last executing test programs: 2m24.826576781s ago: executing program 2 (id=49): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="9c", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="99", 0x1}], 0x1}}], 0x2, 0x48000) sendmmsg$inet_sctp(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r2 = syz_io_uring_setup(0x4c4f, &(0x7f0000000700)={0x0, 0xed83, 0x8000, 0x2, 0x2e3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "afceeb03dcad0c3d385b9d1d57c3ff1f6ad7d540f84de6306783b897769be692", "b43dac8751f5d8cd785e1e33c9ae64fec6e36adc00", "644c096b5a17b3b5fc85bc1d0c23b0e21ed0717f620305aa44a427fb1b00", "9313c981621bec72e628cd3c5b21d90945db5c38ca9df508af689aee1a9775bb", "3eb56c5371594cdfa4f964ca8a2044537b971d33ac7c8da8c4aa6adf90eeeea0", "8b151f786d9942f133bc5ac3", 0x8, 0x7, 0x2, 0x80000001, 0x3}}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000009c0)={0xa, 0x4e20, 0x8, @mcast2, 0x4}, 0x1c) bind$inet6(r8, &(0x7f0000000400)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r8, 0xfffffff8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) connect$inet(r10, &(0x7f0000000440)={0x2, 0x2, @local}, 0x10) setsockopt$inet_int(r10, 0x0, 0x2, &(0x7f0000000580)=0x3, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000006c0)=@t={0x85, 0x5, 0x0, 0xfc, @generic}) ioprio_set$pid(0x2, 0x0, 0x2007) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 2m24.647190021s ago: executing program 2 (id=52): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/vhci\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000380)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) write$selinux_validatetrans(r0, 0x0, 0x0) 2m24.551907509s ago: executing program 2 (id=56): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x110a, 0x5}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0x2}]}) 2m24.334205134s ago: executing program 2 (id=59): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000000000)) restart_syscall() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x2}, {@loopback, 0x15, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x483, &(0x7f0000000400)="060000007f00000100150000000000006d6800"/44, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="47462f0ee72cc42e7c25c5e0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000500010000001400020077673000000000000000000000000000b0000880ac00008008000a0001000000060005000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6c00098028000080060001000a0000001400020000000000000000000000ffff64010100050003000200000040000080060001000200000008000200ac1e00010500030000000000060001000a000000140002000000000000000000000000000000000005000300020000000800030000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) syz_emit_ethernet(0x5e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000280600fe880000000000000000000000000101fe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001312d4c466fb19f71e96642faa23000000000000e2ac5b2649d0acd605250b0413d4e2b5c99133587b4708827c0f1b1f0787074bf3db8f64b2d53f598461ae2441532cdd1d3ad5151086334cb6e287ad1d9a5e83802c82265cb7183994341647718d60c4721ed38ed56909d2e604aa5b4423bfbc3914e07ff20cb935e9e673fb40dd00cf4b6422b155bdc17a8a9d622ea5b7407e72c9946a5726605be80a9c928d731f810d1c7b180144cf2b0d6f24df199643ad7c81c6271f1160110d128535eea3505dfcdab94c847990"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="852300009300"/16], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x482c0, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000580)=0x20) syz_usb_connect(0x0, 0x6b, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902590001000000000904000000ef040100052406"], 0x0) restart_syscall() syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') 2m23.06637706s ago: executing program 2 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[], 0xfdef) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f000001acc0)={&(0x7f000001ad00)=@in6={0x2, 0x4e20, 0xe0000000, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f000001ad80)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m22.922647741s ago: executing program 2 (id=67): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x6c, &(0x7f0000000680)={0x6c, 0x1, {0x1, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) r7 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r7}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2m12.528131835s ago: executing program 3 (id=161): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/vhci\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000380)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) write$selinux_validatetrans(r0, 0x0, 0x0) 2m12.527002032s ago: executing program 3 (id=162): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="9c", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="99", 0x1}], 0x1}}], 0x2, 0x48000) sendmmsg$inet_sctp(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}], 0x1, 0x0) r2 = syz_io_uring_setup(0x4c4f, &(0x7f0000000700)={0x0, 0xed83, 0x8000, 0x2, 0x2e3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "afceeb03dcad0c3d385b9d1d57c3ff1f6ad7d540f84de6306783b897769be692", "b43dac8751f5d8cd785e1e33c9ae64fec6e36adc00", "644c096b5a17b3b5fc85bc1d0c23b0e21ed0717f620305aa44a427fb1b00", "9313c981621bec72e628cd3c5b21d90945db5c38ca9df508af689aee1a9775bb", "3eb56c5371594cdfa4f964ca8a2044537b971d33ac7c8da8c4aa6adf90eeeea0", "8b151f786d9942f133bc5ac3", 0x8, 0x7, 0x2, 0x80000001, 0x3}}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000009c0)={0xa, 0x4e20, 0x8, @mcast2, 0x4}, 0x1c) bind$inet6(r8, &(0x7f0000000400)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r8, 0xfffffff8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) connect$inet(r10, &(0x7f0000000440)={0x2, 0x2, @local}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000006c0)=@t={0x85, 0x5, 0x0, 0xfc, @generic}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x2, 0x0, 0x2007) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 2m12.432214836s ago: executing program 3 (id=163): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/vhci\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000380)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) r2 = memfd_create(&(0x7f00000001c0)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d\xe1,\xe2\xc2,;e\xfcj*3\xae\xc9\x1f96b\xc6\xec\xd8\xe8\xef\xc0\x85\n\x05koJ\x86J\xee\xf2l\n\xf0m\x933B\x90\xe8\xe2UZ\x15\xc9\xb7\t\x0f\x90\xef\xa7\xbd\x93{\x8c\xab\xf8u\xad\x16>\xe2\xe8\x9c\x8b@E\xb4\xf3\x7f\xfd\xf5\v+\x16\x86\xe8\x82`p_\x7f\x91.\xa4\x84\xb7\xe2\xc3\xebg\x80\xa3\x10\xa9\x9c&\b\x15Tn\x85\xb7\a\x9c\xad\xee\x8b\x8b\x84x\xd6\xbaltQe\xae\x93\x1e\xd8p\xe3\x92\x95q\xc5\xb0\x7f\x9bG\xb4\x81RB\x15\xcew%\xb9\x03\x0f\xf1$BU\xc5\xb1\xf0\x82w[\xc6\xb9\xff];\xa8\xcf4u^&\x14SO\xa1\xf6\x99r\xe0\r\xd0\xf3n0B\xcc\tS\xe2\x16\x19~\xdb\xbd\x8e\xbb', 0x4) fstatfs(r2, &(0x7f0000000100)=""/146) write$selinux_validatetrans(r0, 0x0, 0x0) 2m12.381798684s ago: executing program 3 (id=164): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000000000)) restart_syscall() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x2}, {@loopback, 0x15, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x483, &(0x7f0000000400)="060000007f00000100150000000000006d6800"/44, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, &(0x7f0000000880)) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="47462f0ee72cc42e7c25c5e0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000500010000001400020077673000000000000000000000000000b0000880ac00008008000a0001000000060005000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6c00098028000080060001000a0000001400020000000000000000000000ffff64010100050003000200000040000080060001000200000008000200ac1e00010500030000000000060001000a000000140002000000000000000000000000000000000005000300020000000800030000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) syz_emit_ethernet(0x5e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000280600fe880000000000000000000000000101fe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001312d4c466fb19f71e96642faa23000000000000e2ac5b2649d0acd605250b0413d4e2b5c99133587b4708827c0f1b1f0787074bf3db8f64b2d53f598461ae2441532cdd1d3ad5151086334cb6e287ad1d9a5e83802c82265cb7183994341647718d60c4721ed38ed56909d2e604aa5b4423bfbc3914e07ff20cb935e9e673fb40dd00cf4b6422b155bdc17a8a9d622ea5b7407e72c9946a5726605be80a9c928d731f810d1c7b180144cf2b0d6f24df199643ad7c81c6271f1160110d128535eea3505dfcdab94c847990"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="852300009300"/16], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x482c0, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000580)=0x20) syz_usb_connect(0x0, 0x6b, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902590001000000000904000000ef040100052406"], 0x0) restart_syscall() syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') 2m11.169802697s ago: executing program 3 (id=169): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) r4 = socket(0x2d, 0x2, 0x0) setsockopt(r4, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000600)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000640)={&(0x7f0000000680)={{@host, 0x89f}, {@host, 0xfffffff8}, 0x400, "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"}, 0x418, 0xffffffff}) sendto(r4, 0x0, 0x0, 0x0, &(0x7f0000000500)=@generic={0x2d, "00000000000000001f00010000000600"}, 0x34) r6 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="483848a6457356bbfd6222189818cd21bdfa91543b01e6c7e2e5934d0997ca2e406682563b88ad73730fc711ffb58cbc0766161097e1c1236f2b7ad075eaff6313f68916bb1686d491a5b39513ac600149c264623187f78ce57e8717796ec4d0fd72ab1e8040bd3ae92c4734192f617c0302bddd01b294fb9f241d114c287882d7da1dba1b17da8b61d208afe0ea9d12b8c815343d9d1eee00df4ed4b9758028ea4d71ff8c5b3695eb23ab1e31b846135002ee394dd9383f1bc6474bbcce", 0xbe, r6) r7 = dup3(0xffffffffffffffff, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={r7, r1, 0x4}) setgroups(0x1, &(0x7f0000000180)=[0x0]) getgroups(0x1, &(0x7f0000000200)=[0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m11.050717567s ago: executing program 3 (id=170): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x6c, &(0x7f0000000680)={0x6c, 0x1, {0x1, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2m7.903225147s ago: executing program 32 (id=67): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x6c, &(0x7f0000000680)={0x6c, 0x1, {0x1, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) r7 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r7}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1m53.931414782s ago: executing program 33 (id=170): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x6c, &(0x7f0000000680)={0x6c, 0x1, {0x1, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) r8 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r8}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1m40.921522881s ago: executing program 5 (id=367): openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000380)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) r4 = memfd_create(&(0x7f00000001c0)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d\xe1,\xe2\xc2,;e\xfcj*3\xae\xc9\x1f96b\xc6\xec\xd8\xe8\xef\xc0\x85\n\x05koJ\x86J\xee\xf2l\n\xf0m\x933B\x90\xe8\xe2UZ\x15\xc9\xb7\t\x0f\x90\xef\xa7\xbd\x93{\x8c\xab\xf8u\xad\x16>\xe2\xe8\x9c\x8b@E\xb4\xf3\x7f\xfd\xf5\v+\x16\x86\xe8\x82`p_\x7f\x91.\xa4\x84\xb7\xe2\xc3\xebg\x80\xa3\x10\xa9\x9c&\b\x15Tn\x85\xb7\a\x9c\xad\xee\x8b\x8b\x84x\xd6\xbaltQe\xae\x93\x1e\xd8p\xe3\x92\x95q\xc5\xb0\x7f\x9bG\xb4\x81RB\x15\xcew%\xb9\x03\x0f\xf1$BU\xc5\xb1\xf0\x82w[\xc6\xb9\xff];\xa8\xcf4u^&\x14SO\xa1\xf6\x99r\xe0\r\xd0\xf3n0B\xcc\tS\xe2\x16\x19~\xdb\xbd\x8e\xbb', 0x4) fstatfs(r4, &(0x7f0000000100)=""/146) 1m28.443449825s ago: executing program 5 (id=372): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000000000)) restart_syscall() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x2}, {@loopback, 0x15, 0x1}}, 0x44) setsockopt(r0, 0x0, 0x483, &(0x7f0000000400)="060000007f00000100150000000000006d6800"/44, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, &(0x7f0000000880)) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="47462f0ee72cc42e7c25c5e0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000500010000001400020077673000000000000000000000000000b0000880ac00008008000a0001000000060005000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6c00098028000080060001000a0000001400020000000000000000000000ffff64010100050003000200000040000080060001000200000008000200ac1e00010500030000000000060001000a000000140002000000000000000000000000000000000005000300020000000800030000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4044851}, 0x40000) syz_emit_ethernet(0x5e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000280600fe880000000000000000000000000101fe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001312d4c466fb19f71e96642faa23000000000000e2ac5b2649d0acd605250b0413d4e2b5c99133587b4708827c0f1b1f0787074bf3db8f64b2d53f598461ae2441532cdd1d3ad5151086334cb6e287ad1d9a5e83802c82265cb7183994341647718d60c4721ed38ed56909d2e604aa5b4423bfbc3914e07ff20cb935e9e673fb40dd00cf4b6422b155bdc17a8a9d622ea5b7407e72c9946a5726605be80a9c928d731f810d1c7b180144cf2b0d6f24df199643ad7c81c6271f1160110d128535eea3505dfcdab94c847990"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="852300009300"/16], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x482c0, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000580)=0x20) syz_usb_connect(0x0, 0x6b, &(0x7f0000000900)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902590001000000000904000000ef040100052406"], 0x0) restart_syscall() syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') 1m21.923323868s ago: executing program 4 (id=373): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) r3 = socket(0x2d, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000600)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000640)={&(0x7f0000000680)={{@host, 0x89f}, {@host, 0xfffffff8}, 0x400, "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"}, 0x418, 0xffffffff}) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000500)=@generic={0x2d, "00000000000000001f00010000000600"}, 0x34) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="483848a6457356bbfd6222189818cd21bdfa91543b01e6c7e2e5934d0997ca2e406682563b88ad73730fc711ffb58cbc0766161097e1c1236f2b7ad075eaff6313f68916bb1686d491a5b39513ac600149c264623187f78ce57e8717796ec4d0fd72ab1e8040bd3ae92c4734192f617c0302bddd01b294fb9f241d114c287882d7da1dba1b17da8b61d208afe0ea9d12b8c815343d9d1eee00df4ed4b9758028ea4d71ff8c5b3695eb23ab1e31b846135002ee394dd9383f1bc6474bbcce", 0xbe, r5) r6 = dup3(0xffffffffffffffff, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={r6, r1, 0x4}) setgroups(0x1, &(0x7f0000000180)=[0x0]) getgroups(0x1, &(0x7f0000000200)=[0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x19}, 0x94) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m16.595158054s ago: executing program 1 (id=375): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002300)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002340)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002380)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000023c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002400), 0x80200, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000002440)={0x1, 0x8001}) syz_open_dev$sndmidi(&(0x7f0000002480), 0x2, 0x0) syz_emit_ethernet(0xde, 0x0, 0x0) lsm_set_self_attr(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="650000000000000000007110fbb045bb69baf9ab585100000000040020000000"], 0x20, 0x0) 1m15.91523668s ago: executing program 5 (id=376): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)}, 0x0) 1m10.462126879s ago: executing program 0 (id=377): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni\x00'}, 0x58) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) listen(0xffffffffffffffff, 0x81010040) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x0) mount(0x0, &(0x7f0000000240)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000340)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) r2 = socket(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8922, &(0x7f00000003c0)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 1m7.865484298s ago: executing program 4 (id=378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000340)={0x0, 0x0, 0x10000, 0x1, 0x40055}, 0x0, 0x0, 0x0) unshare(0x8000400) pselect6(0x40, &(0x7f00000003c0)={0x1ff, 0x1, 0x0, 0x0, 0x800, 0x200000000000000, 0x3}, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_ublk_setup_queues(r2, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d6b, 0x10, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb21f, 0x1, 0x3, 0x3a8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a0, 0x8, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x5, 0xfffffff7}}], 0x1, 0x0, 0x0) 1m6.47275247s ago: executing program 5 (id=379): r0 = socket(0x11, 0x3, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b854100d5"], 0xdd12}], 0x1}, 0x0) 1m5.49132278s ago: executing program 1 (id=380): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m2.222923911s ago: executing program 0 (id=381): openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x34b9, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) r4 = memfd_create(&(0x7f00000001c0)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d\xe1,\xe2\xc2,;e\xfcj*3\xae\xc9\x1f96b\xc6\xec\xd8\xe8\xef\xc0\x85\n\x05koJ\x86J\xee\xf2l\n\xf0m\x933B\x90\xe8\xe2UZ\x15\xc9\xb7\t\x0f\x90\xef\xa7\xbd\x93{\x8c\xab\xf8u\xad\x16>\xe2\xe8\x9c\x8b@E\xb4\xf3\x7f\xfd\xf5\v+\x16\x86\xe8\x82`p_\x7f\x91.