last executing test programs: 5m56.505818341s ago: executing program 0 (id=1572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x3, 0x5, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5d0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}], 0x1, 0x40002000, 0x0) 5m54.943258955s ago: executing program 0 (id=1576): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="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", 0x111}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x84, 0x1000, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 5m52.479941635s ago: executing program 0 (id=1584): set_mempolicy(0x8004, &(0x7f0000003ac0)=0x9, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x24) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x146) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000080)={0x1d, r7}, 0x10) close(r6) r8 = fanotify_init(0xf00, 0x40000) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000280)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="2e2be50e68522b5f2692e32496a384bbfcd86b33f3f6c3dcfb7246cf07dcebd5d3e633cbf26a69ae75354aea7638212efac2cc847684f64b4bb5dead675ad105a7c755e7284232781c9c59690ad4970bd225bfcd3d88f199e70ea54edf06c1080cc7de5055754031badda518c27f0564a20f6c589e3397b6c0381aa4e006617f28d9ff36b25e12453d490bd94f67321382ed42696a7cb7a629469dd68033c9c76c66ea2ae5", 0xa5}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000080)="41cd416eafbcd5504d4b1f81ea8f9f891266f808f5e05dc8536c0b4140a12693862dd382e281085080c1014986aa72f9de300f9aff39beef92119dbeebba", 0x3e}, {&(0x7f00000003c0)="0e5e9997f9730845387c2973fafb845b5649e4b5e2c9c6dfb73e76304c94b2042e8a835e8c864dd9431c8e34be3454faa11c54d9bbdd6760b41ee8727a824652188024d98c9db1209b9f64282cd12c820dbfb8750016e86cf918f0303647866af70ffe2156d859c90bb3ffd2730c67442f74f7be65ab0a715189298f0ba8c70e49cecad2637537ae23b9b130c793e09c2c2aaaaf873db9d4757fab2c87a74f0ca732eacb176173bee707343901409c01526bbfa34507f509b795b96ff8fd738e2b901d1e821189f5275095dfd5f10e142c6168161922944c", 0xd8}, {&(0x7f0000000100)="3adae284947535b692d270c698e0d872346df92bfb05a581aa59e3cec84807853cbcfc1a70220e03c00f0fac15240b4031", 0x31}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x108}, 0x40040) fanotify_mark(r8, 0x105, 0x5000003a, r5, 0x0) 5m52.278770826s ago: executing program 0 (id=1586): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000100)=0x3, 0x5, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5d0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}], 0x1, 0x40002000, 0x0) 5m51.277793007s ago: executing program 0 (id=1588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) bind$802154_raw(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000201030000000000000000000a000004300001802c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000bb0c0200000000010006000000"], 0x50}, 0x1, 0x0, 0x0, 0x10050}, 0x4) close(r3) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x12042, 0x1}) io_uring_enter(r7, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 5m50.610446769s ago: executing program 0 (id=1591): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 5m34.113411287s ago: executing program 32 (id=1591): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 9.388071191s ago: executing program 1 (id=2933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000201030000000000000000000a000004300001802c00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000bb0c020000000001000600"], 0x50}, 0x1, 0x0, 0x0, 0x10050}, 0x4) close(r2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 8.219582646s ago: executing program 1 (id=2937): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120101020000004025021b00010159a00000040000000701c9b7d56443b85ea2000000d07c000df3374d2eae1b40fb070cd3a011ed39ec90e2cb6342030441dbc0f5b7d1b3f87be027db3ab3a4da8b63811f8f24266054cd7e74c5436dce62c75730800500000000000000f00bfd429a1fefd3def5a14d74f11513f54f6c7077f79bd9d8d8b2fa2b280aefb2af2dce89d801cdd39c874c16b132414921e1cbdf475322ffa91cf91a992742db2a40ebf58e64f242f5e7a3b768801c461112cc7752b1706f79397f38e0524457ca225c7a8fcafb341f7a21dfe63be8"], &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x6, 0xff, 0x4b}, 0x18, &(0x7f0000000100)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x800, 0xf, 0x7, [0xffc030]}, @ptm_cap={0x3}]}, 0x2, [{0x92, &(0x7f00000001c0)=@string={0x92, 0x3, "7daa164689816b757805885fcd3777673df026e5ec4b16ed2457743ed0fd80c2ac0c17e94ab65c917945093226b5daa130f64123e689c7ea7b681836d6692c3818435b3cedf11a78f2548aee39459d1e29e3e803c449c6b73e7e9a9828dc6a5ed273f95ad076a4f0a1de0efd8357aa345366864c5670a3c9c5e5ae6dfca0833069fe35b9bfb5130f68054de0edcb4ac0"}}, {0x0, 0x0}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000008500000005000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00'], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r4, @ANYBLOB="00000000e3fffbffb62000750800c1ca001100"/31], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) 5.516514139s ago: executing program 2 (id=2952): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvfrom(r0, 0x0, 0x0, 0x983706c3b03e3dca, 0x0, 0x0) 5.496777682s ago: executing program 2 (id=2953): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="04cca4926ee85bfa70b91762fca3a7611b4f36d0f7eeb181b16d6b68a69616777eec1103f980ff47ee3fc145d57691c1d0b8ddd3b4f6659b37e6a40b19016155e0fde46523a5de4bdb7f3559b1a664dd39f0ed81065f2112795a207902ab545d4d6b374e6746d234d444c0b064798cc55a780e3a5eeb6796f44c2d3a17333473a3ed357a10ea4042390b7c8b6730b3c363a4fdaf4063d730704810dc481b10619217deac1bf8276c0712298ce70f4aa07a75d67dc455d4ffc066e2a832f71f1043642bc714b3641dc67f0cf1f6fe0b8c9f1ea9b92ba6c08aec0000f4ce06ef14b8c9c6f9370179bc1f27bbe425c5d7", 0xef}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="60000000000000001d000000e7a000007f713318d7efefb27c404556c8840cae7aa3db177953cde8e73aa68bc1525f9af651eab593cff9e2ca67afb506ac3306512742c5dd3f71d7af67c6a7155a8b5b9ce7bba73b7a1f62c53cac1614d90000e0000000000000000e01000006000000fdebe371b85fd727a646776a0f5b917f7ea1eed1073eaf18eb9815dca4ca0c556319d7d822cb0a05f9602926ae88f54aed4e12b9c9c0032330ae148878bee28745dd588d2b73270100000000000000288d22982dbf309ff96279308ce34a54716d637c1681b43912ca0410477c5c02b7a3bb4d401185df2dbcaf18bf9ad0887aa7301061891c24f0f0f55a8693eb2c09f53aa951aaa86832b40967e7788a1ca05692f9e8988fef59b803c6f168e635607278328920da40838bd4383d96b1a772915b5ab74f0601bd614e6bd2949fbd6f10b15ff9250000000000000074f2450fb1247d2d72b5c92aa5485afed5ce68d9984ff20616f41c88f89cc80846bd5f387e2a3adaa36816ff8b0c26520e597b23b1"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x84, 0x1000, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 4.653225833s ago: executing program 4 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r1, 0x719, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x880) 4.630813253s ago: executing program 3 (id=2955): set_mempolicy(0x8004, &(0x7f0000003ac0)=0x9, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0xfdef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x24) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x146) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) bind$can_raw(r8, &(0x7f0000000080), 0x10) close(r8) sendmsg(r5, &(0x7f0000000180)={&(0x7f0000000280)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="2e2be50e68522b5f2692e32496a384bbfcd86b33f3f6c3dcfb7246cf07dcebd5d3e633cbf26a69ae75354aea7638212efac2cc847684f64b4bb5dead675ad105a7c755e7284232781c9c59690ad4970bd225bfcd3d88f199e70ea54edf06c1080cc7de5055754031badda518c27f0564a20f6c589e3397b6c0381aa4e006617f28d9ff36b25e12453d490bd94f67321382ed42696a7cb7a629469dd68033c9c76c66ea2ae5", 0xa5}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000080)="41cd416eafbcd5504d4b1f81ea8f9f891266f808f5e05dc8536c0b4140a12693862dd382e281085080c1014986aa72f9de300f9aff39beef92119dbeebba", 0x3e}, {&(0x7f00000003c0)="0e5e9997f9730845387c2973fafb845b5649e4b5e2c9c6dfb73e76304c94b2042e8a835e8c864dd9431c8e34be3454faa11c54d9bbdd6760b41ee8727a824652188024d98c9db1209b9f64282cd12c820dbfb8750016e86cf918f0303647866af70ffe2156d859c90bb3ffd2730c67442f74f7be65ab0a715189298f0ba8c70e49cecad2637537ae23b9b130c793e09c2c2aaaaf873db9d4757fab2c87a74f0ca732eacb176173bee707343901409c01526bbfa34507f509b795b96ff8fd738e2b901d1e821189f5275095dfd5f10e142c6168161922944c", 0xd8}, {&(0x7f0000000100)="3adae284947535b692d270c698e0d872346df92bfb05a581aa59e3cec84807853cbcfc1a70220e03c00f0fac15240b4031", 0x31}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x108}, 0x40040) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r7, 0x0) 4.610863804s ago: executing program 1 (id=2956): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x5}]) 4.486432933s ago: executing program 2 (id=2957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001900)={0x0, [{0x1, 0x18, 0x9, &(0x7f0000000000)="b618bb"}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x28, 0x4, &(0x7f0000002080)="9176471662"}, {0x0, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0xd94, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xd03, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x47d, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x38, 