174005][T11536] ? __pfx__kstrtoull+0x10/0x10 [ 532.174028][T11536] ___sys_sendmsg+0x106/0x1e0 [ 532.174052][T11536] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.174084][T11536] ? find_held_lock+0x2b/0x80 [ 532.174127][T11536] __sys_sendmmsg+0x205/0x430 [ 532.174149][T11536] ? __pfx___sys_sendmmsg+0x10/0x10 [ 532.174174][T11536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 532.174208][T11536] ? fput+0x79/0x100 [ 532.174229][T11536] ? ksys_write+0x1ac/0x250 [ 532.174255][T11536] ? __pfx_ksys_write+0x10/0x10 [ 532.174284][T11536] __x64_sys_sendmmsg+0x9c/0x100 [ 532.174301][T11536] ? lockdep_hardirqs_on+0x78/0x100 [ 532.174320][T11536] do_syscall_64+0x106/0xf80 [ 532.174339][T11536] ? clear_bhb_loop+0x40/0x90 [ 532.174362][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.174380][T11536] RIP: 0033:0x7f8e43f9c629 [ 532.174398][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.174416][T11536] RSP: 002b:00007f8e421f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 532.174435][T11536] RAX: ffffffffffffffda RBX: 00007f8e44216180 RCX: 00007f8e43f9c629 [ 532.174447][T11536] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000004 [ 532.174458][T11536] RBP: 00007f8e421f6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.174468][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.174478][T11536] R13: 00007f8e44216218 R14: 00007f8e44216180 R15: 00007fff28c1b358 [ 532.174498][T11536] [ 532.650613][ T29] audit: type=1400 audit(2000000029.940:805): avc: denied { append } for pid=11540 comm="syz.0.1449" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 532.825944][ T29] audit: type=1400 audit(2000000030.129:806): avc: denied { connect } for pid=11540 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 532.906956][ T29] audit: type=1400 audit(2000000030.213:807): avc: denied { write } for pid=11540 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 536.004308][ T29] audit: type=1400 audit(2000000033.467:808): avc: denied { append } for pid=11571 comm="syz.1.1457" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.011713][ T10] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 536.899303][ T24] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 537.011310][ T5871] usb 5-1: USB disconnect, device number 58 [ 537.085669][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.089852][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 537.117791][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.148726][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 537.169759][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.263149][ T10] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 537.274162][ T10] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 537.286745][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 537.297647][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.320890][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 537.345668][ T5819] Bluetooth: hci3: link tx timeout [ 537.351301][ T5819] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 537.365757][T11591] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 537.375892][T11591] SELinux: failed to load policy [ 537.413790][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 537.419816][ T24] usbtmc 1-1:16.0: can't read capabilities [ 537.577568][ T10] gspca_sn9c2028: read1 error -32 [ 537.583565][ T10] gspca_sn9c2028: read1 error -32 [ 537.883298][T11594] loop7: detected capacity change from 0 to 7 [ 537.913860][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.923514][ C0] buffer_io_error: 11 callbacks suppressed [ 537.923532][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.041045][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.050700][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.063057][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.072705][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.184967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.194681][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.234669][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.244334][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.255683][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.265305][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.281056][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.290723][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.298895][T11594] ldm_validate_partition_table(): Disk read failed. [ 538.311972][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.321623][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.336346][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.345997][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.357525][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 538.367155][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 538.383684][T11594] Dev loop7: unable to read RDB block 0 [ 538.393901][T11594] loop7: unable to read partition table [ 538.400738][T11594] loop7: partition table beyond EOD, truncated [ 538.407287][T11594] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 538.441226][T11596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.555176][T11596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.328382][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 540.015938][ T10] usb 1-1: USB disconnect, device number 43 [ 540.055901][ T5931] usb 2-1: USB disconnect, device number 46 [ 540.366649][ T5871] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 540.540039][ T5871] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 540.551746][ T5871] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 540.563509][ T5871] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 540.574658][ T5871] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 540.588030][ T5871] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 540.597296][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.605503][ T5931] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 541.029220][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 541.045278][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 541.054319][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 541.075100][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 541.122833][ T5871] ath6kl: Failed to submit usb control message: -71 [ 541.138711][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 541.171691][ T5871] ath6kl: unable to send the bmi data to the device: -71 [ 541.185189][ T5931] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 541.208406][ T5871] ath6kl: Unable to send get target info: -71 [ 541.230599][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 541.244720][ T5871] ath6kl: Failed to init ath6kl core: -71 [ 541.263111][ T5871] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 541.274088][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 541.323994][ T5871] usb 3-1: USB disconnect, device number 46 [ 541.331803][ T5931] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 541.350714][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.366589][ T5931] usb 1-1: Product: syz [ 541.400543][ T5931] usb 1-1: Manufacturer: syz [ 541.415685][ T5931] usb 1-1: SerialNumber: syz [ 541.710171][ T5931] usb 1-1: config 0 descriptor?? [ 541.732969][T11608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 541.782252][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.012312][T11632] binder: 11616:11632 ioctl c0306201 0 returned -14 [ 542.061141][ T5871] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 542.100687][ T9966] udevd[9966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.202292][T11622] SELinux: failed to load policy [ 542.228233][T11608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=11608 comm=>xev/ [ 542.245098][ T5931] usb 1-1: USB disconnect, device number 44 [ 542.386281][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 542.405331][ T5871] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 542.413586][ T5871] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.431034][ T5871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.533523][ T5871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.553430][ T5871] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.583234][ T5871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.634135][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 542.708454][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.813307][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 543.857431][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.891527][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.922377][ T5871] usb 3-1: usb_control_msg returned -32 [ 543.938823][ T5913] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 543.950418][ T5871] usbtmc 3-1:16.0: can't read capabilities [ 543.973655][ T10] usb 4-1: config 33 has an invalid interface number: 214 but max is 1 [ 543.987309][ T10] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 543.998288][ T10] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 544.007787][ T10] usb 4-1: config 33 has no interface number 0 [ 544.093128][ T5913] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.103128][ T5913] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.118874][ T5913] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.128642][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.204463][ T10] usb 4-1: string descriptor 0 read error: -71 [ 544.219675][ T10] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 544.235720][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.252283][ T10] usb 4-1: can't set config #33, error -71 [ 544.270058][ T10] usb 4-1: USB disconnect, device number 43 [ 544.355360][ T5913] usb 2-1: GET_CAPABILITIES returned 0 [ 544.361748][ T5913] usbtmc 2-1:16.0: can't read capabilities [ 544.566647][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 545.062223][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.085606][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.936919][T11667] xt_hashlimit: size too large, truncated to 1048576 [ 546.628793][T11677] binder: 11673:11677 ioctl c0306201 0 returned -14 [ 546.685799][ T29] audit: type=1400 audit(2000000044.658:809): avc: denied { map } for pid=11670 comm="syz.0.1478" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 546.764857][ T29] audit: type=1400 audit(2000000044.658:810): avc: denied { execute } for pid=11670 comm="syz.0.1478" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 547.049156][T11683] lo speed is unknown, defaulting to 1000 [ 547.063700][ T5912] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 547.234462][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 547.249836][ T5912] usb 4-1: config 33 has an invalid interface number: 214 but max is 1 [ 547.267518][ T5912] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 547.304526][ T5912] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 547.324746][ T5912] usb 4-1: config 33 has no interface number 0 [ 547.362186][ T5912] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 547.731517][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.758378][ T5912] usb 4-1: Product: syz [ 547.762598][ T5912] usb 4-1: Manufacturer: syz [ 547.767214][ T5912] usb 4-1: SerialNumber: syz [ 547.838130][ T5912] cypress_m8 4-1:33.214: HID->COM RS232 Adapter converter detected [ 547.877999][ T5912] cyphidcom ttyUSB0: required endpoint is missing [ 548.822337][ T29] audit: type=1400 audit(2000000046.926:811): avc: denied { map } for pid=11698 comm="syz.0.1488" path="socket:[36315]" dev="sockfs" ino=36315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 548.985371][ T29] audit: type=1400 audit(2000000046.926:812): avc: denied { accept } for pid=11698 comm="syz.0.1488" path="socket:[36315]" dev="sockfs" ino=36315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 549.559457][T11645] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 549.638379][ T5931] usb 3-1: USB disconnect, device number 47 [ 549.714802][ T5871] usb 2-1: USB disconnect, device number 47 [ 550.181362][ T5878] usb 4-1: USB disconnect, device number 44 [ 550.193333][ T5878] cypress_m8 4-1:33.214: device disconnected [ 551.997076][T11725] FAULT_INJECTION: forcing a failure. [ 551.997076][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 552.009862][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.0.1496 Not tainted syzkaller #0 PREEMPT(full) [ 552.009879][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.009887][T11725] Call Trace: [ 552.009892][T11725] [ 552.009897][T11725] dump_stack_lvl+0x100/0x190 [ 552.009925][T11725] should_fail_ex.cold+0x5/0xa [ 552.009943][T11725] ? tomoyo_realpath_from_path+0xb6/0x690 [ 552.009972][T11725] should_failslab+0xc2/0x120 [ 552.009993][T11725] __kmalloc_noprof+0xe0/0x850 [ 552.010013][T11725] tomoyo_realpath_from_path+0xb6/0x690 [ 552.010030][T11725] tomoyo_path_number_perm+0x23c/0x580 [ 552.010049][T11725] ? tomoyo_path_number_perm+0x22e/0x580 [ 552.010068][T11725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.010100][T11725] ? find_held_lock+0x2b/0x80 [ 552.010115][T11725] ? __fget_files+0x215/0x3d0 [ 552.010126][T11725] ? hook_file_ioctl_common+0x146/0x410 [ 552.010144][T11725] ? __fget_files+0x21f/0x3d0 [ 552.010157][T11725] security_file_ioctl+0xd3/0x230 [ 552.010171][T11725] __x64_sys_ioctl+0xb7/0x210 [ 552.010188][T11725] do_syscall_64+0x106/0xf80 [ 552.010202][T11725] ? clear_bhb_loop+0x40/0x90 [ 552.010216][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.010228][T11725] RIP: 0033:0x7f03d1b9c629 [ 552.010239][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.010250][T11725] RSP: 002b:00007f03d2aca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.010262][T11725] RAX: ffffffffffffffda RBX: 00007f03d1e15fa0 RCX: 00007f03d1b9c629 [ 552.010270][T11725] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000004 [ 552.010277][T11725] RBP: 00007f03d2aca090 R08: 0000000000000000 R09: 0000000000000000 [ 552.010283][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.010290][T11725] R13: 00007f03d1e16038 R14: 00007f03d1e15fa0 R15: 00007ffe441a7a38 [ 552.010304][T11725] [ 552.010311][T11725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 553.262246][T11748] netlink: 'syz.4.1500': attribute type 8 has an invalid length. [ 554.908419][T11761] binder: 11753:11761 ioctl c0306201 0 returned -14 [ 555.085107][T11733] SELinux: failed to load policy [ 555.219654][T11769] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 555.351640][T11769] SELinux: failed to load policy [ 555.415692][ T5912] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 556.227266][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 556.513653][ T5912] usb 5-1: config 33 has an invalid interface number: 214 but max is 1 [ 556.528735][ T5912] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 556.570174][ T5912] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 2 [ 556.579170][ T5912] usb 5-1: config 33 has no interface number 0 [ 556.693872][ T5912] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=76.71 [ 556.731653][ T5913] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 556.764309][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.783714][ T5912] usb 5-1: Product: syz [ 556.792067][ T5912] usb 5-1: Manufacturer: syz [ 556.811823][ T5912] usb 5-1: SerialNumber: syz [ 556.847946][ T5912] cypress_m8 5-1:33.214: HID->COM RS232 Adapter converter detected [ 556.885309][ T29] audit: type=1400 audit(2000000055.376:813): avc: denied { write } for pid=11783 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 556.905521][ T5912] cyphidcom ttyUSB0: required endpoint is missing [ 556.934153][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 556.968657][ T5913] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 557.132097][ T5913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.339004][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.356036][ T5878] usb 5-1: USB disconnect, device number 59 [ 557.368299][ T5878] cypress_m8 5-1:33.214: device disconnected [ 557.812920][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.820192][T11793] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1511'. [ 557.832820][T11793] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1511'. [ 557.891299][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.951394][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 558.028023][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.143976][ T29] audit: type=1400 audit(2000000056.689:814): avc: denied { mounton } for pid=11795 comm="syz.4.1512" path="/proc/177" dev="proc" ino=36518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 558.207954][ T29] audit: type=1400 audit(2000000056.710:815): avc: denied { mounton } for pid=11795 comm="syz.4.1512" path="/proc/177/cgroup" dev="proc" ino=36522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 558.385814][ T5913] usb 1-1: GET_CAPABILITIES returned 0 [ 558.393809][ T5913] usbtmc 1-1:16.0: can't read capabilities [ 558.584540][ T5878] usb 1-1: USB disconnect, device number 45 [ 558.910350][ T29] audit: type=1400 audit(2000000057.508:816): avc: denied { watch watch_reads } for pid=11813 comm="syz.2.1518" path="/" dev="ramfs" ino=36550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 559.509407][ T29] audit: type=1400 audit(2000000058.137:817): avc: denied { bind } for pid=11832 comm="syz.3.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.537806][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 559.626902][T11834] 8021q: adding VLAN 0 to HW filter on device team1 [ 559.711337][T11841] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 559.815447][ T5878] lo speed is unknown, defaulting to 1000 [ 559.829956][T11845] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 559.837868][ T5878] syz2: Port: 1 Link DOWN [ 559.880910][ T5913] lo speed is unknown, defaulting to 1000 [ 559.890540][ T5913] syz2: Port: 1 Link ACTIVE [ 560.033572][T11853] 9p: Bad value for 'source' [ 560.058935][T11855] netlink: 'syz.4.1535': attribute type 13 has an invalid length. [ 560.099944][T11857] loop6: detected capacity change from 0 to 7 [ 560.153957][T11857] Dev loop6: unable to read RDB block 7 [ 560.195909][T11857] loop6: unable to read partition table [ 560.225166][T11857] loop6: partition table beyond EOD, truncated [ 560.237165][T11857] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 560.535327][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 560.936463][ T29] audit: type=1400 audit(2000000059.639:818): avc: denied { execute } for pid=11897 comm="syz.1.1553" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 561.002209][ T29] audit: type=1400 audit(2000000059.691:819): avc: denied { listen } for pid=11899 comm="syz.2.1552" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.544102][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 561.562394][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 561.831059][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 561.881284][T11942] bridge0: entered promiscuous mode [ 561.900190][T11942] macvtap1: entered promiscuous mode [ 561.920182][T11942] bridge0: port 3(macvtap1) entered blocking state [ 561.934391][T11942] bridge0: port 3(macvtap1) entered disabled state [ 561.968893][T11942] macvtap1: entered allmulticast mode [ 561.983196][T11942] bridge0: entered allmulticast mode [ 562.003018][T11942] macvtap1: left allmulticast mode [ 562.014791][T11942] bridge0: left allmulticast mode [ 562.024621][T11948] netlink: 'syz.4.1571': attribute type 15 has an invalid length. [ 562.033824][T11942] bridge0: left promiscuous mode [ 562.252622][T11954] syzkaller0: entered promiscuous mode [ 562.275818][T11954] syzkaller0: entered allmulticast mode [ 562.407532][ T29] audit: type=1400 audit(2000000061.182:820): avc: denied { map } for pid=11962 comm="syz.2.1578" path="socket:[37963]" dev="sockfs" ino=37963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.477375][ T29] audit: type=1400 audit(2000000061.182:821): avc: denied { read } for pid=11962 comm="syz.2.1578" path="socket:[37963]" dev="sockfs" ino=37963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.577904][ T29] audit: type=1400 audit(2000000061.318:822): avc: denied { mounton } for pid=11969 comm="syz.1.1581" path="/326/file0" dev="tmpfs" ino=1744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 562.593613][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'. [ 562.627045][ T29] audit: type=1400 audit(2000000061.339:823): avc: denied { getopt } for pid=11971 comm="syz.0.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 562.685935][ T29] audit: type=1400 audit(2000000061.381:824): avc: denied { connect } for pid=11974 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 562.895036][ T5912] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 563.065260][T11990] fuse: Bad value for 'fd' [ 563.180813][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 563.202812][ T5912] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 563.226015][ T5912] usb 4-1: config 0 has no interface number 0 [ 563.243072][ T5912] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.274919][ T5912] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 563.275058][ T1161] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.364378][ T5912] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 563.399396][ T5912] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 563.617437][ T5912] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 563.641732][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.680256][ T5912] usb 4-1: config 0 descriptor?? [ 563.725788][ T5912] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 563.737975][ T1161] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.910453][ T1161] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.997394][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.006723][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.025701][ T1161] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.061473][T11977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.119773][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.146270][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.195354][ T5912] usb 4-1: USB disconnect, device number 45 [ 564.221909][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.233944][ T5912] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 564.242874][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.254046][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.262961][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.271283][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 564.333304][T12002] lo speed is unknown, defaulting to 1000 [ 564.389862][T12006] lo speed is unknown, defaulting to 1000 [ 564.642707][ T1161] bridge_slave_1: left allmulticast mode [ 564.649173][ T1161] bridge_slave_1: left promiscuous