\xa4\x84\xb7\xe2\xc3\xebg\x80\xa3\x10\xa9\x9c&\b\x15Tn\x85\xb7\a\x9c\xad\xee\x8b\x8b\x84x\xd6\xbaltQe\xae\x93\x1e\xd8p\xe3\x92\x95q\xc5\xb0\x7f\x9bG\xb4\x81RB\x15\xcew%\xb9\x03\x0f\xf1$BU\xc5\xb1\xf0\x82w[\xc6\xb9\xff];\xa8\xcf4u^&\x14SO\xa1\xf6\x99r\xe0\r\xd0\xf3n0B\xcc\tS\xe2\x16\x19~\xdb\xbd\x8e\xbb', 0x4) fstatfs(r4, &(0x7f0000000100)=""/146) 1m0.265595443s ago: executing program 5 (id=382): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=@other={'lock', ' ', 'none'}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4}, 0x0) 58.508688357s ago: executing program 1 (id=383): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="990000feff063a"], 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x7f2a8284c3f99e44, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) quotactl$Q_QUOTAON(0xffffffff00000402, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./sys/class/net/bond0/bonding/slaves\x00') read(r0, &(0x7f0000000480)=""/248, 0xf8) 56.323576095s ago: executing program 4 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000006800)={0x0, 0x0, &(0x7f0000006840)={&(0x7f0000006880)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008841}, 0x40c0080) 54.755646842s ago: executing program 0 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="990000feff06"], 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x7f2a8284c3f99e44, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) quotactl$Q_QUOTAON(0xffffffff00000402, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./sys/class/net/bond0/bonding/slaves\x00') read(r0, &(0x7f0000000480)=""/248, 0xf8) 51.186382683s ago: executing program 5 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) unshare(0x2020600) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000000000)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f00000000c0), 0x0, 0x0) 49.506879695s ago: executing program 1 (id=387): capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000001c0)={0x0, 0x5, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003540)={0x53, 0xfffffffffffffffd, 0x5, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f00000035c0)="5bc8984e00", 0xfffffffffffffffd, 0x0, 0x10030, 0x0, 0x0}) 49.363529458s ago: executing program 4 (id=388): syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002000000102505a8a44000010203010902"], &(0x7f00000007c0)={0x0, 0x0, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="050f0b000216"]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003780)='oom_score_adj\x00') personality(0x800000) syz_genetlink_get_family_id$ipvs(&(0x7f00000037c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000200)=[{&(0x7f0000000280)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r4 = io_uring_setup(0x51d9, &(0x7f0000003300)={0x0, 0x9887, 0x8000, 0x1, 0x2f1, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000003700)=[{&(0x7f0000003380)=""/199, 0xc7}, {&(0x7f0000003480)=""/33, 0x21}, {&(0x7f00000034c0)=""/106, 0x6a}, {&(0x7f0000003540)=""/232, 0xe8}, {&(0x7f0000003640)=""/21, 0x15}, {&(0x7f0000003680)=""/80, 0x50}], 0x6) write$UHID_INPUT(r0, &(0x7f0000003800)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) sendto$packet(r5, &(0x7f00000004c0)="1122334455667788", 0x8, 0x0, &(0x7f0000000800)={0x11, 0x300, r6, 0x0}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000900)="001122334455aabbccddeeff8100000108000000", 0x15, 0x0, &(0x7f0000000940)={0x11, 0x300, r6, 0x0}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) nanosleep(&(0x7f0000000a40)={0x0, 0x20000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89fc, &(0x7f0000004880)={'bridge_slave_1\x00', @random="010000201000"}) openat$tun(0xffffffffffffff9c, &(0x7f00000048c0), 0x0, 0x0) socket(0x6, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000004940)={'syzkaller0\x00'}) 44.54638773s ago: executing program 0 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @printk={@lu}, @alu={0x4, 0x1, 0x6, 0x3, 0x8, 0xfffffffffffffffc, 0x1}, @alu={0x4, 0x1, 0xa, 0x4, 0x8, 0xfffffffffffffff8, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x2, 0x5, 0x5, 0xc, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x0, 0x4, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f00000004c0), &(0x7f0000000500)=""/133}, 0x20) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, &(0x7f0000000700)=ANY=[]) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000011, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x5c}, 0x123) shutdown(r2, 0x1) syncfs(r3) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) 37.896771664s ago: executing program 1 (id=390): lsm_set_self_attr(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="650000000000000000007110fbb045bb69baf9ab585100000000040020000000"], 0x20, 0x0) 36.792187965s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) unshare(0x2020600) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000000000)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f00000000c0), 0x0, 0x0) 33.381630466s ago: executing program 34 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) unshare(0x2020600) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000000000)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f00000000c0), 0x0, 0x0) 32.2644199s ago: executing program 0 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) unshare(0x2020600) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000000000)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f00000000c0), 0x0, 0x0) 28.444004726s ago: executing program 1 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) unshare(0x2020600) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000000000)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f00000000c0), 0x0, 0x0) 27.673537605s ago: executing program 4 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @printk={@lu}, @alu={0x4, 0x1, 0x6, 0x3, 0x8, 0xfffffffffffffffc, 0x1}, @alu={0x4, 0x1, 0xa, 0x4, 0x8, 0xfffffffffffffff8, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x2, 0x5, 0x5, 0xc, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x0, 0x4, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f00000004c0), &(0x7f0000000500)=""/133}, 0x20) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000700)=ANY=[]) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x5c}, 0x123) shutdown(r2, 0x1) syncfs(r3) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) 20.428868164s ago: executing program 0 (id=396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x38f9, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) 5.866435246s ago: executing program 35 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019580)=0x7) unshare(0x2020600) syz_ublk_setup_io_uring(0x7bb3, &(0x7f0000000000)={0x0, 0x2391, 0x880, 0x3, 0x2a9}, &(0x7f00000000c0), 0x0, 0x0) 2.945052994s ago: executing program 36 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @printk={@lu}, @alu={0x4, 0x1, 0x6, 0x3, 0x8, 0xfffffffffffffffc, 0x1}, @alu={0x4, 0x1, 0xa, 0x4, 0x8, 0xfffffffffffffff8, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x2, 0x5, 0x5, 0xc, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x0, 0x4, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f00000004c0), &(0x7f0000000500)=""/133}, 0x20) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000700)=ANY=[]) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x5c}, 0x123) shutdown(r2, 0x1) syncfs(r3) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) 0s ago: executing program 37 (id=396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x38f9, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) kernel console output (not intermixed with test programs): [ 50.557810][ T31] audit: type=1400 audit(1792166913.765:111): avc: denied { write } for pid=5452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.605179][ T31] audit: type=1400 audit(1792166913.805:112): avc: denied { write } for pid=5463 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.316433][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 51.316450][ T31] audit: type=1400 audit(1792166914.525:115): avc: denied { write } for pid=5480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.380139][ T31] audit: type=1400 audit(1792166914.585:116): avc: denied { write } for pid=5491 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.549597][ T31] audit: type=1400 audit(1792166914.755:117): avc: denied { write } for pid=5494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.615231][ T31] audit: type=1400 audit(1792166914.815:118): avc: denied { write } for pid=5505 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.792765][ T31] audit: type=1400 audit(1792166914.995:119): avc: denied { write } for pid=5508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.843974][ T31] audit: type=1400 audit(1792166915.045:120): avc: denied { write } for pid=5519 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.021933][ T31] audit: type=1400 audit(1792166915.225:121): avc: denied { write } for pid=5522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.085972][ T31] audit: type=1400 audit(1792166915.295:122): avc: denied { write } for pid=5533 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.252995][ T31] audit: type=1400 audit(1792166915.455:123): avc: denied { write } for pid=5536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.308420][ T31] audit: type=1400 audit(1792166915.515:124): avc: denied { write } for pid=5547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 56.706887][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 56.706904][ T31] audit: type=1400 audit(1792166919.915:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.708085][ T31] audit: type=1400 audit(1792166919.915:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.709771][ T5585] cgroup: Unknown subsys name 'net' [ 56.710968][ T31] audit: type=1400 audit(1792166919.915:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.817919][ T5585] cgroup: Unknown subsys name 'cpuset' [ 56.819981][ T5585] cgroup: Unknown subsys name 'rlimit' [ 56.934621][ T31] audit: type=1400 audit(1792166920.135:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.934986][ T31] audit: type=1400 audit(1792166920.135:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.935195][ T31] audit: type=1400 audit(1792166920.135:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.937533][ T31] audit: type=1400 audit(1792166920.145:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.947783][ T31] audit: type=1400 audit(1792166920.155:136): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.948254][ T31] audit: type=1400 audit(1792166920.155:137): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.041907][ T5589] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.042711][ T31] audit: type=1400 audit(1792166920.245:138): avc: denied { relabelto } for pid=5589 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.011213][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.180100][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.182922][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.183536][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.184064][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.188399][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.189588][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.189876][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.190239][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.191181][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.191640][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.192540][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.192667][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.192849][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.193209][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.193468][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.194280][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.194757][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.194778][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.195924][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.204125][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.218142][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.218514][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.219517][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.226242][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.232617][ T4921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.911273][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.915224][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.932898][ T5598] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 60.945985][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.049131][ T5601] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 61.079531][ T5602] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 61.081287][ T5600] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 61.232798][ T5599] infiniband rxe0: set active [ 61.233685][ T5599] infiniband rxe0: added rxe_eth0 [ 61.248681][ T5599] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 61.248711][ T5599] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 61.248741][ T5599] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 61.297334][ T5599] RDS/IB: rxe0: added [ 61.297517][ T5599] smc: adding ib device rxe0 with port count 1 [ 61.297568][ T5599] smc: ib device rxe0 port 1 has no pnetid [ 61.316446][ T991] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.334987][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.352581][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.578493][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.734067][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.746075][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.746211][ T5598] bridge_slave_0: entered allmulticast mode [ 61.747750][ T5598] bridge_slave_0: entered promiscuous mode [ 61.790235][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.790347][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.790449][ T5598] bridge_slave_1: entered