0xdd, &(0x7f0000001780)="960ec96251794f"}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0xe7c, 0x0}]}) 4.424379305s ago: executing program 4 (id=2959): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 4.340905823s ago: executing program 2 (id=2960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4.30840356s ago: executing program 4 (id=2961): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001380), &(0x7f00000013c0)=0x4) 4.28378516s ago: executing program 1 (id=2962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 4.232643937s ago: executing program 2 (id=2964): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000f80)={0x2c, &(0x7f0000000d80)={0x40, 0x31, 0x29, {0x29, 0xb, "b10614a4693596e2eaca2258d395c59ff69afda8ab6a1089682c7b67d02fb77d2a6db2e80e38c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.198635472s ago: executing program 4 (id=2965): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) 4.11772656s ago: executing program 1 (id=2967): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="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", 0x10d}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x84, 0x1000, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 4.11686325s ago: executing program 4 (id=2968): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sendmsg(r0, &(0x7f0000000940)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffdba3, @remote, 0x8}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)="2c524babd57f8bf1053f7914deacf9e26e2656b5cea94d6c93d4867414f50c1836953e8e7ecdd99d1896e86dd8932d8265f23aed2ba769d104cdba69e1ad31", 0x3f}, {&(0x7f0000000700)="11d91e71a48900bbc221b0e42f249f9af9a1ef318fe79959211e768cf4d58d7d1d4ad8591b03d739b667fb452ee2d7996f3341ee7c3f5d11e300a2c5d94c7a81c09e3f688dfae8867ef3fa530f710e0107109c45a5eb3c7c059c88ed7a8704a12e8eaea42ec34dfbb02c920200005732fbf6968a08a8cb2c3f58d86e6f10c49b44448613028c76c6d47e7206a4308d", 0x8f}, {&(0x7f0000000040)="3568124532031cbefe113c", 0xb}, {&(0x7f0000000b80)="04cca4926ee85bfa70b91762fca3a7611b4f36d0f7eeb181b16d6b68a69616777eec1103f980ff47ee3fc145d57691c1d0b8ddd3b4f6659b37e6a40b19016155e0fde46523a5de4bdb7f3559b1a664dd39f0ed81065f2112795a207902ab545d4d6b374e6746d234d444c0b064798cc55a780e3a5eeb6796f44c2d3a17333473a3ed357a10ea4042390b7c8b6730b3c363a4fdaf4063d730704810dc481b10619217deac1bf8276c0712298ce70f4aa07a75d67dc455d4ffc066e2a832f71f1043642bc714b3641dc67f0cf1f6fe0b8c9f1ea9b92ba6c08aec0000f4ce06ef14b8c9c6f9370179bc1f27bbe425c5d7", 0xef}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x20000014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000019080)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x84, 0x1000, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2.821529077s ago: executing program 3 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008090) 2.209263038s ago: executing program 2 (id=2972): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000040801080000010000000000030000003c0004800800010000000000000001400800000008000140000000020800024000000001400000000408000140ffffffff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(r0) 2.144983638s ago: executing program 3 (id=2973): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') 2.144224441s ago: executing program 3 (id=2974): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xa, "d21c31f8"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) 2.132016809s ago: executing program 5 (id=2975): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10) 2.079399247s ago: executing program 5 (id=2976): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 1.985947933s ago: executing program 5 (id=2977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.976055226s ago: executing program 5 (id=2978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) 1.915693436s ago: executing program 5 (id=2979): syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0408"], 0x7) 1.492658085s ago: executing program 3 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 342.598635ms ago: executing program 1 (id=2981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) 160.988186ms ago: executing program 5 (id=2982): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f0000000900)}], 0x3) 145.668233ms ago: executing program 3 (id=2983): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 0s ago: executing program 4 (id=2984): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1405, 0x1, 0x70bd26, 0x0, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 981.983660][ T5816] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 982.023146][ T5816] usb 6-1: no configurations [ 982.027912][ T5816] usb 6-1: can't read configurations, error -22 [ 982.156238][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1947'. [ 982.167007][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 982.176481][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 982.185468][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 982.194562][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 982.203500][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 982.223744][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 982.263667][ T5816] usb 6-1: no configurations [ 982.268286][ T5816] usb 6-1: can't read configurations, error -22 [ 982.283718][ T5816] usb usb6-port1: unable to enumerate USB device [ 982.484947][T15333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1951'. [ 982.523001][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 982.533209][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 982.543740][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 982.998920][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 983.006719][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 984.045972][T15300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 986.254676][T15382] vlan2: entered allmulticast mode [ 986.648983][T15390] can0: slcan on ptm0. [ 986.986790][T13755] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 987.196808][ T30] audit: type=1400 audit(2000000606.062:1288): avc: denied { ioctl } for pid=15405 comm="syz.2.1975" path="socket:[40171]" dev="sockfs" ino=40171 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 987.256092][T13755] usb 6-1: no configurations [ 987.365103][T13755] usb 6-1: can't read configurations, error -22 [ 987.987206][T15386] can0 (unregistered): slcan off ptm0. [ 987.993126][T13755] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 988.314106][T13755] usb 6-1: no configurations [ 988.319243][T13755] usb 6-1: can't read configurations, error -22 [ 988.350567][T13755] usb usb6-port1: attempt power cycle [ 988.756393][T13755] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 988.796073][T13755] usb 6-1: no configurations [ 989.195243][T13755] usb 6-1: can't read configurations, error -22 [ 989.399609][T13755] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 989.444366][T13755] usb 6-1: no configurations [ 989.448992][T13755] usb 6-1: can't read configurations, error -22 [ 989.470541][T13755] usb usb6-port1: unable to enumerate USB device [ 989.662600][T15439] __nla_validate_parse: 15 callbacks suppressed [ 989.662613][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 989.680361][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 989.691209][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 989.700391][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 989.709522][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 989.718432][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 989.973783][T15444] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 990.172471][ T30] audit: type=1400 audit(2000000608.842:1289): avc: denied { ioctl } for pid=15453 comm="syz.5.1987" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 990.252284][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 990.769736][ T7866] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 990.784994][ T7866] Bluetooth: hci5: Frame reassembly failed (-84) [ 990.799125][T15455] vlan2: entered allmulticast mode [ 991.134230][ T5892] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 991.158069][T15475] delete_channel: no stack [ 991.232486][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1995'. [ 991.244875][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 991.254411][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 991.346237][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.365934][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 991.383774][ T5892] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 991.398268][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 991.419260][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.449069][ T5892] usb 6-1: config 0 descriptor?? [ 991.477851][ T5892] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 991.537033][ T24] usb 5-1: device descriptor read/64, error -32 [ 991.695966][T15464] vlan2: entered allmulticast mode [ 991.701125][T15464] team0: entered allmulticast mode [ 991.706232][T15464] team_slave_0: entered allmulticast mode [ 991.713607][T15464] team_slave_1: entered allmulticast mode [ 991.793465][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 992.021746][T13755] usb 6-1: USB disconnect, device number 13 [ 992.179442][ T24] usb 5-1: config index 0 descriptor too short (expected 157, got 72) [ 992.189670][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 992.198835][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.206876][ T24] usb 5-1: Product: syz [ 992.211124][ T24] usb 5-1: Manufacturer: syz [ 992.215694][ T24] usb 5-1: SerialNumber: syz [ 992.228006][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 992.261087][ T5892] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 992.519587][T15504] openvswitch: netlink: Key type 30 is not supported [ 992.584121][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 993.134464][ T24] usb 5-1: USB disconnect, device number 24 [ 993.433071][T15521] dummy0: entered allmulticast mode [ 993.979886][ T5892] usb 5-1: Service connection timeout for: 256 [ 993.999491][ T5892] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 994.026127][ T5892] ath9k_htc: Failed to initialize the device [ 994.037878][ T794] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 994.052809][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 994.096840][T15513] dummy0: left allmulticast mode [ 994.263740][T15535] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 994.367444][ T794] usb 6-1: no configurations [ 994.373082][ T794] usb 6-1: can't read configurations, error -22 [ 994.578920][ T794] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 994.954056][ T794] usb 6-1: no configurations [ 994.963427][ T794] usb 6-1: can't read configurations, error -22 [ 994.970313][ T794] usb usb6-port1: attempt power cycle [ 995.308966][T13345] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 995.342713][ T794] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 995.408740][T15558] [U]  [ 995.411606][T15558] [U] K{ [ 995.415031][T15558] [U] T 1ŠFFˊ`GJǘGO/MC [ 995.424576][T15558] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 995.441135][T15558] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 995.455133][T15558] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 995.496638][T15558] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 995.521635][T15558] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 995.533701][T15558] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 995.547733][T15558] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 995.648156][T15558] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 995.724223][T15558] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 995.738375][T15558] [U] 22Ʃ۩X?0;3U [ 995.745384][T15558] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 995.771421][T15558] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 995.781825][T15558] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 995.790924][T15558] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 995.798222][T15558] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 995.811191][T15558] [U] EC [ 995.815973][T15558] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 996.187724][T13345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.227836][T15556] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 996.305712][T13345] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 996.315392][T13345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.337235][T13345] usb 2-1: config 0 descriptor?? [ 996.392486][T13345] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 996.408443][ T794] usb 6-1: no configurations [ 996.413149][ T794] usb 6-1: can't read configurations, error -22 [ 996.433718][T15566] can0: slcan on ptm0. [ 996.485723][T15565] can0 (unregistered): slcan off ptm0. [ 996.564072][T15547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.575337][T15547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.586047][T15547] __nla_validate_parse: 9 callbacks suppressed [ 996.586061][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 996.629652][T15547] vlan2: entered allmulticast mode [ 996.938941][T13345] usb 2-1: USB disconnect, device number 14 [ 996.976341][T15584] binder: BINDER_SET_CONTEXT_MGR already set [ 997.002521][T15584] binder: 15574:15584 ioctl 4018620d 200000004a80 returned -16 [ 997.117308][T15590] can0: slcan on ptm0. [ 997.284061][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 997.340181][T15588] can0 (unregistered): slcan off ptm0. [ 997.573463][T15600] [U]  [ 997.576335][T15600] [U] K{ [ 997.579784][T15600] [U] T 1ŠFFˊ`GJǘGO/MC [ 997.589332][T15600] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 997.605976][T15600] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 997.667752][T15600] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 997.756322][T15600] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 997.782495][T15600] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 997.794726][T15600] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 997.808620][T15600] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 997.990263][T15600] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 998.001193][T15600] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 998.015259][T15600] [U] 22Ʃ۩X?0;3U [ 998.023544][T15600] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 998.049426][T15600] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 998.059697][T15600] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 998.068676][T15600] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 998.075876][T15600] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 998.088464][T15600] [U] EC [ 998.092579][T15600] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 998.414144][T15596] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 998.457905][T15610] openvswitch: netlink: IP tunnel dst address not specified [ 1000.109495][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1000.120235][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1000.129311][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1000.138369][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1000.147474][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1000.315278][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 1001.371452][T15648] binder: BINDER_SET_CONTEXT_MGR already set [ 1001.377544][T15648] binder: 15631:15648 ioctl 4018620d 200000004a80 returned -16 [ 1001.923798][ T30] audit: type=1400 audit(2000000619.847:1290): avc: denied { ioctl } for pid=15657 comm="syz.1.2051" path="socket:[41137]" dev="sockfs" ino=41137 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1003.311669][T15685] dummy0: entered allmulticast mode [ 1003.988434][T15681] dummy0: left allmulticast mode [ 1004.574994][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1004.591666][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1004.616620][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1004.630050][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1004.644302][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1004.656637][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1004.717162][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.254919][T15704] can0: slcan on ptm0. [ 1005.356053][T15702] can0 (unregistered): slcan off ptm0. [ 1005.635440][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 1006.011654][T15733] binder: 15724:15733 ioctl c0306201 2000000004c0 returned -14 [ 1007.726166][ T30] audit: type=1400 audit(2000000625.274:1291): avc: denied { ioctl } for pid=15775 comm="syz.1.2086" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1008.025401][ T30] audit: type=1400 audit(2000000625.546:1292): avc: denied { connect } for pid=15782 comm="syz.1.