mode [ 564.655003][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.668783][ T1161] bridge_slave_0: left allmulticast mode [ 564.674473][ T1161] bridge_slave_0: left promiscuous mode [ 564.684048][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.048017][ T1161] dvmrp1 (unregistering): left allmulticast mode [ 566.234338][ T5805] Bluetooth: hci0: command tx timeout [ 566.281662][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.309670][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.331016][ T1161] bond0 (unregistering): Released all slaves [ 566.354457][ T1161] bond1 (unregistering): Released all slaves [ 566.657279][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 566.719785][T12036] lo speed is unknown, defaulting to 1000 [ 566.827060][ T1161] !: left promiscuous mode [ 567.147742][T12054] mmap: syz.2.1611 (12054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 567.196589][ T1161] tipc: Disabling bearer [ 567.229318][ T1161] tipc: Left network mode [ 567.403976][T12059] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1613'. [ 567.779336][T12006] chnl_net:caif_netlink_parms(): no params data found [ 568.012358][ T29] audit: type=1400 audit(2000000067.071:825): avc: denied { read } for pid=12081 comm="syz.2.1620" path="socket:[37831]" dev="sockfs" ino=37831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 568.210844][ T5805] Bluetooth: hci0: command tx timeout [ 568.273782][ T1161] hsr_slave_0: left promiscuous mode [ 568.304758][ T1161] hsr_slave_1: left promiscuous mode [ 568.321451][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.351705][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.377688][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.408022][ T1161] veth1_macvtap: left promiscuous mode [ 568.422923][ T1161] veth0_macvtap: left promiscuous mode [ 568.440550][ T1161] veth1_vlan: left promiscuous mode [ 568.445857][ T1161] veth0_vlan: left promiscuous mode [ 568.845620][ T29] audit: type=1400 audit(2000000067.943:826): avc: denied { cmd } for pid=12102 comm="syz.2.1622" path="socket:[37843]" dev="sockfs" ino=37843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 569.111941][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 569.160756][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 569.851669][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.859364][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.872037][T12006] bridge_slave_0: entered allmulticast mode [ 569.886938][T12006] bridge_slave_0: entered promiscuous mode [ 569.926384][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.933534][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.172398][T12006] bridge_slave_1: entered allmulticast mode [ 570.191861][ T5805] Bluetooth: hci0: command tx timeout [ 570.220284][T12006] bridge_slave_1: entered promiscuous mode [ 570.320917][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.385221][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.421252][T12119] lo speed is unknown, defaulting to 1000 [ 570.542843][T12006] team0: Port device team_slave_0 added [ 570.569212][T12006] team0: Port device team_slave_1 added [ 570.889256][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.913764][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.987470][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.017439][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.067332][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.097060][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.224404][T12138] loop2: detected capacity change from 0 to 7 [ 571.276027][ T5795] loop2: [ 571.279371][ T5795] loop2: partition table partially beyond EOD, truncated [ 571.334638][T12138] loop2: [ 571.341746][T12138] loop2: partition table partially beyond EOD, truncated [ 571.352093][T12006] hsr_slave_0: entered promiscuous mode [ 571.358629][T12006] hsr_slave_1: entered promiscuous mode [ 571.378441][T12006] debugfs: 'hsr0' already exists in 'hsr' [ 571.396308][T12006] Cannot create hsr debugfs directory [ 571.879784][T12151] loop4: detected capacity change from 0 to 7 [ 571.897347][ T5795] Dev loop4: unable to read RDB block 7 [ 571.904613][ T5795] loop4: unable to read partition table [ 571.931368][ T5795] loop4: partition table beyond EOD, truncated [ 571.949054][T12151] Dev loop4: unable to read RDB block 7 [ 571.962454][T12151] loop4: unable to read partition table [ 571.969177][T12151] loop4: partition table beyond EOD, truncated [ 571.980132][T12151] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 572.173190][ T5805] Bluetooth: hci0: command tx timeout [ 572.592222][ T5878] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 572.734292][T12171] fuse: Bad value for 'fd' [ 572.766509][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 572.934711][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 572.956655][ T10] usb 5-1: config 0 has an invalid interface number: 140 but max is 0 [ 572.984157][ T10] usb 5-1: config 0 has no interface number 0 [ 573.018166][ T5878] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 573.028254][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.038648][ T5878] usb 4-1: Product: syz [ 573.045793][ T10] usb 5-1: config 0 interface 140 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 573.058970][ T29] audit: type=1400 audit(2000000072.362:827): avc: denied { append } for pid=12173 comm="syz.0.1640" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.082739][ T5878] usb 4-1: Manufacturer: syz [ 573.097871][ T5878] usb 4-1: SerialNumber: syz [ 573.109084][T12006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 573.234831][T12006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 573.235697][ T10] usb 5-1: config 0 interface 140 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 573.253925][ T5878] usb 4-1: config 0 descriptor?? [ 573.505889][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 573.583528][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=9a.2b [ 573.584024][T12006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 573.601396][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.630154][ T10] usb 5-1: Product: syz [ 573.722448][ T10] usb 5-1: Manufacturer: syz [ 573.731416][ T10] usb 5-1: SerialNumber: syz [ 573.787091][ T10] usb 5-1: config 0 descriptor?? [ 573.806552][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 573.827127][ T10] keyspan 5-1:0.140: Keyspan 1 port adapter converter detected [ 573.849506][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 84 [ 573.907611][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 81 [ 573.915964][T12006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.941218][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 82 [ 573.969850][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 1 [ 573.991064][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 2 [ 574.010868][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 83 [ 574.033863][ T10] keyspan 5-1:0.140: found no endpoint descriptor for endpoint 3 [ 574.066058][ T10] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 574.720690][ T5878] airspy 4-1:0.0: usb_control_msg() failed -110 request 09 [ 574.728539][ T5878] airspy 4-1:0.0: Could not detect board [ 574.734365][ T5878] airspy 4-1:0.0: probe with driver airspy failed with error -110 [ 574.804911][ T29] audit: type=1400 audit(2000000074.147:828): avc: denied { ioctl } for pid=12165 comm="syz.4.1638" path="socket:[38772]" dev="sockfs" ino=38772 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 575.166948][ T5878] usb 4-1: USB disconnect, device number 46 [ 