allmulticast mode [ 61.791861][ T5598] bridge_slave_1: entered promiscuous mode [ 61.860270][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.900728][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.930771][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.014358][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.014438][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.014528][ T5602] bridge_slave_0: entered allmulticast mode [ 62.036275][ T5602] bridge_slave_0: entered promiscuous mode [ 62.051855][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.064882][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.064965][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.065061][ T5602] bridge_slave_1: entered allmulticast mode [ 62.066810][ T5602] bridge_slave_1: entered promiscuous mode [ 62.079489][ T5598] team0: Port device team_slave_0 added [ 62.081625][ T5598] team0: Port device team_slave_1 added [ 62.142875][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.142990][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.143089][ T5601] bridge_slave_0: entered allmulticast mode [ 62.144589][ T5601] bridge_slave_0: entered promiscuous mode [ 62.175914][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.206364][ T5604] Bluetooth: hci4: command tx timeout [ 62.206491][ T5604] Bluetooth: hci1: command tx timeout [ 62.210646][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.210748][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.210848][ T5601] bridge_slave_1: entered allmulticast mode [ 62.212331][ T5601] bridge_slave_1: entered promiscuous mode [ 62.218645][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.254725][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.254739][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.254757][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.264391][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.264406][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.264424][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.285809][ T5604] Bluetooth: hci2: command tx timeout [ 62.286092][ T4921] Bluetooth: hci0: command tx timeout [ 62.291668][ T4921] Bluetooth: hci3: command tx timeout [ 62.321532][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.321613][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.321691][ T5600] bridge_slave_0: entered allmulticast mode [ 62.322830][ T5600] bridge_slave_0: entered promiscuous mode [ 62.340822][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.343002][ T5602] team0: Port device team_slave_0 added [ 62.350154][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.350226][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.350467][ T5600] bridge_slave_1: entered allmulticast mode [ 62.353701][ T5600] bridge_slave_1: entered promiscuous mode [ 62.357339][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.358923][ T5602] team0: Port device team_slave_1 added [ 62.402685][ T5599] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.416731][ T5598] hsr_slave_0: entered promiscuous mode [ 62.419193][ T5598] hsr_slave_1: entered promiscuous mode [ 62.500239][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.500255][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.500275][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.506890][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.522361][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.522376][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.522393][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.558927][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.582835][ T5601] team0: Port device team_slave_0 added [ 62.638272][ T5600] team0: Port device team_slave_0 added [ 62.640307][ T5601] team0: Port device team_slave_1 added [ 62.671023][ T5600] team0: Port device team_slave_1 added [ 62.721868][ T5602] hsr_slave_0: entered promiscuous mode [ 62.722339][ T5602] hsr_slave_1: entered promiscuous mode [ 62.722665][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 62.722737][ T5602] Cannot create hsr debugfs directory [ 62.734054][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.734068][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.734086][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.741099][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.741114][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.741131][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.761005][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.761021][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.761039][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.763550][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.763565][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.763584][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.925919][ T5601] hsr_slave_0: entered promiscuous mode [ 62.926384][ T5601] hsr_slave_1: entered promiscuous mode [ 62.926673][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 62.926689][ T5601] Cannot create hsr debugfs directory [ 62.956061][ T5600] hsr_slave_0: entered promiscuous mode [ 62.956790][ T5600] hsr_slave_1: entered promiscuous mode [ 62.957216][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 62.957230][ T5600] Cannot create hsr debugfs directory [ 63.218588][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.224951][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.262502][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.264975][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.297624][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.299863][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.310889][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.317488][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.359838][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.359919][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.360183][ T5599] bridge_slave_0: entered allmulticast mode [ 63.361259][ T5599] bridge_slave_0: entered promiscuous mode [ 63.398435][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.398776][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.398881][ T5599] bridge_slave_1: entered allmulticast mode [ 63.399668][ T5599] bridge_slave_1: entered promiscuous mode [ 63.433917][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.434211][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.445319][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.449364][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.454549][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.455166][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.462054][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.475494][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.484956][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.491396][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.528950][ T5599] team0: Port device team_slave_0 added [ 63.530757][ T5599] team0: Port device team_slave_1 added [ 63.569040][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.569057][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.569077][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.571868][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.571881][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.571898][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.601353][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.612573][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.634340][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.657917][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.670911][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.684287][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.684940][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.698340][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.709162][ T5599] hsr_slave_0: entered promiscuous mode [ 63.710111][ T5599] hsr_slave_1: entered promiscuous mode [ 63.710604][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 63.710618][ T5599] Cannot create hsr debugfs directory [ 63.765759][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.837892][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.855872][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.858892][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.882154][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.884552][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.889125][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.889386][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.911546][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.918598][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.920851][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.931094][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.938295][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.938379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.049655][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.051758][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.052390][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.053932][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.081855][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.088397][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.097555][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.113280][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.115075][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.131183][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.173808][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.173977][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.194545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.194629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.218223][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.287355][ T5604] Bluetooth: hci4: command tx timeout [ 64.287920][ T4921] Bluetooth: hci1: command tx timeout [ 64.322410][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.328953][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.344685][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.344736][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.366047][ T52] Bluetooth: hci2: command tx timeout [ 64.366113][ T5604] Bluetooth: hci0: command tx timeout [ 64.366166][ T4921] Bluetooth: hci3: command tx timeout [ 64.383355][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.383428][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.411617][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.433531][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.433613][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.481348][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.481432][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.505137][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.610673][ T5601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.630506][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.663474][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.663557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.712005][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.712087][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.768577][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.974636][ T5598] veth0_vlan: entered promiscuous mode [ 64.994216][ T5598] veth1_vlan: entered promiscuous mode [ 65.083308][ T5598] veth0_macvtap: entered promiscuous mode [ 65.099342][ T5598] veth1_macvtap: entered promiscuous mode [ 65.150568][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.178526][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.243079][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.249362][ T2995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.249652][ T2995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.249932][ T2995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.250304][ T2995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.416889][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.516150][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.516170][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.554187][ T5602] veth0_vlan: entered promiscuous mode [ 65.582248][ T5602] veth1_vlan: entered promiscuous mode [ 65.653601][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.653620][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.661976][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.703027][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 65.703044][ T31] audit: type=1400 audit(1792166928.905:158): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.Ag2nq0/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.703630][ T31] audit: type=1400 audit(1792166928.905:159): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.707758][ T31] audit: type=1400 audit(1792166928.915:160): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.Ag2nq0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.718630][ T31] audit: type=1400 audit(1792166928.915:161): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.734805][ T5602] veth0_macvtap: entered promiscuous mode [ 65.736905][ T31] audit: type=1400 audit(1792166928.915:162): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.Ag2nq0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.736950][ T31] audit: type=1400 audit(1792166928.945:163): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.Ag2nq0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.763836][ T31] audit: type=1400 audit(1792166928.965:164): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.769870][ T5602] veth1_macvtap: entered promiscuous mode [ 65.802609][ T5600] veth0_vlan: entered promiscuous mode [ 65.809137][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.822694][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.827387][ T5600] veth1_vlan: entered promiscuous mode [ 65.850460][ T31] audit: type=1400 audit(1792166929.045:165): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.870179][ T31] audit: type=1400 audit(1792166929.045:166): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="gadgetfs" ino=8197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.899529][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.899874][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.900197][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.900512][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.901092][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.901138][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.934052][ T31] audit: type=1400 audit(1792166929.125:167): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.030324][ T5600] veth0_macvtap: entered promiscuous mode [ 66.081008][ T5600] veth1_macvtap: entered promiscuous mode [ 66.099003][ T5598] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.110713][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.153952][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.162855][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.162873][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.179863][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.215914][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.219229][ T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.219271][ T45] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.219298][ T45] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.287729][ T5599] veth0_vlan: entered promiscuous mode [ 66.331078][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.331098][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.349352][ T5599] veth1_vlan: entered promiscuous mode [ 66.356573][ T5601] veth0_vlan: entered promiscuous mode [ 66.365682][ T5604] Bluetooth: hci4: command tx timeout [ 66.365744][ T4921] Bluetooth: hci1: command tx timeout [ 66.370925][ T5601] veth1_vlan: entered promiscuous mode [ 66.446162][ T52] Bluetooth: hci2: command tx timeout [ 66.446234][ T5604] Bluetooth: hci0: command tx timeout [ 66.446287][ T4921] Bluetooth: hci3: command tx timeout [ 66.469031][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.469050][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.562885][ T5599] veth0_macvtap: entered promiscuous mode [ 66.592335][ T5599] veth1_macvtap: entered promiscuous mode [ 66.601854][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.601874][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.633783][ T5601] veth0_macvtap: entered promiscuous mode [ 66.646964][ T5601] veth1_macvtap: entered promiscuous mode [ 66.694418][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.712199][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.714646][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.748288][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.796788][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796826][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796852][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796876][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796903][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796930][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796957][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796983][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.906956][ T5810] overlay: ./file0 is not a directory [ 67.030640][ T45] IPVS: starting estimator thread 0... [ 67.098671][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.098690][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.103887][ T5820] overlayfs: missing 'lowerdir' [ 67.135581][ T5817] IPVS: using max 49 ests per chain, 117600 per kthread [ 67.172559][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.172578][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.223564][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.223584][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.267318][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.267346][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.326177][ T5603] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.394023][ T5830] netlink: 'syz.2.15': attribute type 25 has an invalid length. [ 67.405900][ T5797] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.463737][ T2995] IPVS: starting estimator thread 0... [ 67.475393][ T5603] usb 4-1: Using ep0 maxpacket: 32 [ 67.476080][ T5603] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 67.496411][ T5603] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 67.496440][ T5603] usb 4-1: config 0 has no interface number 0 [ 67.496477][ T5603] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.496501][ T5603] usb 4-1: config 0 interface 85 has no altsetting 0 [ 67.499132][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.499155][ T5603] usb 4-1: Product: syz [ 67.499168][ T5603] usb 4-1: Manufacturer: syz [ 67.499181][ T5603] usb 4-1: SerialNumber: syz [ 67.563223][ T5603] usb 4-1: config 0 descriptor?? [ 67.571560][ T5836] IPVS: using max 44 ests per chain, 105600 per kthread [ 67.576632][ T5797] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 67.580910][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.580949][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.594404][ T5797] usb 2-1: config 0 descriptor?? [ 67.610186][ T5797] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 67.643799][ T5839] netlink: 'syz.2.16': attribute type 25 has an invalid length. [ 67.717750][ T5843] overlay: ./file0 is not a directory [ 67.809192][ T5739] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.813453][ T9] usb 2-1: USB disconnect, device number 2 [ 67.959797][ T5739] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 67.960814][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.960853][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.964360][ T5739] usb 1-1: config 0 descriptor?? [ 68.010464][ T5739] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 68.055389][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.143980][ T5858] overlay: ./file0 is not a directory [ 68.182824][ T4182] usb 1-1: USB disconnect, device number 2 [ 68.204452][ T5603] appletouch 4-1:0.85: Geyser mode initialized. [ 68.217146][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 68.218486][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.218949][ T25] usb 5-1: config 0 has no interfaces? [ 68.220433][ T5603] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5 [ 68.227037][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.227059][ T25] usb 5-1: Product: syz [ 68.227071][ T25] usb 5-1: Manufacturer: syz [ 68.227083][ T25] usb 5-1: SerialNumber: syz [ 68.231391][ T25] usb 5-1: config 0 descriptor?? [ 68.327118][ T43] IPVS: starting estimator thread 0... [ 68.415398][ T5863] IPVS: using max 54 ests per chain, 129600 per kthread [ 68.445492][ T5604] Bluetooth: hci4: command tx timeout [ 68.445535][ T4921] Bluetooth: hci1: command tx timeout [ 68.456038][ T5739] usb 4-1: USB disconnect, device number 2 [ 68.484063][ T5847] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 68.484196][ T5847] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 68.491462][ T5739] appletouch 4-1:0.85: input: appletouch disconnected [ 68.507342][ T5847] hsr_slave_0: left promiscuous mode [ 68.509321][ T5847] hsr_slave_1: left promiscuous mode [ 68.526507][ T52] Bluetooth: hci2: command tx timeout [ 68.526544][ T5604] Bluetooth: hci0: command tx timeout [ 68.526567][ T4921] Bluetooth: hci3: command tx timeout [ 68.618312][ T5823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.665413][ T4182] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.730385][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349af800: rx timeout, send abort [ 68.769697][ T5823] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 68.771528][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.771572][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.774930][ T5823] usb 3-1: config 0 descriptor?? [ 68.782352][ T5823] rndis_host 3-1:0.0: missing cdc header ether descriptor [ 68.835475][ T4182] usb 2-1: Using ep0 maxpacket: 32 [ 68.836126][ T4182] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 68.836945][ T5875] netlink: 'syz.0.29': attribute type 25 has an invalid length. [ 68.838172][ T4182] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 68.838193][ T4182] usb 2-1: config 0 has no interface number 0 [ 68.838224][ T4182] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.838246][ T4182] usb 2-1: config 0 interface 85 has no altsetting 0 [ 68.840523][ T4182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.840544][ T4182] usb 2-1: Product: syz [ 68.840557][ T4182] usb 2-1: Manufacturer: syz [ 68.840569][ T4182] usb 2-1: SerialNumber: syz [ 68.844326][ T4182] usb 2-1: config 0 descriptor?? [ 68.997342][ T5603] usb 3-1: USB disconnect, device number 2 [ 69.230652][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349af400: rx timeout, send abort [ 69.230999][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349af800: abort rx timeout. Force session deactivation [ 69.386591][ T5823] usb 5-1: USB disconnect, device number 2 [ 69.649458][ T4182] appletouch 2-1:0.85: Failed to request geyser raw mode [ 69.649641][ T4182] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 69.679706][ T4182] usb 2-1: USB disconnect, device number 3 [ 69.730695][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880349af400: abort rx timeout. Force session deactivation [ 70.025685][ T324] IPVS: starting estimator thread 0... [ 70.135763][ T5899] IPVS: using max 45 ests per chain, 108000 per kthread [ 70.225559][ T4182] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.305904][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.379965][ T5739] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.386975][ T4182] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 70.387935][ T4182] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.387970][ T4182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.395010][ T4182] usb 3-1: config 0 descriptor?? [ 70.396085][ T5723] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.406427][ T4182] rndis_host 3-1:0.0: missing cdc header ether descriptor [ 70.456092][ T9] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 70.456962][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.456986][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.459387][ T9] usb 1-1: config 0 descriptor?? [ 70.464136][ T9] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 70.537045][ T5739] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 70.538042][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.538084][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.539853][ T5739] usb 4-1: config 0 descriptor?? [ 70.544234][ T5739] rndis_host 4-1:0.0: missing cdc header ether descriptor [ 70.578882][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 70.579367][ T5723] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 70.580311][ T5723] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 70.580329][ T5723] usb 5-1: config 0 has no interface number 0 [ 70.580357][ T5723] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.580378][ T5723] usb 5-1: config 0 interface 85 has no altsetting 0 [ 70.581979][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.581997][ T5723] usb 5-1: Product: syz [ 70.582009][ T5723] usb 5-1: Manufacturer: syz [ 70.582021][ T5723] usb 5-1: SerialNumber: syz [ 70.584182][ T5723] usb 5-1: config 0 descriptor?? [ 70.613776][ T4182] usb 3-1: USB disconnect, device number 3 [ 70.668091][ T9] usb 1-1: USB disconnect, device number 3 [ 70.751083][ T5797] usb 4-1: USB disconnect, device number 3 [ 71.232733][ T5723] appletouch 5-1:0.85: Failed to request geyser raw mode [ 71.232892][ T5723] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 71.243966][ T5723] usb 5-1: USB disconnect, device number 3 [ 71.364843][ T31] kauditd_printk_skb: 83 callbacks suppressed [ 71.364862][ T31] audit: type=1400 audit(1792166934.565:251): avc: denied { read } for pid=5919 comm="syz.3.47" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.367161][ T31] audit: type=1400 audit(1792166934.575:252): avc: denied { open } for pid=5919 comm="syz.3.47" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.483055][ T5925] overlay: ./file0 is not a directory [ 71.567447][ T31] audit: type=1400 audit(1792166934.775:253): avc: denied { prog_run } for pid=5924 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.716641][ T5935] netlink: 'syz.3.53': attribute type 25 has an invalid length. [ 71.762043][ T31] audit: type=1400 audit(1792166934.965:254): avc: denied { ioctl } for pid=5938 comm="syz.2.56" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.763904][ T31] audit: type=1400 audit(1792166934.965:255): avc: denied { set_context_mgr } for pid=5938 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.868183][ T31] audit: type=1400 audit(1792166935.015:256): avc: denied { map } for pid=5938 comm="syz.2.56" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.942167][ T45] IPVS: starting estimator thread 0... [ 72.025405][ T5946] IPVS: using max 75 ests per chain, 180000 per kthread [ 72.065418][ T5723] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 72.115411][ T5739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.215886][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 72.216954][ T5797] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.218453][ T5723] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 72.219507][ T5723] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.219535][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 72.221230][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.221248][ T5723] usb 2-1: Product: syz [ 72.221262][ T5723] usb 2-1: Manufacturer: syz [ 72.221271][ T5723] usb 2-1: SerialNumber: syz [ 72.222728][ T5723] usb 2-1: config 0 descriptor?? [ 72.236169][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.275881][ T5739] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 72.276972][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.276992][ T5739] usb 4-1: config 0 has no interfaces? [ 72.277012][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.279708][ T5739] usb 4-1: config 0 descriptor?? [ 72.366515][ T5797] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 72.367337][ T5797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.367373][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.369654][ T5797] usb 5-1: config 0 descriptor?? [ 72.374733][ T5797] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 72.377813][ T25] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 72.378636][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.378672][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.382217][ T25] usb 3-1: config 0 descriptor?? [ 72.387151][ T25] rndis_host 3-1:0.0: missing cdc header ether descriptor [ 72.468987][ T5723] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 72.548184][ T25] usb 4-1: USB disconnect, device number 4 [ 72.575931][ T5797] usb 5-1: USB disconnect, device number 4 [ 72.595066][ T9] usb 3-1: USB disconnect, device number 4 [ 72.640447][ T991] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.665156][ T31] audit: type=1400 audit(1792166935.865:257): avc: denied { search } for pid=5951 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.665757][ T31] audit: type=1400 audit(1792166935.865:258): avc: denied { search } for pid=5951 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.667329][ T31] audit: type=1400 audit(1792166935.875:259): avc: denied { search } for pid=5951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.667365][ T31] audit: type=1400 audit(1792166935.875:260): avc: denied { search } for pid=5951 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.785424][ T5723] rc_core: IR keymap rc-imon-pad not found [ 72.785442][ T5723] Registered IR keymap rc-empty [ 72.785524][ T5723] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 72.785540][ T5723] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 72.871917][ T5723] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 72.888360][ T5723] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 72.908536][ T5723] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:4> initialized [ 73.305950][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 73.306290][ T9] usb 2-1: USB disconnect, device number 4 [ 73.494824][ T5987] overlay: ./file0 is not a directory [ 73.557808][ T991] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 74.128798][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.165873][ T991] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 74.166746][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.166786][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.196838][ T991] usb 4-1: config 0 descriptor?? [ 74.211399][ T991] rndis_host 4-1:0.0: missing cdc header ether descriptor [ 74.275900][ T9] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 74.277664][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.277686][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 74.277713][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.424511][ T4182] usb 4-1: USB disconnect, device number 5 [ 74.525813][ T991] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.554016][ T25] usb 1-1: USB disconnect, device number 4 [ 74.645346][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.697344][ T991] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 