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1008.083969][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 1009.160468][T15801] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1009.187552][T15799] can0: slcan on ptm0. [ 1009.738305][T15796] can0 (unregistered): slcan off ptm0. [ 1009.823406][T15815] [U]  [ 1009.826230][T15815] [U] K{ [ 1009.829629][T15815] [U] T 1ŠFFˊ`GJǘGO/MC [ 1009.838821][T15815] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1009.990616][T15815] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1010.005104][T15815] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1010.048353][T15815] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1010.073156][T15815] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1010.085385][T15815] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1010.100038][T15815] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1010.199407][T15815] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1010.209699][T15815] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1010.223544][T15815] [U] 22Ʃ۩X?0;3U [ 1010.230261][T15815] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1010.256009][T15815] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1010.267019][T15815] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1010.276633][T15815] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1010.284073][T15815] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1010.296545][T15815] [U] EC [ 1010.300793][T15815] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1010.634962][T15809] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1010.835852][ T30] audit: type=1400 audit(2000000628.166:1293): avc: denied { read } for pid=15823 comm="syz.5.2099" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1010.906220][ T30] audit: type=1400 audit(2000000628.166:1294): avc: denied { open } for pid=15823 comm="syz.5.2099" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1010.995609][ T30] audit: type=1400 audit(2000000628.175:1295): avc: denied { ioctl } for pid=15823 comm="syz.5.2099" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1011.118876][ T30] audit: type=1400 audit(2000000628.409:1296): avc: denied { create } for pid=15832 comm="syz.5.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1011.213258][ T30] audit: type=1400 audit(2000000628.484:1297): avc: denied { setopt } for pid=15832 comm="syz.5.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1011.347648][ T30] audit: type=1400 audit(2000000628.494:1298): avc: denied { read write } for pid=15837 comm="syz.4.2103" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1011.490631][ T30] audit: type=1400 audit(2000000628.494:1299): avc: denied { open } for pid=15837 comm="syz.4.2103" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1011.679803][ T30] audit: type=1400 audit(2000000628.587:1300): avc: denied { ioctl } for pid=15842 comm="syz.5.2105" path="socket:[41368]" dev="sockfs" ino=41368 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1012.656969][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1012.677118][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1012.692611][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1012.704242][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1012.714210][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1012.980846][ T5885] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1013.237224][ T5885] usb 2-1: no configurations [ 1013.247989][ T5885] usb 2-1: can't read configurations, error -22 [ 1013.444158][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1013.615674][ T5885] usb 2-1: no configurations [ 1013.620519][ T5885] usb 2-1: can't read configurations, error -22 [ 1013.649529][ T5885] usb usb2-port1: attempt power cycle [ 1013.938254][T15912] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 1013.956775][T15912] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1013.976729][T15912] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1014.031375][ T5885] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1014.065576][ T5885] usb 2-1: no configurations [ 1014.071514][ T5885] usb 2-1: can't read configurations, error -22 [ 1014.212626][ T5885] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1014.247368][ T5885] usb 2-1: no configurations [ 1014.256639][ T5885] usb 2-1: can't read configurations, error -22 [ 1014.264724][ T5885] usb usb2-port1: unable to enumerate USB device [ 1014.752996][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 1015.452397][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'. [ 1015.494682][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2129'. [ 1016.150382][ T5885] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1016.248532][T15952] can0: slcan on ttyS3. [ 1017.268955][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 1017.278896][ T5885] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 1017.309290][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.371448][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1017.435367][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1017.503950][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1017.930152][T15940] can0 (unregistered): slcan off ttyS3. [ 1018.006153][ T5885] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1018.015216][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.069319][ T5885] usb 5-1: config 0 descriptor?? [ 1018.107308][ T5885] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 1018.177594][ T5164] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.192847][ T30] audit: type=1400 audit(2000000635.053:1301): avc: denied { read } for pid=5164 comm="acpid" name="js0" dev="devtmpfs" ino=3114 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.240380][T15241] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.251390][ T30] audit: type=1400 audit(2000000635.053:1302): avc: denied { open } for pid=5164 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3114 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.277099][ T5164] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.311865][T15968] __nla_validate_parse: 2 callbacks suppressed [ 1018.311876][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 1018.327669][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 1018.336682][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 1018.345675][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 1018.354629][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 1018.391654][ T5164] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.503787][ T5164] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.528955][ T5164] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.566929][T15935] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.586482][ T5164] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1018.598494][ T24] usb 5-1: USB disconnect, device number 25 [ 1019.424029][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1019.432476][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1020.096168][T15987] netlink: 640 bytes leftover after parsing attributes in process `syz.5.2147'. [ 1020.140021][T15987] netlink: 640 bytes leftover after parsing attributes in process `syz.5.2147'. [ 1021.165500][ T7864] Bluetooth: hci5: Frame reassembly failed (-84) [ 1021.186984][ T7864] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1021.792582][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 1022.074006][T16044] dummy0: entered allmulticast mode [ 1022.645958][T16031] dummy0: left allmulticast mode [ 1022.648694][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 1023.361200][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1023.381604][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1024.322058][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1024.328432][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1025.134016][T16103] dummy0: entered allmulticast mode [ 1025.328253][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1025.567713][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.582115][T16116] binder: 16111:16116 ioctl c0306201 2000000004c0 returned -14 [ 1025.590356][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1025.600234][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.612156][ T9] usb 2-1: config 0 descriptor?? [ 1025.710513][T16092] dummy0: left allmulticast mode [ 1026.040053][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1026.502255][T16125] can0: slcan on ptm0. [ 1026.609778][T16104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.641516][T16104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.660857][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 1026.768945][T16122] can0 (unregistered): slcan off ptm0. [ 1026.794675][T16104] vlan2: entered allmulticast mode [ 1027.616466][ T5885] usb 2-1: USB disconnect, device number 19 [ 1027.706874][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 1028.146786][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 1028.248723][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 1028.281860][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 1028.295821][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 1029.176346][T16160] can0: slcan on ptm0. [ 1030.671134][T16153] can0 (unregistered): slcan off ptm0. [ 1031.770268][T16172] can0: slcan on ptm0. [ 1032.668254][T16164] can0 (unregistered): slcan off ptm0. [ 1033.218634][T16191] netlink: 'syz.1.2217': attribute type 1 has an invalid length. [ 1033.721501][T16214] dummy0: entered allmulticast mode [ 1033.955699][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 1034.218511][T16199] binder: 16187:16199 ioctl c0306201 2000000004c0 returned -14 [ 1034.236896][ T30] audit: type=1400 audit(2000000650.082:1303): avc: denied { accept } for pid=16220 comm="syz.1.