575.237599][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.325587][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.424345][T12006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.457162][T12006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.490380][T12209] loop5: detected capacity change from 0 to 7 [ 575.520649][T12209] loop5: [ 575.523688][T12209] loop5: partition table partially beyond EOD, truncated [ 575.537678][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.544946][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.679596][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.686687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.018171][T12219] netlink: 'syz.2.1645': attribute type 9 has an invalid length. [ 576.040978][T12219] netlink: 'syz.2.1645': attribute type 11 has an invalid length. [ 576.059437][T12219] netlink: 'syz.2.1645': attribute type 12 has an invalid length. [ 576.073813][T12219] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1645'. [ 576.113254][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 576.419735][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.752830][ T5912] usb 5-1: USB disconnect, device number 60 [ 576.794101][ T5912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 576.815961][ T5912] keyspan 5-1:0.140: device disconnected [ 577.223374][T12257] netlink: 'syz.4.1649': attribute type 10 has an invalid length. [ 577.262064][T12257] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.334970][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 577.359838][T12257] bond0: (slave team0): Enslaving as an active interface with an up link [ 577.563070][T12006] veth0_vlan: entered promiscuous mode [ 577.806743][T12006] veth1_vlan: entered promiscuous mode [ 577.983395][ T5912] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 578.247090][T12006] veth0_macvtap: entered promiscuous mode [ 578.254771][ T5912] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 578.276585][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.293380][T12006] veth1_macvtap: entered promiscuous mode [ 578.318686][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 578.341931][T12006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.356458][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.382120][T12006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.424135][ T5912] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 578.450557][ T1161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.476148][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 578.488979][ T5912] usb 4-1: Product: syz [ 578.519866][ T5912] usb 4-1: Manufacturer: syz [ 578.579112][ T5912] cdc_wdm 4-1:1.0: skipping garbage [ 578.607853][ T1161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.616955][ T5912] cdc_wdm 4-1:1.0: skipping garbage [ 578.626695][ T5912] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 578.636148][ T1161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.681572][ T1161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.908808][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.924982][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.936937][T12284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=12284 comm=syz.0.1657 [ 578.963162][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.979059][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 578.991252][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.037565][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 579.046667][T12264] openvswitch: netlink: Flow actions attr not present in new flow. [ 579.119881][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 579.126020][ T5912] usb 4-1: USB disconnect, device number 47 [ 579.164307][T12284] ip6gre1: entered promiscuous mode [ 579.190145][T12284] ip6gre1: entered allmulticast mode [ 579.298060][ T29] audit: type=1400 audit(2000000078.902:829): avc: denied { append } for pid=12292 comm="syz.4.1660" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 579.336789][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 579.403247][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 579.431626][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 579.469546][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 579.523767][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 579.578332][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 579.588004][T12302] vivid-007: ================= START STATUS ================= [ 579.594450][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 579.609211][ T10] usb 3-1: Product: syz [ 579.614041][ T10] usb 3-1: Manufacturer: syz [ 579.632607][ T3017] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.642617][ T3017] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.661853][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 579.672133][T12302] vivid-007: Enable Output Cropping: true [ 579.682737][ T792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.690861][T12302] vivid-007: Enable Output Composing: true [ 579.693506][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 579.706151][T12302] vivid-007: Enable Output Scaler: true [ 579.712349][T12302] vivid-007: Tx RGB Quantization Range: Automatic [ 579.732452][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 579.747225][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 579.812755][ T29] audit: type=1400 audit(2000000079.438:830): avc: denied { setopt } for pid=12305 comm="syz.4.1664" lport=49747 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 579.872399][T12302] vivid-007: Transmit Mode: HDMI [ 579.891935][T12302] vivid-007: Hotplug Present: 0x00000000 [ 579.900045][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.919296][T12302] vivid-007: RxSense Present: 0x00000000 [ 579.935183][T12302] vivid-007: EDID Present: 0x00000000 [ 579.990664][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 579.997484][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.004155][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.010736][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.017616][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.024384][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.031279][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.037894][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.044603][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.051220][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.057635][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.064326][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.070610][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.077197][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.083536][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.090125][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.096374][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.102952][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.109241][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 580.116251][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 580.122641][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 580.131410][ T5912] usb 3-1: USB disconnect, device number 48 [ 580.141827][ T29] audit: type=1400 audit(2000000079.637:831): avc: denied { read write } for pid=12281 comm="syz.2.1656" name="cdc-wdm0" dev="devtmpfs" ino=3641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 580.216645][T12302] vivid-007: ================== END STATUS ================== [ 580.224983][ T5913] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 580.376798][ T29] audit: type=1400 audit(2000000079.637:832): avc: denied { open } for pid=12281 comm="syz.2.1656" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 580.484810][ T5878] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.514734][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 580.547136][ T5913] usb 5-1: can't read configurations, error -61 [ 580.698229][ T5913] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 581.547850][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 581.571808][ T5913] usb 5-1: can't read configurations, error -61 [ 581.592629][ T5913] usb usb5-port1: attempt power cycle [ 581.928493][ T5913] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 581.954998][T12331] program syz.5.1670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.969741][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 581.978185][ T5913] usb 5-1: can't read configurations, error -61 [ 582.174646][ T5913] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 582.504319][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 582.543413][ T5913] usb 5-1: can't read configurations, error -61 [ 582.583954][ T5913] usb usb5-port1: unable to enumerate USB device [ 582.943926][T12340] sg_write: data in/out 1306/70 bytes for SCSI command 0x7-- guessing data in; [ 582.943926][T12340] program syz.2.1673 not setting count and/or reply_len properly [ 583.265718][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 583.603725][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.658121][T12356] KVM: debugfs: duplicate directory 12356-4 [ 583.887739][T12359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1677'. [ 583.899794][T12363] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1677'. [ 583.992959][T12368] lo speed is unknown, defaulting to 1000 [ 584.138408][ T29] audit: type=1400 audit(2000000083.994:833): avc: denied { setattr } for pid=12365 comm="syz.5.1680" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 584.518142][ T5878] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 584.589205][T12377] lo speed is unknown, defaulting to 1000 [ 584.597273][ T792] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 584.683794][ T5878] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 584.704685][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.734894][ T5878] usb 6-1: Product: syz [ 584.743718][ T5878] usb 6-1: Manufacturer: syz [ 584.752980][ T5878] usb 6-1: SerialNumber: syz [ 584.763076][ T792] usb 4-1: Using ep0 maxpacket: 16 [ 584.812870][ T5878] usb 6-1: config 0 descriptor?? [ 584.820246][ T792] usb 4-1: config 0 has no interfaces? [ 584.838765][ T792] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.860708][ T5931] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 584.878043][ T792] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.914073][ T792] usb 4-1: Manufacturer: syz [ 584.937796][ T792] usb 4-1: config 0 descriptor?? [ 585.021874][ T5931] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 585.030289][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 585.043737][ T5878] hso 6-1:0.0: Failed to find BULK IN ep [ 585.066842][ T5878] usb-storage 6-1:0.0: USB Mass Storage device detected [ 585.080023][ T5931] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.142792][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 585.249065][T12368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 585.270334][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 585.279539][ T29] audit: type=1400 audit(2000000085.180:834): avc: denied { read } for pid=12365 comm="syz.5.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 585.295958][ T5878] usb 6-1: USB disconnect, device number 2 [ 585.324496][ T5931] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 585.342929][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 585.356389][ T5931] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.423850][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 585.446082][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 585.474258][ T5931] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 585.483009][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 585.504006][ T5931] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 585.647403][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 585.753303][ T5931] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 585.914462][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 585.922915][ T5931] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 585.939295][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.982316][ T5931] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 586.124896][ T5871] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 586.308980][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 586.353481][ T5931] usb 5-1: USB disconnect, device number 65 [ 586.383394][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 586.392857][ T5871] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 586.406829][ T5871] usb 3-1: config 7 has no interface number 0 [ 586.422305][ T5871] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 586.435301][ T5871] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 586.446755][ T5871] usb 3-1: config 7 interface 187 has no altsetting 0 [ 586.707417][ T5871] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 586.720512][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.729116][ T5871] usb 3-1: Product: syz [ 586.734116][ T5871] usb 3-1: Manufacturer: syz [ 586.739539][ T5871] usb 3-1: SerialNumber: syz [ 586.962770][T12406] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1690'. [ 587.022191][ T5871] usb 3-1: Unknown endpoint type found, address 0x07 [ 587.031208][ T5871] usb 3-1: Not enough endpoints found in device, aborting! [ 587.292734][ T5864] usb 4-1: USB disconnect, device number 48 [ 587.359491][T12420] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 587.503342][ T29] audit: type=1400 audit(2000000087.511:835): avc: denied { create } for pid=12413 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 587.529617][T12423] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 587.530496][T12423] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 587.639657][ T29] audit: type=1400 audit(2000000087.668:836): avc: denied { create } for pid=12413 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 587.639711][ T29] audit: type=1400 audit(2000000087.668:837): avc: denied { write } for pid=12413 comm="syz.4.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 587.890768][T12420] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 587.925113][T12429] macvlan2: entered promiscuous mode [ 587.931056][T12429] macvlan2: entered allmulticast mode [ 587.939576][T12429] bond1: entered promiscuous mode [ 587.944723][T12429] gretap1: entered promiscuous mode [ 587.954126][T12429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.966755][T12429] bond1: left promiscuous mode [ 587.971681][T12429] gretap1: left promiscuous mode [ 588.229833][T12440] dlm: non-version read from control device 2147479552 [ 588.248867][T12440] dlm: non-version read from control device 2147479552 [ 588.278597][T12440] dlm: non-version read from control device 2147479552 [ 589.262248][T12460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=12460 comm=syz.3.1707 [ 589.335119][ T5864] usb 3-1: USB disconnect, device number 49 [ 589.344959][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 589.426632][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 589.475765][T12466] hsr0: entered promiscuous mode [ 589.626679][ T5864] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 