74.698166][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.698204][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.699563][ T991] usb 2-1: config 0 descriptor?? [ 74.702204][ T991] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 74.806035][ T9] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 74.806986][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.807056][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.809107][ T9] usb 5-1: config 0 descriptor?? [ 74.813297][ T9] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 74.904111][ T25] usb 2-1: USB disconnect, device number 5 [ 75.015700][ T991] usb 5-1: USB disconnect, device number 5 [ 75.099085][ T6016] overlay: ./file0 is not a directory [ 75.396704][ T5797] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 75.438391][ T6030] overlay: ./file0 is not a directory [ 75.545600][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 75.575559][ T5797] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 75.580855][ T5797] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 75.580914][ T5797] usb 4-1: config 0 has no interface number 0 [ 75.581118][ T5797] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.581223][ T5797] usb 4-1: config 0 interface 85 has no altsetting 0 [ 75.649644][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.649732][ T5797] usb 4-1: Product: syz [ 75.649777][ T5797] usb 4-1: Manufacturer: syz [ 75.649851][ T5797] usb 4-1: SerialNumber: syz [ 75.781431][ T5797] usb 4-1: config 0 descriptor?? [ 76.022081][ T6045] overlay: ./file0 is not a directory [ 76.136037][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 76.244652][ T5797] appletouch 4-1:0.85: Geyser mode initialized. [ 76.263969][ T5797] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input10 [ 76.285919][ T9] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 76.288082][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.288104][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 76.288134][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.462632][ T5739] usb 4-1: USB disconnect, device number 6 [ 76.494696][ T5739] appletouch 4-1:0.85: input: appletouch disconnected [ 76.558754][ T991] usb 2-1: USB disconnect, device number 6 [ 76.615377][ T5797] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.705378][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.779302][ T5797] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 76.781685][ T5797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.781734][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.784703][ T5797] usb 1-1: config 0 descriptor?? [ 76.795851][ T5797] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 76.855818][ T25] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 76.856611][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.856650][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.858166][ T25] usb 5-1: config 0 descriptor?? [ 76.860048][ T25] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 77.012011][ T5723] usb 1-1: USB disconnect, device number 5 [ 77.071324][ T25] usb 5-1: USB disconnect, device number 6 [ 77.285419][ T4182] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 77.365471][ T5797] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 77.435823][ T4182] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 77.436652][ T4182] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.436690][ T4182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.438027][ T4182] usb 4-1: config 0 descriptor?? [ 77.441118][ T4182] rndis_host 4-1:0.0: missing cdc header ether descriptor [ 77.535360][ T5797] usb 2-1: Using ep0 maxpacket: 16 [ 77.538570][ T5797] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.539126][ T5797] usb 2-1: config 0 has no interfaces? [ 77.542081][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.542163][ T5797] usb 2-1: Product: syz [ 77.542178][ T5797] usb 2-1: Manufacturer: syz [ 77.542192][ T5797] usb 2-1: SerialNumber: syz [ 77.545067][ T5797] usb 2-1: config 0 descriptor?? [ 77.647650][ T5797] usb 4-1: USB disconnect, device number 7 [ 77.763614][ T6057] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.763705][ T6057] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.764636][ T6057] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 77.764715][ T6057] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 77.787973][ T6057] hsr_slave_0: left promiscuous mode [ 77.793262][ T6057] hsr_slave_1: left promiscuous mode [ 77.965674][ T5723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.011769][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cad9c00: rx timeout, send abort [ 78.427917][ T5723] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 78.428969][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.429021][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.431717][ T5723] usb 1-1: config 0 descriptor?? [ 78.434282][ T5723] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 78.511818][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cad9c00: abort rx timeout. Force session deactivation [ 78.511931][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cad9400: rx timeout, send abort [ 78.513178][ T4182] usb 2-1: USB disconnect, device number 7 [ 78.635558][ T5797] usb 1-1: USB disconnect, device number 6 [ 78.723061][ T6085] overlay: ./file0 is not a directory [ 78.755401][ T5723] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 78.903949][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 78.903966][ T31] audit: type=1400 audit(1792166942.105:271): avc: denied { listen } for pid=6093 comm="syz.4.114" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.905913][ T5723] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 78.950078][ T5723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.950095][ T5723] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 78.950114][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.012281][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cad9400: abort rx timeout. Force session deactivation [ 79.387103][ T5723] usb 4-1: USB disconnect, device number 8 [ 79.405541][ T5797] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.512805][ T4182] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.715637][ T4182] usb 1-1: Using ep0 maxpacket: 32 [ 79.717522][ T4182] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 79.721830][ T4182] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 79.721898][ T4182] usb 1-1: config 0 has no interface number 0 [ 79.722075][ T4182] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.722129][ T4182] usb 1-1: config 0 interface 85 has no altsetting 0 [ 79.786197][ T4182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.786222][ T4182] usb 1-1: Product: syz [ 79.786235][ T4182] usb 1-1: Manufacturer: syz [ 79.786247][ T4182] usb 1-1: SerialNumber: syz [ 79.788466][ T4182] usb 1-1: config 0 descriptor?? [ 79.846142][ T5797] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 79.846991][ T5797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.847031][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.849550][ T5797] usb 5-1: config 0 descriptor?? [ 79.852426][ T5797] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 79.937136][ T6116] overlay: ./file0 is not a directory [ 80.060001][ T5723] usb 5-1: USB disconnect, device number 7 [ 80.197554][ T4182] appletouch 1-1:0.85: Geyser mode initialized. [ 80.200856][ T4182] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input11 [ 80.417827][ T991] usb 1-1: USB disconnect, device number 7 [ 80.436863][ T5797] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 80.443559][ T991] appletouch 1-1:0.85: input: appletouch disconnected [ 80.481563][ T6134] overlay: ./file0 is not a directory [ 80.585675][ T5797] usb 2-1: Using ep0 maxpacket: 32 [ 80.587950][ T5797] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 80.591147][ T5797] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 80.591169][ T5797] usb 2-1: config 0 has no interface number 0 [ 80.591202][ T5797] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.591225][ T5797] usb 2-1: config 0 interface 85 has no altsetting 0 [ 80.592963][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.592984][ T5797] usb 2-1: Product: syz [ 80.592997][ T5797] usb 2-1: Manufacturer: syz [ 80.593011][ T5797] usb 2-1: SerialNumber: syz [ 80.599790][ T5797] usb 2-1: config 0 descriptor?? [ 80.916773][ T5723] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 80.925681][ T991] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 81.035950][ T5797] appletouch 2-1:0.85: Failed to read mode from device. [ 81.036101][ T5797] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 81.050468][ T5797] usb 2-1: USB disconnect, device number 8 [ 81.076732][ T991] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 81.079334][ T991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.079377][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.083858][ T991] usb 5-1: config 0 descriptor?? [ 81.086901][ T991] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 81.107247][ T5723] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 81.137336][ T5723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.137360][ T5723] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 81.137386][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.250443][ T10] cfg80211: failed to load regulatory.db [ 81.290836][ T10] usb 5-1: USB disconnect, device number 8 [ 81.376647][ T991] usb 4-1: USB disconnect, device number 9 [ 81.455395][ T5797] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 81.605972][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 81.606470][ T5797] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 81.607472][ T5797] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 81.607494][ T5797] usb 1-1: config 0 has no interface number 0 [ 81.607526][ T5797] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.607547][ T5797] usb 1-1: config 0 interface 85 has no altsetting 0 [ 81.609548][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.609572][ T5797] usb 1-1: Product: syz [ 81.609585][ T5797] usb 1-1: Manufacturer: syz [ 81.609598][ T5797] usb 1-1: SerialNumber: syz [ 81.611855][ T5797] usb 1-1: config 0 descriptor?? [ 81.689645][ T6157] overlay: ./file0 is not a directory [ 81.916100][ T6166] overlay: ./file0 is not a directory [ 81.970517][ T6168] overlay: ./file0 is not a directory [ 82.045849][ T991] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.115935][ T5823] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 82.138658][ T6177] overlay: ./file0 is not a directory [ 82.197689][ T991] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 82.198518][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.198556][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.200285][ T991] usb 2-1: config 0 descriptor?? [ 82.202865][ T991] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 82.225512][ T5797] appletouch 1-1:0.85: Geyser mode initialized. [ 82.228768][ T5797] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input13 [ 82.268801][ T5823] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 82.269797][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.269837][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.285384][ T5823] usb 5-1: config 0 descriptor?? [ 82.297059][ T5823] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 82.419809][ T5823] usb 2-1: USB disconnect, device number 9 [ 82.446696][ T5797] usb 1-1: USB disconnect, device number 8 [ 82.474911][ T5797] appletouch 1-1:0.85: input: appletouch disconnected [ 82.498479][ T10] usb 5-1: USB disconnect, device number 9 [ 83.306153][ T991] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.459438][ T991] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 83.480146][ T991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.481556][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.534181][ T991] usb 5-1: config 0 descriptor?? [ 83.548131][ T991] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 83.561790][ T6198] overlay: ./file0 is not a directory [ 83.585432][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 83.746274][ T10] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 83.748070][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.748093][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 83.748129][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.752787][ T991] usb 5-1: USB disconnect, device number 10 [ 83.964506][ T5823] usb 2-1: USB disconnect, device number 10 [ 84.165354][ T5797] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 84.245404][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 84.335891][ T5797] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 84.336776][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.336818][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.340211][ T5797] usb 4-1: config 0 descriptor?? [ 84.342385][ T5797] rndis_host 4-1:0.0: missing cdc header ether descriptor [ 84.396385][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 84.396871][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 84.397719][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 84.397740][ T10] usb 1-1: config 0 has no interface number 0 [ 84.397771][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.397792][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 84.399410][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.399429][ T10] usb 1-1: Product: syz [ 84.399441][ T10] usb 1-1: Manufacturer: syz [ 84.399454][ T10] usb 1-1: SerialNumber: syz [ 84.400800][ T10] usb 1-1: config 0 descriptor?? [ 84.552569][ T5723] usb 4-1: USB disconnect, device number 10 [ 84.625384][ T5609] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 84.745451][ T5797] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 84.776032][ T5609] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 84.776749][ T5609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.776773][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.778402][ T5609] usb 5-1: config 0 descriptor?? [ 84.781213][ T5609] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 84.906030][ T5797] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 84.906913][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.906951][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.909259][ T5797] usb 2-1: config 0 descriptor?? [ 84.912060][ T5797] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 84.990443][ T5797] usb 5-1: USB disconnect, device number 11 [ 85.011659][ T10] appletouch 1-1:0.85: Geyser mode initialized. [ 85.015158][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input14 [ 85.115240][ T5823] usb 2-1: USB disconnect, device number 11 [ 85.135890][ T6222] overlay: ./file0 is not a directory [ 85.227874][ T5797] usb 1-1: USB disconnect, device number 9 [ 85.250342][ T5797] appletouch 1-1:0.85: input: appletouch disconnected [ 85.996039][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 86.055394][ T5723] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 86.158087][ T10] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 86.161461][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.161546][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.161750][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.225873][ T5723] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 86.227293][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.227324][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.228773][ T5723] usb 1-1: config 0 descriptor?? [ 86.231257][ T5723] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 86.415147][ T991] usb 2-1: USB disconnect, device number 12 [ 86.432359][ T5823] usb 1-1: USB