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1034.296393][T16202] dummy0: left allmulticast mode [ 1034.482802][T16226] [U]  [ 1034.485784][T16226] [U] K{ [ 1034.489367][T16226] [U] T 1ŠFFˊ`GJǘGO/MC [ 1034.499640][T16226] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1034.516184][T16226] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1034.530607][T16226] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1034.572586][T16226] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1034.597926][T16226] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1034.610827][T16226] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1034.624853][T16226] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1034.723245][T16226] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1034.734530][T16226] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1034.748514][T16226] [U] 22Ʃ۩X?0;3U [ 1034.755542][T16226] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1034.781696][T16226] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1034.791859][T16226] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1034.800868][T16226] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1034.808498][T16226] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1034.821045][T16226] [U] EC [ 1034.825709][T16226] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1036.293595][T16224] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1038.713568][T16268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.515996][T16282] [U]  [ 1039.518889][T16282] [U] K{ [ 1039.522371][T16282] [U] T 1ŠFFˊ`GJǘGO/MC [ 1039.532137][T16282] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1039.548523][T16282] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1039.559889][ T794] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1039.574148][T16282] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1039.618000][T16282] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1039.645068][T16282] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1039.657124][T16282] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1039.671175][T16282] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1039.769648][T16282] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1039.853041][T16282] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1040.571192][ T7865] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1040.581363][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.591883][ T7867] Bluetooth: hci5: Frame reassembly failed (-84) [ 1040.603217][T16282] [U] 22Ʃ۩X?0;3U [ 1040.614874][T16282] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1040.640534][ T794] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1040.649726][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.671739][ T794] usb 2-1: config 0 descriptor?? [ 1040.680206][ T794] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1040.717238][T16282] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1040.756890][T16282] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1040.788436][T16282] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1040.810376][T16282] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1040.853042][T16282] [U] EC [ 1040.856287][T16282] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1040.891399][T16282] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1040.906190][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.927764][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.989679][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 1041.832664][T13755] usb 2-1: USB disconnect, device number 20 [ 1042.289501][T16316] binder: 16311:16316 ioctl c0306201 2000000004c0 returned -14 [ 1042.413071][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1042.413106][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1042.678148][T16322] can0: slcan on ptm0. [ 1042.949103][T16320] can0 (unregistered): slcan off ptm0. [ 1043.582757][ T30] audit: type=1400 audit(2000000658.832:1304): avc: denied { bind } for pid=16333 comm="syz.5.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1043.812977][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1044.075024][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1044.094097][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1044.108401][ T24] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1044.117928][ T24] usb 2-1: Product: syz [ 1044.531988][ T24] usb 2-1: SerialNumber: syz [ 1044.544912][ T24] usb 2-1: config 0 descriptor?? [ 1044.568167][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1044.584980][ T24] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1044.594799][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1044.614475][ T24] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1044.677109][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 1044.811024][ T24] usb 2-1: USB disconnect, device number 21 [ 1045.025460][ T7869] Bluetooth: hci5: Frame reassembly failed (-84) [ 1045.041428][T16361] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 1045.069231][ T7869] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1045.168870][ T30] audit: type=1400 audit(2000000660.311:1305): avc: denied { setopt } for pid=16364 comm="syz.5.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1045.304711][T16369] [U]  [ 1045.307564][T16369] [U] K{ [ 1045.311159][T16369] [U] T 1ŠFFˊ`GJǘGO/MC [ 1045.321367][T16369] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1045.337833][T16369] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1045.351471][T16369] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1045.394031][T16369] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1045.418894][T16369] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1045.432065][T16369] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1045.446178][T16369] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1045.546750][T16369] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1045.557958][T16369] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1045.571689][T16369] [U] 22Ʃ۩X?0;3U [ 1045.578618][T16369] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1045.604497][T16369] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1045.615154][T16369] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1045.624140][T16369] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1045.631345][T16369] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1045.643774][T16369] [U] EC [ 1045.647948][T16369] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1046.115590][T16366] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1047.200728][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1047.208163][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1047.434499][ T7865] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1047.484409][ T7865] Bluetooth: hci5: Frame reassembly failed (-84) [ 1047.763520][T16412] can0: slcan on ttyS3. [ 1048.203903][T16413] [U]  [ 1048.206829][T16413] [U] K{ [ 1048.210294][T16413] [U] T 1ŠFFˊ`GJǘGO/MC [ 1048.219519][T16413] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1048.238045][T16413] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1048.251926][T16413] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1048.295540][T16413] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1048.321257][T16413] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1048.333376][T16413] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1048.364110][T16413] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1048.471839][T16413] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1048.481815][T16413] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1048.495684][T16413] [U] 22Ʃ۩X?0;3U [ 1048.506682][T16413] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1048.532636][T16413] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1048.547346][T16413] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1048.736427][T16413] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1048.747116][T16413] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1048.759905][T16413] [U] EC [ 1048.764135][T16413] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1048.795037][T16405] can0 (unregistered): slcan off ttyS3. [ 1049.183536][T16409] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1049.380678][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1049.540781][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1049.555391][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1049.567938][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.603908][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1049.630025][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1049.685373][ T24] usb 5-1: config 0 descriptor?? [ 1049.827335][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1050.132626][ T24] usb 5-1: Detected FT232B [ 1050.346759][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1050.371970][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1050.397133][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1050.414472][ T24] usb 5-1: USB disconnect, device number 26 [ 1050.434060][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1050.560338][ T24] ftdi_sio 5-1:0.0: device disconnected [ 1051.076930][T16440] binder: 16427:16440 ioctl c0306201 2000000004c0 returned -14 [ 1052.199578][ T30] audit: type=1400 audit(2000000666.899:1306): avc: denied { write } for pid=16457 comm="syz.4.