589.787557][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.821677][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.849510][ T29] audit: type=1400 audit(2000000089.978:838): avc: denied { name_bind } for pid=12478 comm="syz.3.1714" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 589.896445][ T5864] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 589.989150][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.003648][T12485] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 590.037607][ T5864] usb 1-1: config 0 descriptor?? [ 590.164995][T12493] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 590.461728][ T5864] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 590.718021][ T5864] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 590.801577][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 590.969113][ T5864] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 591.122216][ T5878] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 591.508411][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 591.540965][ T5878] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 591.569619][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.656867][ T5878] usb 5-1: config 0 has no interface number 0 [ 591.740748][ T5878] usb 5-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 591.755592][ T5931] usb 1-1: USB disconnect, device number 46 [ 591.808890][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.878705][ T5878] usb 5-1: Product: syz [ 591.894382][ T5878] usb 5-1: Manufacturer: syz [ 591.912670][ T5878] usb 5-1: SerialNumber: syz [ 591.920033][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 592.034188][ T5878] usb 5-1: config 0 descriptor?? [ 592.239753][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1721'. [ 592.285422][T12529] bridge0: entered promiscuous mode [ 592.325153][T12529] bridge0: left promiscuous mode [ 592.646501][T12537] lo speed is unknown, defaulting to 1000 [ 592.968846][T12553] program syz.0.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.848006][T12560] xt_hashlimit: size too large, truncated to 1048576 [ 594.036929][ T5878] rndis_host 5-1:0.109: More than one union descriptor, skipping ... [ 594.062154][ T5878] usb 5-1: bad CDC descriptors [ 594.076910][ T5878] cdc_acm 5-1:0.109: More than one union descriptor, skipping ... [ 594.098643][ T5878] usb 5-1: USB disconnect, device number 66 [ 594.264079][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 594.367976][T12570] ip6gre1: entered promiscuous mode [ 594.396618][T12570] ip6gre1: entered allmulticast mode [ 594.708067][ T792] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 594.910398][ T792] usb 5-1: Using ep0 maxpacket: 8 [ 594.928205][ T792] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.995488][ T792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.008742][ T792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.054915][ T792] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.162405][ T792] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.176977][ T29] audit: type=1400 audit(2000000095.531:839): avc: denied { connect } for pid=12587 comm="syz.3.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 595.201007][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.315349][T12596] No such timeout policy "syz0" [ 595.413145][ T792] usb 5-1: GET_CAPABILITIES returned 0 [ 595.420828][ T792] usbtmc 5-1:16.0: can't read capabilities [ 595.706767][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.716322][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.725466][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.750033][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.759179][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.768237][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.777281][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.787707][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.796838][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.805912][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.814956][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.832183][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.841345][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.850471][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.859586][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 595.868649][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 595.878178][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 595.936236][T12610] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 595.938964][ T792] usb 5-1: USB disconnect, device number 67 [ 597.097327][T12629] lo speed is unknown, defaulting to 1000 [ 597.409938][T12632] xt_hashlimit: size too large, truncated to 1048576 [ 597.699175][T12638] fuse: Bad value for 'fd' [ 597.920607][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 598.092508][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 598.134421][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 598.234499][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 598.460378][T12651] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 598.498270][ T29] audit: type=1400 audit(2000000099.069:840): avc: denied { create } for pid=12648 comm="syz.2.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 599.187311][ T5864] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 599.456369][ T5864] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 599.465582][ T5864] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 599.494897][ T5864] usb 6-1: string descriptor 0 read error: -22 [ 599.516662][ T5864] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 599.548962][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.602162][ T5864] usbtest 6-1:255.0: FX2 device [ 599.624826][ T5864] usbtest 6-1:255.0: low-speed {control intr-in intr-out} tests (+alt) [ 599.817331][ T5864] usb 6-1: USB disconnect, device number 3 [ 600.036496][T12674] ------------[ cut here ]------------ [ 600.042663][T12674] RTNL: assertion failed at net/core/dev.c (9539) [ 600.049195][T12674] WARNING: net/core/dev.c:9539 at __dev_set_promiscuity+0x26d/0x370, CPU#1: syz.2.1761/12674 [ 600.059473][T12674] Modules linked in: [ 600.063895][T12674] CPU: 1 UID: 0 PID: 12674 Comm: syz.2.1761 Not tainted syzkaller #0 PREEMPT(full) [ 600.073336][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.083453][T12674] RIP: 0010:__dev_set_promiscuity+0x279/0x370 [ 600.089612][T12674] Code: f6 a5 f8 85 ed 75 bc e8 75 fb a5 f8 90 0f 0b 90 eb b1 e8 6a fb a5 f8 48 8d 3d 83 dd 84 07 ba 43 25 00 00 48 c7 c6 00 47 f1 8c <67> 48 0f b9 3a e9 e5 fd ff ff e8 48 fb a5 f8 48 8d 7b 08 48 b8 00 [ 600.109311][T12674] RSP: 0018:ffffc90004777718 EFLAGS: 00010283 [ 600.115437][T12674] RAX: 00000000000008a7 RBX: ffff888058c76000 RCX: ffffc90005a49000 [ 600.123491][T12674] RDX: 0000000000002543 RSI: ffffffff8cf14700 RDI: ffffffff90e77e20 [ 600.131510][T12674] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 600.139512][T12674] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001103 [ 600.147549][T12674] R13: ffff888058c760b0 R14: 0000000000000000 R15: 00000000ffffffff [ 600.155588][T12674] FS: 00007f20c08246c0(0000) GS:ffff888124448000(0000) knlGS:0000000000000000 [ 600.164564][T12674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.171195][T12674] CR2: 00007fe8c81456b8 CR3: 00000000358e9000 CR4: 00000000003526f0 [ 600.179205][T12674] Call Trace: [ 600.182506][T12674] [ 600.185434][T12674] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 600.190862][T12674] __dev_set_rx_mode+0x252/0x2e0 [ 600.195821][T12674] dev_mc_add+0xee/0x110 [ 600.200146][T12674] igmp6_group_added+0x3e4/0x4c0 [ 600.205109][T12674] ? __pfx_igmp6_group_added+0x10/0x10 [ 600.210605][T12674] ? mld_del_delrec+0x417/0xe30 [ 600.215489][T12674] __ipv6_dev_mc_inc+0x6f9/0xbc0 [ 600.220517][T12674] addrconf_join_solict+0x109/0x160 [ 600.225745][T12674] ? __pfx_addrconf_join_solict+0x10/0x10 [ 600.231476][T12674] __ipv6_dev_ac_inc+0x938/0xdc0 [ 600.236425][T12674] ipv6_sock_ac_join+0x929/0x10d0 [ 600.241442][T12674] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 600.246912][T12674] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 600.254012][T12674] ? __local_bh_enable_ip+0x9e/0x120 [ 600.259311][T12674] ? lockdep_hardirqs_on+0x78/0x100 [ 600.264514][T12674] do_ipv6_setsockopt+0x37b4/0x4510 [ 600.269693][T12674] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 600.275225][T12674] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 600.280590][T12674] ? avc_has_perm_noaudit+0x145/0x3b0 [ 600.285953][T12674] ? avc_has_perm+0x135/0x1e0 [ 600.290605][T12674] ? __pfx_avc_has_perm+0x10/0x10 [ 600.295640][T12674] ? futex_wait+0x125/0x380 [ 600.300125][T12674] ? sock_has_perm+0x258/0x2f0 [ 600.304890][T12674] ? __pfx_sock_has_perm+0x10/0x10 [ 600.309996][T12674] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 600.316422][T12674] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 600.323190][T12674] ? ipv6_setsockopt+0xcb/0x170 [ 600.328048][T12674] ? __fget_files+0x215/0x3d0 [ 600.332812][T12674] ipv6_setsockopt+0xcb/0x170 [ 600.337475][T12674] udpv6_setsockopt+0x7d/0xd0 [ 600.342150][T12674] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 600.348018][T12674] do_sock_setsockopt+0xf3/0x1d0 [ 600.352964][T12674] __sys_setsockopt+0x195/0x220 [ 600.357813][T12674] __x64_sys_setsockopt+0xbd/0x160 [ 600.362918][T12674] ? do_syscall_64+0x95/0xf80 [ 600.367573][T12674] ? lockdep_hardirqs_on+0x78/0x100 [ 600.372772][T12674] do_syscall_64+0x106/0xf80 [ 600.377346][T12674] ? clear_bhb_loop+0x40/0x90 [ 600.382022][T12674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.387916][T12674] RIP: 0033:0x7f20bf99c629 [ 600.392335][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.411984][T12674] RSP: 002b:00007f20c0824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.420426][T12674] RAX: ffffffffffffffda RBX: 00007f20bfc15fa0 RCX: 00007f20bf99c629 [ 600.428394][T12674] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 600.436358][T12674] RBP: 00007f20bfa32b39 R08: 0000000000000014 R09: 0000000000000000 [ 600.444300][T12674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.452262][T12674] R13: 00007f20bfc16038 R14: 00007f20bfc15fa0 R15: 00007fff2f0791a8 [ 600.460231][T12674] [ 600.463228][T12674] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.470486][T12674] CPU: 1 UID: 0 PID: 12674 Comm: syz.2.1761 Not tainted syzkaller #0 PREEMPT(full) [ 600.479825][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.489853][T12674] Call Trace: [ 600.493110][T12674] [ 600.496014][T12674] dump_stack_lvl+0x100/0x190 [ 600.500711][T12674] vpanic+0x552/0x970 [ 600.504675][T12674] ? __pfx_vpanic+0x10/0x10 [ 600.509163][T12674] panic+0xd1/0xe0 [ 600.512864][T12674] ? __pfx_panic+0x10/0x10 [ 600.517268][T12674] check_panic_on_warn.cold+0x19/0x34 [ 600.522623][T12674] ? __dev_set_promiscuity+0x26d/0x370 [ 600.528062][T12674] __warn.cold+0x191/0x348 [ 600.532450][T12674] __report_bug+0x296/0x3d0 [ 600.536928][T12674] ? __dev_set_promiscuity+0x26d/0x370 [ 600.542364][T12674] ? __pfx___report_bug+0x10/0x10 [ 600.547364][T12674] ? irqentry_exit+0x180/0x670 [ 600.552103][T12674] ? lockdep_hardirqs_on+0x78/0x100 [ 600.557293][T12674] ? __dev_set_promiscuity+0x279/0x370 [ 600.562732][T12674] report_bug_entry+0xe1/0x290 [ 600.567473][T12674] ? __dev_set_promiscuity+0x279/0x370 [ 600.572910][T12674] handle_bug+0x1c9/0x2a0 [ 600.577225][T12674] exc_invalid_op+0x17/0x50 [ 600.581703][T12674] asm_exc_invalid_op+0x1a/0x20 [ 600.586531][T12674] RIP: 0010:__dev_set_promiscuity+0x279/0x370 [ 600.592579][T12674] Code: f6 a5 f8 85 ed 75 bc e8 75 fb a5 f8 90 0f 0b 90 eb b1 e8 6a fb a5 f8 48 8d 3d 83 dd 84 07 ba 43 25 00 00 48 c7 c6 00 47 f1 8c <67> 48 0f b9 3a e9 e5 fd ff ff e8 48 fb a5 f8 48 8d 7b 08 48 b8 00 [ 600.612169][T12674] RSP: 0018:ffffc90004777718 EFLAGS: 00010283 [ 600.618215][T12674] RAX: 00000000000008a7 RBX: ffff888058c76000 RCX: ffffc90005a49000 [ 600.626175][T12674] RDX: 0000000000002543 RSI: ffffffff8cf14700 RDI: ffffffff90e77e20 [ 600.634119][T12674] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 600.642060][T12674] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001103 [ 600.650007][T12674] R13: ffff888058c760b0 R14: 0000000000000000 R15: 00000000ffffffff [ 600.657970][T12674] ? __dev_set_promiscuity+0x266/0x370 [ 600.663410][T12674] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 600.668761][T12674] __dev_set_rx_mode+0x252/0x2e0 [ 600.673680][T12674] dev_mc_add+0xee/0x110 [ 600.677914][T12674] igmp6_group_added+0x3e4/0x4c0 [ 600.682842][T12674] ? __pfx_igmp6_group_added+0x10/0x10 [ 600.688282][T12674] ? mld_del_delrec+0x417/0xe30 [ 600.693113][T12674] __ipv6_dev_mc_inc+0x6f9/0xbc0 [ 600.698044][T12674] addrconf_join_solict+0x109/0x160 [ 600.703220][T12674] ? __pfx_addrconf_join_solict+0x10/0x10 [ 600.708924][T12674] __ipv6_dev_ac_inc+0x938/0xdc0 [ 600.713847][T12674] ipv6_sock_ac_join+0x929/0x10d0 [ 600.718846][T12674] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 600.724277][T12674] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 600.731369][T12674] ? __local_bh_enable_ip+0x9e/0x120 [ 600.736631][T12674] ? lockdep_hardirqs_on+0x78/0x100 [ 600.741803][T12674] do_ipv6_setsockopt+0x37b4/0x4510 [ 600.746994][T12674] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 600.752531][T12674] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 600.757889][T12674] ? avc_has_perm_noaudit+0x145/0x3b0 [ 600.763247][T12674] ? avc_has_perm+0x135/0x1e0 [ 600.767910][T12674] ? __pfx_avc_has_perm+0x10/0x10 [ 600.772922][T12674] ? futex_wait+0x125/0x380 [ 600.777400][T12674] ? sock_has_perm+0x258/0x2f0 [ 600.782161][T12674] ? __pfx_sock_has_perm+0x10/0x10 [ 600.787262][T12674] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 600.793648][T12674] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 600.800386][T12674] ? ipv6_setsockopt+0xcb/0x170 [ 600.805213][T12674] ? __fget_files+0x215/0x3d0 [ 600.809861][T12674] ipv6_setsockopt+0xcb/0x170 [ 600.814527][T12674] udpv6_setsockopt+0x7d/0xd0 [ 600.819180][T12674] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 600.825048][T12674] do_sock_setsockopt+0xf3/0x1d0 [ 600.829961][T12674] __sys_setsockopt+0x195/0x220 [ 600.834802][T12674] __x64_sys_setsockopt+0xbd/0x160 [ 600.839896][T12674] ? do_syscall_64+0x95/0xf80 [ 600.844548][T12674] ? lockdep_hardirqs_on+0x78/0x100 [ 600.849719][T12674] do_syscall_64+0x106/0xf80 [ 600.854284][T12674] ? clear_bhb_loop+0x40/0x90 [ 600.858937][T12674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.864811][T12674] RIP: 0033:0x7f20bf99c629 [ 600.869208][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.888800][T12674] RSP: 002b:00007f20c0824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 600.897199][T12674] RAX: ffffffffffffffda RBX: 00007f20bfc15fa0 RCX: 00007f20bf99c629 [ 600.905144][T12674] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 600.913088][T12674] RBP: 00007f20bfa32b39 R08: 0000000000000014 R09: 0000000000000000 [ 600.921029][T12674] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.928971][T12674] R13: 00007f20bfc16038 R14: 00007f20bfc15fa0 R15: 00007fff2f0791a8 [ 600.936926][T12674] [ 600.940272][T12674] Kernel Offset: disabled [ 600.944577][T12674] Rebooting in 86400 seconds..