disconnect, device number 10 [ 86.618109][ T6251] overlay: ./file0 is not a directory [ 87.030408][ T31] audit: type=1400 audit(1792166950.235:272): avc: denied { write } for pid=6270 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.202864][ T5823] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 87.485423][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 87.605779][ T5823] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 87.606615][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.606641][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.608012][ T5823] usb 5-1: config 0 descriptor?? [ 87.612202][ T5823] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 87.656834][ T10] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 87.658619][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.658660][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.660236][ T10] usb 1-1: config 0 descriptor?? [ 87.662854][ T10] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 87.811505][ T10] usb 5-1: USB disconnect, device number 12 [ 87.872183][ T5723] usb 1-1: USB disconnect, device number 11 [ 88.225469][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 88.388619][ T10] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 88.391100][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.391124][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 88.391153][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.497139][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.498411][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.498818][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.499970][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.500480][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.605898][ T5723] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 88.628721][ T10] usb 2-1: USB disconnect, device number 13 [ 88.767120][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 88.767622][ T5723] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 88.769238][ T5723] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 88.769260][ T5723] usb 5-1: config 0 has no interface number 0 [ 88.769291][ T5723] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.769314][ T5723] usb 5-1: config 0 interface 85 has no altsetting 0 [ 88.772269][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.772293][ T5723] usb 5-1: Product: syz [ 88.772306][ T5723] usb 5-1: Manufacturer: syz [ 88.772320][ T5723] usb 5-1: SerialNumber: syz [ 88.792204][ T5723] usb 5-1: config 0 descriptor?? [ 88.884205][ T6295] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.564753][ T5723] appletouch 5-1:0.85: Geyser mode initialized. [ 89.568328][ T5723] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input15 [ 89.613760][ T31] audit: type=1400 audit(1792166952.815:273): avc: denied { create } for pid=6319 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.613844][ T31] audit: type=1400 audit(1792166952.815:274): avc: denied { bind } for pid=6319 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.684866][ T991] usb 5-1: USB disconnect, device number 13 [ 89.684964][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 89.723406][ T991] appletouch 5-1:0.85: input: appletouch disconnected [ 89.767603][ T31] audit: type=1400 audit(1792166952.975:275): avc: denied { name_bind } for pid=6325 comm="syz.1.209" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.061650][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.061778][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.061883][ T6295] bridge_slave_0: entered allmulticast mode [ 90.063263][ T6295] bridge_slave_0: entered promiscuous mode [ 90.095170][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.095410][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.095550][ T6295] bridge_slave_1: entered allmulticast mode [ 90.097330][ T6295] bridge_slave_1: entered promiscuous mode [ 90.136634][ T5739] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 90.180284][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.181866][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.217595][ T6295] team0: Port device team_slave_0 added [ 90.218922][ T6295] team0: Port device team_slave_1 added [ 90.263890][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.263906][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.263927][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.310005][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.310019][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.310040][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.363293][ T5739] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 90.364297][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.364339][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.398960][ T5739] usb 2-1: config 0 descriptor?? [ 90.401004][ T5739] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 90.401955][ T6295] hsr_slave_0: entered promiscuous mode [ 90.404474][ T6295] hsr_slave_1: entered promiscuous mode [ 90.405108][ T6295] debugfs: 'hsr0' already exists in 'hsr' [ 90.405124][ T6295] Cannot create hsr debugfs directory [ 90.406008][ T4182] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 90.612826][ T991] usb 2-1: USB disconnect, device number 14 [ 90.653096][ T4921] Bluetooth: hci5: command tx timeout [ 90.676928][ T4182] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 90.677784][ T4182] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.677804][ T4182] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 90.677833][ T4182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.680267][ T6295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.683566][ T6295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.684403][ T6295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.709373][ T6295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.710211][ T6295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.719998][ T6295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.720831][ T6295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.741763][ T6295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.759172][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.759255][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.760015][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.760092][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.823557][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.838912][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.839353][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.844717][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.869994][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.870076][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.883029][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.883142][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.913318][ T10] usb 1-1: USB disconnect, device number 12 [ 91.138879][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.374475][ T6295] veth0_vlan: entered promiscuous mode [ 91.388232][ T6295] veth1_vlan: entered promiscuous mode [ 91.412244][ T6295] veth0_macvtap: entered promiscuous mode [ 91.422071][ T6295] veth1_macvtap: entered promiscuous mode [ 91.460622][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.495973][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.557145][ T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.557187][ T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.557217][ T81] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.557247][ T81] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630581][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.630602][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.680951][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.680970][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.773451][ T81] IPVS: starting estimator thread 0... [ 91.848176][ T31] audit: type=1400 audit(1792166955.055:276): avc: denied { write } for pid=6408 comm="syz.1.232" name="mcfilter6" dev="proc" ino=4026533182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.856006][ T6403] IPVS: using max 75 ests per chain, 180000 per kthread [ 92.000932][ T6418] netlink: 'syz.1.236': attribute type 25 has an invalid length. [ 92.035428][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.043297][ T31] audit: type=1400 audit(1792166955.245:277): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 92.088892][ T6422] FAULT_INJECTION: forcing a failure. [ 92.088892][ T6422] name failslab, interval 1, probability 0, space 0, times 1 [ 92.088923][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 92.088944][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 92.088955][ T6422] Call Trace: [ 92.088961][ T6422] [ 92.088968][ T6422] dump_stack_lvl+0x100/0x190 [ 92.089001][ T6422] should_fail_ex.cold+0x5/0xa [ 92.089038][ T6422] should_failslab+0xc2/0x120 [ 92.089067][ T6422] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.089092][ T6422] ? do_getname+0x35/0x390 [ 92.089115][ T6422] do_getname+0x35/0x390 [ 92.089137][ T6422] do_sys_openat2+0xc7/0x1e0 [ 92.089154][ T6422] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.089172][ T6422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.089209][ T6422] __x64_sys_openat+0x12d/0x210 [ 92.089229][ T6422] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.089258][ T6422] do_syscall_64+0x123/0x790 [ 92.089288][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.089308][ T6422] RIP: 0033:0x7f486df9e559 [ 92.089324][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.089341][ T6422] RSP: 002b:00007f486eedc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.089363][ T6422] RAX: ffffffffffffffda RBX: 00007f486e225fa0 RCX: 00007f486df9e559 [ 92.089375][ T6422] RDX: 0000000000000002 RSI: 00002000000065c0 RDI: ffffffffffffff9c [ 92.089387][ T6422] RBP: 00007f486e0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 92.089398][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.089408][ T6422] R13: 00007f486e226038 R14: 00007f486e225fa0 R15: 00007ffd05736368 [ 92.089434][ T6422] [ 92.114695][ T6424] overlay: ./file0 is not a directory [ 92.150602][ T31] audit: type=1400 audit(1792166955.355:278): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.152910][ T31] audit: type=1400 audit(1792166955.355:279): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.176327][ T5739] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 92.244402][ T10] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 92.277507][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.277550][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.325855][ T5739] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 92.326668][ T5739] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.326702][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.447600][ T10] usb 6-1: config 0 descriptor?? [ 92.449717][ T10] rndis_host 6-1:0.0: missing cdc header ether descriptor [ 92.455911][ T5739] usb 5-1: config 0 descriptor?? [ 92.463676][ T5739] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 92.652742][ T10] usb 6-1: USB disconnect, device number 2 [ 92.669767][ T991] usb 5-1: USB disconnect, device number 14 [ 92.695461][ T4921] Bluetooth: hci5: command tx timeout [ 92.835524][ T5739] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 92.986255][ T5739] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 92.987102][ T5739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.987122][ T5739] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 92.987151][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.225819][ T5739] usb 2-1: USB disconnect, device number 15 [ 93.277017][ T6444] netlink: 'syz.5.250': attribute type 25 has an invalid length. [ 93.419316][ T6457] overlay: ./file0 is not a directory [ 93.605589][ T5823] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 93.758642][ T5823] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 93.759667][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.759708][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.764614][ T5823] usb 1-1: config 0 descriptor?? [ 93.799865][ T5739] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.800640][ T5823] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 93.945806][ T5739] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 93.946598][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.946637][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.948196][ T5739] usb 6-1: config 0 descriptor?? [ 93.952108][ T5739] rndis_host 6-1:0.0: missing cdc header ether descriptor [ 93.992769][ T5739] usb 1-1: USB disconnect, device number 13 [ 94.055357][ T5603] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 94.152996][ T5723] usb 6-1: USB disconnect, device number 3 [ 94.226207][ T5603] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 94.227025][ T5603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.227063][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.228583][ T5603] usb 2-1: config 0 descriptor?? [ 94.231001][ T5603] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 94.436066][ T5723] usb 2-1: USB disconnect, device number 16 [ 94.471955][ T6475] netlink: 'syz.4.262': attribute type 25 has an invalid length. [ 94.673685][ T6490] overlay: ./file0 is not a directory [ 94.808440][ T4921] Bluetooth: hci5: command tx timeout [ 94.899017][ T6504] netlink: 'syz.4.275': attribute type 25 has an invalid length. [ 94.965472][ T5739] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.115801][ T5739] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 95.116634][ T5739] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.116654][ T5739] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 95.116682][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.185487][ T5823] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 95.342425][ T5723] usb 6-1: USB disconnect, device number 4 [ 95.344048][ T5823] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 95.345057][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.345095][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.347554][ T5823] usb 5-1: config 0 descriptor?? [ 95.355027][ T5823] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 95.455361][ T4182] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 95.551859][ T10] usb 5-1: USB disconnect, device number 15 [ 95.640709][ T4182] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 95.641871][ T4182] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.641912][ T4182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.645564][ T4182] usb 2-1: config 0 descriptor?? [ 95.648843][ T4182] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 95.713223][ T6527] overlay: ./file0 is not a directory [ 95.806300][ T6530] netlink: 'syz.0.287': attribute type 25 has an invalid length. [ 95.851763][ T5823] usb 2-1: USB disconnect, device number 17 [ 95.992438][ T31] audit: type=1400 audit(1792166959.195:280): avc: denied { mounton } for pid=6540 comm="syz.5.292" path="/10/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=12675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 96.078331][ T31] audit: type=1400 audit(1792166959.285:281): avc: denied { bind } for pid=6544 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.078731][ T31] audit: type=1400 audit(1792166959.285:282): avc: denied { setopt } for pid=6544 comm="syz.5.