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1053.131168][ T794] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1054.047712][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.519296][ T794] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1054.567484][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.609560][ T794] usb 5-1: config 0 descriptor?? [ 1054.640681][ T794] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1054.965710][T16493] can0: slcan on ptm0. [ 1055.129622][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.148395][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.163856][T16490] can0 (unregistered): slcan off ptm0. [ 1055.183522][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 1055.525812][ T9] usb 5-1: USB disconnect, device number 27 [ 1055.938235][T16507] dummy0: entered allmulticast mode [ 1056.461304][T16496] dummy0: left allmulticast mode [ 1056.677047][ T7865] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1056.715087][ T7865] Bluetooth: hci5: Frame reassembly failed (-84) [ 1057.717264][T16528] can0: slcan on ptm1. [ 1057.919924][T16526] can0 (unregistered): slcan off ptm1. [ 1058.826874][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1058.834261][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1059.276599][ T30] audit: type=1400 audit(2000000673.524:1307): avc: denied { append } for pid=16547 comm="syz.4.2322" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1060.228265][T16559] can0: slcan on ptm0. [ 1060.356346][T16561] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2324'. [ 1060.496908][T16557] can0 (unregistered): slcan off ptm0. [ 1060.505204][T16567] can0: slcan on ptm1. [ 1060.759407][T16563] can0 (unregistered): slcan off ptm1. [ 1060.805030][T16572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1061.645209][ T30] audit: type=1400 audit(2000000675.733:1308): avc: denied { getopt } for pid=16582 comm="syz.4.2331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1062.469433][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1062.479487][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1062.488717][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1062.497739][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1062.506722][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1062.515722][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1062.951533][T16606] can0: slcan on ptm0. [ 1063.169609][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 1063.179199][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 1063.189701][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 1063.199003][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 1063.247960][T16603] can0 (unregistered): slcan off ptm0. [ 1064.977800][ T30] audit: type=1400 audit(2000000678.858:1309): avc: denied { ioctl } for pid=16652 comm="syz.5.2352" path="socket:[44166]" dev="sockfs" ino=44166 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1065.929018][T16679] can0: slcan on ttyS3. [ 1066.254035][T16690] can1: slcan on ptm0. [ 1066.565181][T16678] can0 (unregistered): slcan off ttyS3. [ 1066.920333][T16681] can1 (unregistered): slcan off ptm0. [ 1067.787339][T16713] can0: slcan on ptm0. [ 1068.170058][T16709] can0 (unregistered): slcan off ptm0. [ 1068.879193][T16729] can0: slcan on ttyS3. [ 1069.053695][T16737] __nla_validate_parse: 13 callbacks suppressed [ 1069.053710][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1069.070481][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1069.079861][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1069.088942][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1069.097946][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1069.106967][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1069.255647][T16727] can0 (unregistered): slcan off ttyS3. [ 1069.869990][T16762] dummy0: entered allmulticast mode [ 1069.997615][T16730] dummy0: left allmulticast mode [ 1070.894230][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1070.923614][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1070.963003][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1070.976572][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2389'. [ 1071.578971][ T7864] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1071.844352][ T7867] Bluetooth: hci5: Frame reassembly failed (-84) [ 1072.182762][T16781] binder: 16775:16781 ioctl c0306201 2000000004c0 returned -14 [ 1073.950349][ T30] audit: type=1400 audit(2000000687.252:1310): avc: denied { append } for pid=16811 comm="syz.5.2405" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1073.973703][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1074.742525][ T7868] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1074.766269][ T7868] Bluetooth: hci5: Frame reassembly failed (-84) [ 1076.933672][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1077.254566][T16842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.539589][T16880] [U]  [ 1080.542472][T16880] [U] K{ [ 1080.545902][T16880] [U] T 1ŠFFˊ`GJǘGO/MC [ 1080.555381][T16880] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1080.571947][T16880] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1080.585861][T16880] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1080.640852][T16880] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1080.665503][T16880] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1080.677871][T16880] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1080.695681][T16880] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1080.794695][T16880] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1080.804815][T16880] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1080.818648][T16880] [U] 22Ʃ۩X?0;3U [ 1080.826365][T16880] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1080.852295][T16880] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1080.862228][T16880] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1080.871227][T16880] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1080.881561][T16880] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1080.894487][T16880] [U] EC [ 1080.899086][T16880] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1082.373546][T16878] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1082.969340][ T7863] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1083.164098][ T7867] Bluetooth: hci5: Frame reassembly failed (-84) [ 1083.199258][ T7867] Bluetooth: hci5: Frame reassembly failed (-84) [ 1085.078832][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 1085.085448][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1086.439305][T16926] __nla_validate_parse: 4 callbacks suppressed [ 1086.439337][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1086.466531][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1086.482709][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1086.493198][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1086.502945][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1086.512555][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1086.979360][ T30] audit: type=1400 audit(2000000699.446:1311): avc: denied { write } for pid=16934 comm="syz.1.2442" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1087.017012][T16935] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1087.111377][ T30] audit: type=1400 audit(2000000699.446:1312): avc: denied { open } for pid=16934 comm="syz.1.2442" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1088.962668][ T30] audit: type=1400 audit(2000000701.299:1313): avc: denied { create } for pid=16959 comm="syz.5.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1089.046941][ T30] audit: type=1400 audit(2000000701.327:1314): avc: denied { write } for pid=16959 comm="syz.5.