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.115448][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 96.256103][ T10] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 96.257362][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.257405][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.266913][ T10] usb 1-1: config 0 descriptor?? [ 96.270345][ T10] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 96.462660][ T6558] netlink: 'syz.1.300': attribute type 25 has an invalid length. [ 96.474967][ T5723] usb 1-1: USB disconnect, device number 14 [ 96.536500][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.560107][ T6562] overlay: ./file0 is not a directory [ 96.696971][ T10] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 96.697934][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.697962][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 96.697991][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.846412][ T4921] Bluetooth: hci5: command tx timeout [ 96.908644][ T10] usb 6-1: USB disconnect, device number 5 [ 97.102187][ T6586] netlink: 'syz.4.313': attribute type 25 has an invalid length. [ 97.186754][ T5739] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 97.207128][ T6593] overlay: ./file0 is not a directory [ 97.285359][ T5723] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 97.338697][ T5739] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 97.339552][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.339592][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.342436][ T5739] usb 2-1: config 0 descriptor?? [ 97.351508][ T5739] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 97.467361][ T5723] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 97.469233][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.469275][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.471036][ T5723] usb 1-1: config 0 descriptor?? [ 97.513759][ T5723] rndis_host 1-1:0.0: missing cdc header ether descriptor [ 97.550316][ T5723] usb 2-1: USB disconnect, device number 18 [ 97.681236][ T10] usb 1-1: USB disconnect, device number 15 [ 97.776448][ T4182] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 97.935849][ T4182] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 97.936735][ T4182] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.936776][ T4182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.938356][ T4182] usb 5-1: config 0 descriptor?? [ 97.940689][ T4182] rndis_host 5-1:0.0: missing cdc header ether descriptor [ 98.144586][ T5739] usb 5-1: USB disconnect, device number 16 [ 98.170207][ T6618] netlink: 'syz.1.327': attribute type 25 has an invalid length. [ 98.301942][ T6628] overlay: ./file0 is not a directory [ 98.554838][ T6641] netlink: 'syz.5.338': attribute type 25 has an invalid length. [ 98.595842][ T4182] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 98.748959][ T4182] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 98.750132][ T4182] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.750154][ T4182] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 98.750184][ T4182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.855550][ T5739] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 98.932375][ T5603] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 98.962865][ T5797] usb 1-1: USB disconnect, device number 16 [ 99.006973][ T5739] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 99.008018][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.008058][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.010935][ T5739] usb 2-1: config 0 descriptor?? [ 99.014433][ T5739] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 99.215860][ T5603] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 99.216921][ T4182] usb 2-1: USB disconnect, device number 19 [ 99.219227][ T5603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.219278][ T5603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.221573][ T5603] usb 6-1: config 0 descriptor?? [ 99.224813][ T5603] rndis_host 6-1:0.0: missing cdc header ether descriptor [ 99.425204][ T4182] usb 6-1: USB disconnect, device number 6 [ 99.508887][ T6662] overlay: ./file0 is not a directory [ 99.780439][ T6674] netlink: 'syz.0.352': attribute type 25 has an invalid length. [ 99.921846][ T31] audit: type=1400 audit(1792166963.125:283): avc: denied { write } for pid=6683 comm="syz.0.357" name="set_event" dev="tracefs" ino=2700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 100.095696][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 100.402659][ T10] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 100.471213][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.471624][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.844356][ T10] usb 2-1: config 0 descriptor?? [ 101.301812][ T10] rndis_host 2-1:0.0: missing cdc header ether descriptor [ 102.364142][ T10] usb 2-1: USB disconnect, device number 20 [ 103.273647][ T6692] overlay: ./file0 is not a directory [ 116.979679][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.019217][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.037871][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.221886][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.259029][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.432913][ T31] audit: type=1400 audit(1792166980.635:284): avc: denied { mounton } for pid=6720 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 118.855789][ T5603] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 119.292002][ T5603] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 119.329081][ T4921] Bluetooth: hci6: command tx timeout [ 121.406209][ T4921] Bluetooth: hci6: command tx timeout [ 123.497116][ T4921] Bluetooth: hci6: command tx timeout [ 124.121562][ T5603] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 124.121748][ T5603] usb 1-1: can't read configurations, error -71 [ 125.586396][ T4921] Bluetooth: hci6: command tx timeout [ 127.400084][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.400561][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.467546][ T6745] netlink: 'syz.0.369': attribute type 25 has an invalid length. [ 133.806533][ T5603] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 133.977171][ T4182] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 134.326720][ T4182] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 138.732908][ T5603] usb 2-1: device descriptor read/all, error -71 [ 139.578108][ T4182] usb 6-1: unable to read config index 0 descriptor/all [ 139.578479][ T4182] usb 6-1: can't read configurations, error -110 [ 155.845760][ T6720] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.916891][ T6820] capability: warning: `syz.1.387' uses deprecated v2 capabilities in a way that may be insecure [ 173.140697][ T5797] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.323272][ T31] audit: type=1400 audit(1792167036.475:285): avc: denied { read } for pid=6818 comm="syz.1.387" name="sg0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.529659][ T31] audit: type=1400 audit(1792167036.675:286): avc: denied { open } for pid=6818 comm="syz.1.387" path="/dev/sg0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.536415][ T5797] usb 5-1: Using ep0 maxpacket: 16 [ 173.704755][ T5797] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.980777][ T5797] usb 5-1: config 0 has no interfaces? [ 174.184094][ T5797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.184118][ T5797] usb 5-1: Product: syz [ 174.184133][ T5797] usb 5-1: Manufacturer: syz [ 174.184148][ T5797] usb 5-1: SerialNumber: syz [ 174.774049][ T5797] usb 5-1: config 0 descriptor?? [ 179.088684][ T5797] usb 5-1: can't set config #0, error -71 [ 179.397187][ T5797] usb 5-1: USB disconnect, device number 17 [ 183.864004][ T5611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 184.019289][ T5611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.024888][ T5611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.053828][ T5611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.187057][ T5611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 185.737654][ T4921] Bluetooth: hci2: command 0x0406 tx timeout [ 185.740991][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 185.808889][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 185.809043][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 185.816375][ T4921] Bluetooth: hci3: command 0x0406 tx timeout [ 186.365820][ T5604] Bluetooth: hci7: command tx timeout [ 188.446118][ T5621] Bluetooth: hci7: command tx timeout [ 188.823323][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.823810][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.535526][ T5621] Bluetooth: hci7: command tx timeout [ 190.933457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 193.186346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 193.293628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 193.390845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 193.408955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 193.494489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 193.528103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 193.595412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 193.702780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 193.801549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 194.090424][ T5621] Bluetooth: hci7: command tx timeout [ 194.157041][ T31] audit: type=1400 audit(1792167054.345:287): avc: denied { read } for pid=6839 comm="syz.0.393" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 194.157506][ T31] audit: type=1400 audit(1792167054.355:288): avc: denied { open } for pid=6839 comm="syz.0.393" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 211.340926][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 215.446573][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 215.454422][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 215.477862][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 215.584678][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 215.677998][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 218.056873][ T5621] Bluetooth: hci8: command tx timeout [ 220.128725][ T5621] Bluetooth: hci8: command tx timeout [ 222.219891][ T5621] Bluetooth: hci8: command tx timeout [ 224.295621][ T5621] Bluetooth: hci8: command tx timeout [ 229.707884][ T5612] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 229.717546][ T5612] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 229.803292][ T5612] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 229.920321][ T5612] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 230.103080][ T5612] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 232.305586][ T5612] Bluetooth: hci9: command tx timeout [ 233.900190][ T5621] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 233.999200][ T5621] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 234.018115][ T5621] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 234.117271][ T5621] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 234.186852][ T5621] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 234.375679][ T5613] Bluetooth: hci9: command tx timeout [ 236.367030][ T5613] Bluetooth: hci10: command tx timeout [ 236.452913][ T5613] Bluetooth: hci9: command tx timeout [ 237.309321][ T5612] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 237.352514][ T5612] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 237.381006][ T5612] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 237.485119][ T5612] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 237.552892][ T5612] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 238.470049][ T5613] Bluetooth: hci10: command tx timeout [ 238.585551][ T5613] Bluetooth: hci9: command tx timeout [ 240.206072][ T5612] Bluetooth: hci11: command tx timeout [ 240.527782][ T5612] Bluetooth: hci10: command tx timeout [ 242.047036][ T5612] Bluetooth: hci6: command 0x0406 tx timeout [ 242.285744][ T5612] Bluetooth: hci11: command tx timeout [ 242.621935][ T5613] Bluetooth: hci10: command tx timeout [ 244.375512][ T5613] Bluetooth: hci11: command tx timeout [ 246.446729][ T5613] Bluetooth: hci11: command tx timeout [ 250.233688][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.234174][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.823064][ T5612] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 251.894569][ T5612] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 251.912613][ T5612] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 251.982184][ T5612] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 252.048285][ T5612] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 254.686277][ T5612] Bluetooth: hci12: command tx timeout [ 256.775538][ T5612] Bluetooth: hci12: command tx timeout [ 258.859462][ T5612] Bluetooth: hci12: command tx timeout [ 260.931143][ T5612] Bluetooth: hci12: command tx timeout [ 264.622014][ T6856] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.508588][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.629444][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.639903][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.715012][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.750024][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.388761][ T6856] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.857156][ T5612] Bluetooth: hci5: command tx timeout [ 274.932632][ T5612] Bluetooth: hci5: command tx timeout [ 277.017817][ T5612] Bluetooth: hci5: command tx timeout [ 279.087971][ T5612] Bluetooth: hci5: command tx timeout [ 283.859039][ T6856] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.993477][ T6856] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.950037][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.971943][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.988513][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.102748][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.133736][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.387819][ T5612] Bluetooth: hci1: command tx timeout [ 297.057301][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.196998][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.368592][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.434674][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.585018][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.470506][ T5612] Bluetooth: hci1: command tx timeout [ 299.811373][ T5612] Bluetooth: hci2: command tx timeout [ 300.528123][ T5612] Bluetooth: hci1: command tx timeout [ 301.390179][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.480583][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.494104][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.577974][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.611282][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.914348][ T5613] Bluetooth: hci2: command tx timeout [ 302.606869][ T5613] Bluetooth: hci1: command tx timeout [ 303.808503][ T5613] Bluetooth: hci3: command tx timeout [ 303.966760][ T5613] Bluetooth: hci2: command tx timeout [ 305.887014][ T5613] Bluetooth: hci3: command tx timeout [ 306.046014][ T5613] Bluetooth: hci2: command tx timeout [ 307.967258][ T5613] Bluetooth: hci3: command tx timeout [ 310.048172][ T5613] Bluetooth: hci3: command tx timeout [ 311.684565][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.685032][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.895999][ T6856] bridge_slave_1: left allmulticast mode [ 312.896071][ T6856] bridge_slave_1: left promiscuous mode [ 312.899752][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.191350][ T6856] bridge_slave_0: left allmulticast mode [ 314.191417][ T6856] bridge_slave_0: left promiscuous mode [ 314.246649][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.886534][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.905103][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.998687][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.041763][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.070920][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.272613][ T5613] Bluetooth: hci7: command tx timeout [ 319.341694][ T5613] Bluetooth: hci7: command tx timeout [ 321.405504][ T5613] Bluetooth: hci7: command tx timeout [ 323.488977][ T5613] Bluetooth: hci7: command tx timeout [ 331.282572][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 331.313819][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 331.381225][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 331.410288][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 331.462420][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 333.646815][ T5613] Bluetooth: hci8: command tx timeout [ 335.727311][ T5613] Bluetooth: hci8: command tx timeout [ 337.806772][ T5613] Bluetooth: hci8: command tx timeout [ 338.348027][ T6856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.848903][ T6856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.121694][ T6856] bond0 (unregistering): Released all slaves [ 339.887961][ T5613] Bluetooth: hci8: command tx timeout [ 355.942045][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.016770][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.031417][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.056346][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.124135][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.300037][ T5612] Bluetooth: hci6: command tx timeout [ 360.366469][ T5612] Bluetooth: hci6: command tx timeout [ 360.742550][ T5613] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 360.783278][ T5613] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 360.856693][ T5613] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 360.889825][ T5613] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 360.960800][ T5613] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 362.445718][ T5613] Bluetooth: hci6: command tx timeout [ 363.175683][ T5613] Bluetooth: hci9: command tx timeout [ 364.201184][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.219251][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.233808][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.270128][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.319989][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.545342][ T5613] Bluetooth: hci6: command tx timeout [ 365.246625][ T5613] Bluetooth: hci9: command tx timeout [ 366.456077][ T5613] Bluetooth: hci5: command tx timeout [ 367.336208][ T5613] Bluetooth: hci9: command tx timeout [ 368.527823][ T5612] Bluetooth: hci5: command tx timeout [ 369.415540][ T5612] Bluetooth: hci9: command tx timeout [ 370.611705][ T5612] Bluetooth: hci5: command tx timeout [ 372.685866][ T5612] Bluetooth: hci5: command tx timeout [ 373.114006][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.114492][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.872667][ T5613] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 376.904158][ T5613] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 376.912697][ T5613] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 376.954385][ T5613] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 377.007857][ T5613] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 378.812399][ T6976] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.422186][ T5613] Bluetooth: hci10: command tx timeout [ 381.487089][ T5613] Bluetooth: hci10: command tx timeout [ 383.575575][ T5613] Bluetooth: hci10: command tx timeout [ 385.655901][ T5613] Bluetooth: hci10: command tx timeout [ 391.938834][ T31] audit: type=1400 audit(1792167255.145:289): avc: denied { write } for pid=6996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.304713][ T5612] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 394.336574][ T5612] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 394.342137][ T5612] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 394.433415][ T5612] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 394.454094][ T5612] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 396.531969][ T5612] Bluetooth: hci11: command tx timeout [ 397.224485][ T6856] hsr_slave_0: left promiscuous mode [ 397.648281][ T6856] hsr_slave_1: left promiscuous mode [ 397.771786][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.771906][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.031069][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.031121][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.629529][ T5612] Bluetooth: hci11: command tx timeout [ 399.204987][ T6856] veth1_macvtap: left promiscuous mode [ 399.231940][ T6856] veth0_macvtap: left promiscuous mode [ 399.242380][ T6856] veth1_vlan: left promiscuous mode [ 399.243136][ T6856] veth0_vlan: left promiscuous mode [ 400.700872][ T5612] Bluetooth: hci11: command tx timeout [ 402.765668][ T5612] Bluetooth: hci11: command tx timeout [ 402.853665][ T31] audit: type=1400 audit(1792167266.055:290): avc: denied { write } for pid=7062 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.164933][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.191001][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.209119][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.250447][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.319074][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.917088][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.923408][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.930251][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.956650][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.970694][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.565518][ T5612] Bluetooth: hci1: command tx timeout [ 414.128171][ T5612] Bluetooth: hci2: command tx timeout [ 415.650845][ T5612] Bluetooth: hci1: command tx timeout [ 416.215463][ T5612] Bluetooth: hci2: command tx timeout [ 417.744501][ T5612] Bluetooth: hci1: command tx timeout [ 417.810968][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.826559][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.874061][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.923008][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.994007][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.289215][ T5612] Bluetooth: hci2: command tx timeout [ 419.810523][ T5612] Bluetooth: hci1: command tx timeout [ 420.226076][ T5612] Bluetooth: hci3: command tx timeout [ 420.365639][ T5612] Bluetooth: hci2: command tx timeout [ 422.288494][ T5612] Bluetooth: hci3: command tx timeout [ 424.370741][ T5612] Bluetooth: hci3: command tx timeout [ 425.276776][ T6856] team0 (unregistering): Port device team_slave_1 removed [ 426.223337][ T6856] team0 (unregistering): Port device team_slave_0 removed [ 426.456051][ T5612] Bluetooth: hci3: command tx timeout [ 427.742241][ T5613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 427.757299][ T5613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 427.762853][ T5613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 427.805681][ T5613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 427.825882][ T5613] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 429.965724][ T5612] Bluetooth: hci7: command tx timeout [ 432.045789][ T5612] Bluetooth: hci7: command tx timeout [ 434.144547][ T5612] Bluetooth: hci7: command tx timeout [ 434.546748][ T5981] ------------[ cut here ]------------ [ 434.546777][ T5981] time_after(jiffies, warn_timeout) [ 434.546798][ T5981] WARNING: io_uring/io-wq.c:1378 at io_wq_put_and_exit+0x36c/0x9d0, CPU#0: syz.2.67/5981 [ 434.568315][ T5981] Modules linked in: [ 434.572260][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) [ 434.581581][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 434.592047][ T5981] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 434.598304][ T5981] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 cf af 79 0a 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 6f 0e e5 fc 4d 85 ff 79 aa e8 c5 13 e5 fc 90 <0f> 0b 90 eb 9f e8 ba 13 e5 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 434.620927][ T5981] RSP: 0000:ffffc9000528f8c8 EFLAGS: 00010293 [ 434.627736][ T5981] RAX: 0000000000000000 RBX: ffff888035b0b000 RCX: 0000000000000000 [ 434.635920][ T5981] RDX: ffff88802bc30000 RSI: ffffffff852742cb RDI: ffff88802bc30000 [ 434.643908][ T5981] RBP: fffffbfff1f41e50 R08: 0000000000000007 R09: 0000000000000000 [ 434.652350][ T5981] R10: ffffffffffffe822 R11: 0000000000000000 R12: 0000000100001c24 [ 434.660615][ T5981] R13: 0000000000001b58 R14: ffff888035b0b018 R15: ffffffffffffe822 [ 434.668844][ T5981] FS: 00007ff8a36c86c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 434.678036][ T5981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.684704][ T5981] CR2: 00007febd324eb08 CR3: 0000000055a72000 CR4: 00000000003526f0 [ 434.692865][ T5981] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.696609][ T5981] [ 434.699654][ T5981] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 434.711388][ T5981] ? __pfx___might_resched+0x10/0x10 [ 434.716953][ T5981] ? io_wq_set_exit_on_idle+0x156/0x290 [ 434.722707][ T5981] io_uring_clean_tctx+0x114/0x180 [ 434.728181][ T5981] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 434.733828][ T5981] ? percpu_counter_add_batch+0xb9/0x230 [ 434.739853][ T5981] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 434.746638][ T5981] io_uring_cancel_generic+0x76c/0x7d0 [ 434.752358][ T5981] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 434.758672][ T5981] ? lock_acquire+0x1d1/0x380 [ 434.763511][ T5981] ? __pfx_autoremove_wake_function+0x10/0x10 [ 434.771243][ T5981] ? do_exit+0x2b6/0x2a50 [ 434.776013][ T5981] ? rcu_is_watching+0x13/0xc0 [ 434.780841][ T5981] ? io_uring_unreg_ringfd+0xca/0x140 [ 434.786841][ T5981] do_exit+0x344/0x2a50 [ 434.791220][ T5981] ? __pfx_do_exit+0x10/0x10 [ 434.796157][ T5981] ? do_raw_spin_lock+0x128/0x260 [ 434.801230][ T5981] ? find_held_lock+0x2b/0x80 [ 434.806210][ T5981] ? get_signal+0x7e0/0x21e0 [ 434.810939][ T5981] do_group_exit+0xd5/0x2a0 [ 434.812174][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 434.822474][ T5981] get_signal+0x1ec7/0x21e0 [ 434.827548][ T5981] ? __pfx_get_signal+0x10/0x10 [ 434.832539][ T5981] ? do_futex+0x190/0x440 [ 434.837209][ T5981] arch_do_signal_or_restart+0x91/0x7e0 [ 434.842862][ T5981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 434.849775][ T5981] exit_to_user_mode_loop+0x139/0x700 [ 434.855516][ T5981] ? rcu_is_watching+0x13/0xc0 [ 434.860557][ T5981] do_syscall_64+0x661/0x790 [ 434.865398][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.871335][ T5981] RIP: 0033:0x7ff8a279e559 [ 434.875939][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.896299][ T5981] RSP: 002b:00007ff8a36c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 434.904886][ T5981] RAX: fffffffffffffe00 RBX: 00007ff8a2a25fa8 RCX: 00007ff8a279e559 [ 434.912975][ T5981] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8a2a25fa8 [ 434.921106][ T5981] RBP: 00007ff8a2a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 434.929855][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.938027][ T5981] R13: 00007ff8a2a26038 R14: 00007ffd5f826f00 R15: 00007ffd5f826fe8 [ 434.946555][ T5981] [ 434.949587][ T5981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 434.956877][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) [ 434.965992][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 434.976050][ T5981] Call Trace: [ 434.979348][ T5981] [ 434.982383][ T5981] dump_stack_lvl+0x100/0x190 [ 434.987197][ T5981] vpanic+0x553/0x970 [ 434.991270][ T5981] ? __pfx_vpanic+0x10/0x10 [ 434.996047][ T5981] panic+0xd1/0xe0 [ 434.999861][ T5981] ? __pfx_panic+0x10/0x10 [ 435.004804][ T5981] check_panic_on_warn.cold+0x19/0x34 [ 435.010313][ T5981] ? io_wq_put_and_exit+0x36c/0x9d0 [ 435.015558][ T5981] __warn.cold+0x191/0x318 [ 435.020074][ T5981] __report_bug+0x30f/0x440 [ 435.024633][ T5981] ? io_wq_put_and_exit+0x36c/0x9d0 [ 435.029978][ T5981] ? __pfx___report_bug+0x10/0x10 [ 435.035188][ T5981] ? lock_acquire+0x1d1/0x380 [ 435.039921][ T5981] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 435.045973][ T5981] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 435.053630][ T5981] ? io_wq_put_and_exit+0x36c/0x9d0 [ 435.058926][ T5981] report_bug+0xb3/0x220 [ 435.063212][ T5981] ? io_wq_put_and_exit+0x36c/0x9d0 [ 435.068464][ T5981] handle_bug+0x16a/0x2a0 [ 435.072894][ T5981] exc_invalid_op+0x17/0x50 [ 435.077496][ T5981] asm_exc_invalid_op+0x1a/0x20 [ 435.082393][ T5981] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 435.088248][ T5981] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 cf af 79 0a 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 6f 0e e5 fc 4d 85 ff 79 aa e8 c5 13 e5 fc 90 <0f> 0b 90 eb 9f e8 ba 13 e5 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 435.107868][ T5981] RSP: 0000:ffffc9000528f8c8 EFLAGS: 00010293 [ 435.113961][ T5981] RAX: 0000000000000000 RBX: ffff888035b0b000 RCX: 0000000000000000 [ 435.121934][ T5981] RDX: ffff88802bc30000 RSI: ffffffff852742cb RDI: ffff88802bc30000 [ 435.129908][ T5981] RBP: fffffbfff1f41e50 R08: 0000000000000007 R09: 0000000000000000 [ 435.137880][ T5981] R10: ffffffffffffe822 R11: 0000000000000000 R12: 0000000100001c24 [ 435.145861][ T5981] R13: 0000000000001b58 R14: ffff888035b0b018 R15: ffffffffffffe822 [ 435.154050][ T5981] ? io_wq_put_and_exit+0x36b/0x9d0 [ 435.159461][ T5981] ? io_wq_put_and_exit+0x36b/0x9d0 [ 435.164750][ T5981] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 435.170563][ T5981] ? __pfx___might_resched+0x10/0x10 [ 435.175889][ T5981] ? io_wq_set_exit_on_idle+0x156/0x290 [ 435.181605][ T5981] io_uring_clean_tctx+0x114/0x180 [ 435.186811][ T5981] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 435.192486][ T5981] ? percpu_counter_add_batch+0xb9/0x230 [ 435.198285][ T5981] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 435.204906][ T5981] io_uring_cancel_generic+0x76c/0x7d0 [ 435.210651][ T5981] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 435.216717][ T5981] ? lock_acquire+0x1d1/0x380 [ 435.221468][ T5981] ? __pfx_autoremove_wake_function+0x10/0x10 [ 435.227567][ T5981] ? do_exit+0x2b6/0x2a50 [ 435.231981][ T5981] ? rcu_is_watching+0x13/0xc0 [ 435.236814][ T5981] ? io_uring_unreg_ringfd+0xca/0x140 [ 435.242319][ T5981] do_exit+0x344/0x2a50 [ 435.246703][ T5981] ? __pfx_do_exit+0x10/0x10 [ 435.251420][ T5981] ? do_raw_spin_lock+0x128/0x260 [ 435.256473][ T5981] ? find_held_lock+0x2b/0x80 [ 435.261178][ T5981] ? get_signal+0x7e0/0x21e0 [ 435.265905][ T5981] do_group_exit+0xd5/0x2a0 [ 435.270604][ T5981] get_signal+0x1ec7/0x21e0 [ 435.275443][ T5981] ? __pfx_get_signal+0x10/0x10 [ 435.280387][ T5981] ? do_futex+0x190/0x440 [ 435.284826][ T5981] arch_do_signal_or_restart+0x91/0x7e0 [ 435.290473][ T5981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 435.297050][ T5981] exit_to_user_mode_loop+0x139/0x700 [ 435.302430][ T5981] ? rcu_is_watching+0x13/0xc0 [ 435.307281][ T5981] do_syscall_64+0x661/0x790 [ 435.312006][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.317934][ T5981] RIP: 0033:0x7ff8a279e559 [ 435.322366][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.341959][ T5981] RSP: 002b:00007ff8a36c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.350375][ T5981] RAX: fffffffffffffe00 RBX: 00007ff8a2a25fa8 RCX: 00007ff8a279e559 [ 435.358341][ T5981] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff8a2a25fa8 [ 435.366308][ T5981] RBP: 00007ff8a2a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 435.374274][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.382238][ T5981] R13: 00007ff8a2a26038 R14: 00007ffd5f826f00 R15: 00007ffd5f826fe8 [ 435.390533][ T5981] [ 435.393746][ T5981] Kernel Offset: disabled [ 435.398070][ T5981] Rebooting in 86400 seconds..