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1089.105804][T16964] QAT: Stopping all acceleration devices. [ 1089.949148][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.956574][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.416445][T16981] netlink: 'syz.2.2459': attribute type 2 has an invalid length. [ 1090.441252][T16981] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 1090.466787][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 1090.895947][ T30] audit: type=1400 audit(2000000703.114:1315): avc: denied { ioctl } for pid=16991 comm="syz.1.2464" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1092.034979][T14183] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1092.398029][T17002] binder: 16993:17002 ioctl c0306201 2000000004c0 returned -14 [ 1093.620926][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1094.132636][T17038] can0: slcan on ttyS3. [ 1094.447251][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'. [ 1094.762197][T17060] dummy0: entered allmulticast mode [ 1095.309975][T17049] dummy0: left allmulticast mode [ 1095.451551][T17036] can0 (unregistered): slcan off ttyS3. [ 1096.039727][T17072] can0: slcan on ptm0. [ 1096.098254][T17070] can0 (unregistered): slcan off ptm0. [ 1096.482064][T17088] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1098.419819][T17125] netlink: 'syz.5.2502': attribute type 61 has an invalid length. [ 1099.958881][T17146] can0: slcan on ttyS3. [ 1100.014777][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2511'. [ 1100.550574][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1101.004943][T17145] can0 (unregistered): slcan off ttyS3. [ 1102.349024][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 1102.706151][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2523'. [ 1103.135680][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 1105.487272][T17246] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 1105.542835][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1105.555266][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1105.562697][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1105.577758][T17249] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1105.763780][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1105.782721][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1105.796556][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1105.807135][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1107.026042][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1107.087955][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1107.106820][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1107.125036][ T30] audit: type=1400 audit(2000000718.293:1316): avc: denied { setopt } for pid=17266 comm="syz.4.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1107.145958][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1107.152647][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1107.172130][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1107.180078][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 1107.196452][T17249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1107.281294][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.296094][ T24] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1107.328393][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.366886][ T24] usb 2-1: config 0 descriptor?? [ 1107.391046][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1107.402056][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1107.481774][ T30] audit: type=1400 audit(2000000718.630:1317): avc: denied { write } for pid=17282 comm="syz.4.2548" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1107.590844][T17242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.618812][T17242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.806508][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'. [ 1110.094674][T17242] vlan2: entered allmulticast mode [ 1110.439412][T13755] usb 2-1: USB disconnect, device number 22 [ 1111.067398][T17306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1111.089065][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2552'. [ 1111.499479][T17308] can0: slcan on ptm0. [ 1111.786871][T17300] can0 (unregistered): slcan off ptm0. [ 1111.917700][T17314] __nla_validate_parse: 3 callbacks suppressed [ 1111.917731][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1111.946542][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1111.963996][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1111.976440][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1111.986574][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1111.996196][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1112.585939][T17331] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1115.634864][ T7867] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1115.655599][ T7867] Bluetooth: hci5: Frame reassembly failed (-84) [ 1116.354471][T17407] dummy0: entered allmulticast mode [ 1117.093446][T17403] dummy0: left allmulticast mode [ 1117.471852][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 1117.478157][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1117.850263][ T30] audit: type=1400 audit(2000000728.334:1318): avc: denied { open } for pid=17428 comm="syz.4.2597" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1117.973094][ T30] audit: type=1400 audit(2000000728.371:1319): avc: denied { ioctl } for pid=17428 comm="syz.4.2597" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1118.173851][ T30] audit: type=1400 audit(2000000728.633:1320): avc: denied { validate_trans } for pid=17430 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1119.527972][T17446] [U]  [ 1119.530752][T17446] [U] K{ [ 1119.533814][T17446] [U] T 1ŠFFˊ`GJǘGO/MC [ 1119.569289][T17446] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1119.748874][T17446] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1119.763449][T17446] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1119.993420][T17446] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1120.044784][T17446] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1120.103593][T17446] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1120.148128][T17446] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1120.637280][T17463] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1120.662290][T17463] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1120.674534][T17463] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1120.688454][T17463] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1120.787402][T17463] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1120.797276][T17463] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1120.811100][T17463] [U] 22Ʃ۩X?0;3U [ 1120.817535][T17463] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1120.843623][T17463] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1120.853860][T17463] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1120.862968][T17463] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1120.870661][T17463] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1120.883405][T17463] [U] EC [ 1120.887880][T17463] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1121.384295][T17461] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1122.442868][ T7865] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1122.468185][T17490] [U]  [ 1122.471214][T17490] [U] K{ [ 1122.479868][T17490] [U] T 1ŠFFˊ`GJǘGO/MC [ 1122.483801][ T7864] Bluetooth: hci5: Frame reassembly failed (-84) [ 1122.495045][ T7864] Bluetooth: hci5: Frame reassembly failed (-84) [ 1122.511224][T17490] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1123.602977][T17490] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1123.617909][T17490] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1123.660531][T17490] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1123.688105][T17490] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1123.781788][T17490] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1123.798051][T17490] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1123.898672][T17490] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1123.907870][T17490] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1123.921768][T17490] [U] 22Ʃ۩X?0;3U [ 1123.994299][T17490] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1124.082267][T17490] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1124.102818][T17490] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1124.120491][T17490] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1124.133471][T17490] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1124.428452][T17490] [U] EC [ 1124.429149][ T30] audit: type=1400 audit(2000000734.492:1321): avc: denied { connect } for pid=17503 comm="syz.3.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1124.481600][T17490] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1124.528232][T17490] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1124.567412][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1125.190215][ T30] audit: type=1400 audit(2000000735.203:1322): avc: denied { read } for pid=17518 comm="syz.5.2627" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1125.364488][ T30] audit: type=1400 audit(2000000735.203:1323): avc: denied { open } for pid=17518 comm="syz.5.2627" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1125.444717][ T30] audit: type=1400 audit(2000000735.259:1324): avc: denied { ioctl } for pid=17518 comm="syz.5.2627" path="/dev/usbmon8" dev="devtmpfs" ino=740 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1125.593086][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1125.613794][T17527] openvswitch: netlink: Missing key (keys=200040, expected=100) [ 1125.972683][T17534] dummy0: entered allmulticast mode [ 1126.698334][T17532] dummy0: left allmulticast mode [ 1126.839611][T17547] [U]  [ 1126.842481][T17547] [U] K{ [ 1126.846138][T17547] [U] T 1ŠFFˊ`GJǘGO/MC [ 1126.857156][T17547] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1126.873525][T17547] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1126.888159][T17547] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1126.935776][T17547] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1126.960354][T17547] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1127.096455][T17547] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1127.166551][T17547] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1127.828330][T17547] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1127.838306][T17547] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1127.852120][T17547] [U] 22Ʃ۩X?0;3U [ 1127.859655][T17547] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1127.885475][T17547] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1127.895391][T17547] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1127.904397][T17547] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1127.911580][T17547] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1127.924072][T17547] [U] EC [ 1127.930327][T17547] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1128.085152][T17559] binder: 17556:17559 ioctl c0306201 2000000004c0 returned -14 [ 1128.260686][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 1128.310606][T17545] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1128.910631][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1128.948941][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1128.968674][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1128.979343][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1128.989482][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1129.503775][T17587] netlink: 'syz.5.2651': attribute type 40 has an invalid length. [ 1129.962906][T17591] can0: slcan on ttyS3. [ 1131.059003][T17606] [U]  [ 1131.061851][T17606] [U] K{ [ 1131.065462][T17606] [U] T 1ŠFFˊ`GJǘGO/MC [ 1131.074582][T17606] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1131.091189][T17606] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1131.106935][T17606] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1131.147313][T17606] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1131.172673][T17606] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1131.184750][T17606] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1131.198407][T17606] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1131.303710][T17606] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1131.313622][T17606] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1131.327476][T17606] [U] 22Ʃ۩X?0;3U [ 1131.334333][T17606] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1131.362005][T17606] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1131.372052][T17606] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1131.382302][T17606] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1131.389450][T17606] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1131.401852][T17606] [U] EC [ 1131.405912][T17606] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1131.906120][T17602] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1132.145097][T17582] can0 (unregistered): slcan off ttyS3. [ 1132.223827][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 1132.389514][ T6272] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1132.481334][T17630] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1132.514253][T17630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.550056][ T6272] usb 6-1: Using ep0 maxpacket: 8 [ 1132.565594][ T6272] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1132.590835][ T6272] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1132.623358][ T6272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.699040][ T6272] usb 6-1: Product: syz [ 1132.835828][T17637] can0: slcan on ptm0. [ 1132.860571][ T6272] usb 6-1: Manufacturer: syz [ 1132.934919][ T6272] usb 6-1: SerialNumber: syz [ 1132.999553][ T6272] usb 6-1: config 0 descriptor?? [ 1133.021426][ T6272] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1133.097855][T17634] can0 (unregistered): slcan off ptm0. [ 1133.245124][ T6272] gspca_zc3xx: reg_w_i err -71 [ 1133.515340][T17651] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1133.899283][ T6272] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1133.905609][ T6272] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1133.976552][ T6272] usb 6-1: USB disconnect, device number 18 [ 1134.284054][T17685] netlink: 'syz.3.2679': attribute type 10 has an invalid length. [ 1134.423253][T17695] dummy0: entered allmulticast mode [ 1135.041897][T17687] dummy0: left allmulticast mode [ 1135.119638][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 1136.557397][T17726] [U]  [ 1136.560247][T17726] [U] K{ [ 1136.563807][T17726] [U] T 1ŠFFˊ`GJǘGO/MC [ 1136.573201][T17726] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1136.589761][T17726] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1136.648071][T17726] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1136.689746][ T30] audit: type=1400 audit(2000000745.918:1325): avc: denied { append } for pid=17727 comm="syz.1.2692" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1136.776616][T17726] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1136.899649][T17726] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1136.920063][T17726] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1136.954650][T17726] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1140.504134][T17784] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1140.528632][T17784] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1140.541108][T17784] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1140.575466][T17784] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1140.676701][T17784] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1140.686609][T17784] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1140.700394][T17784] [U] 22Ʃ۩X?0;3U [ 1140.708768][T17784] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1140.734245][ T6272] ath9k_htc: Failed to initialize the device [ 1140.741942][T17784] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1140.752640][T17784] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1140.761723][T17784] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1140.769245][T17784] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1140.825789][T13755] usb 2-1: ath9k_htc: USB layer deinitialized [ 1141.111972][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1141.325302][T17784] [U] EC [ 1141.328548][T17784] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1141.406325][T17784] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1143.871506][T17831] comedi comedi2: pcl816: I/O port conflict (0x2,16) [ 1144.294913][T17846] [U]  [ 1144.297905][T17846] [U] K{ [ 1144.301350][T17846] [U] T 1ŠFFˊ`GJǘGO/MC [ 1144.310456][T17846] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1144.326917][T17846] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1144.340862][T17846] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1144.391261][T17846] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1144.416099][T17846] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1144.428178][T17846] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1144.448031][T17846] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1144.546156][T17846] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1144.556057][T17846] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1144.569884][T17846] [U] 22Ʃ۩X?0;3U [ 1144.576705][T17846] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1144.602616][T17846] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1144.612655][T17846] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1144.621710][T17846] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1144.629066][T17846] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1144.641558][T17846] [U] EC [ 1144.646074][T17846] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1145.098402][T17844] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1145.130181][ T30] audit: type=1400 audit(2000000753.863:1326): avc: denied { ioctl } for pid=17854 comm="syz.4.2738" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1146.516872][T13755] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1146.978373][T13755] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.010919][T13755] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1147.037715][T13755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.095056][T13755] usb 5-1: config 0 descriptor?? [ 1147.117676][T13755] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1147.239178][T17899] binder: BC_ACQUIRE_RESULT not supported [ 1147.249563][T17899] binder: 17898:17899 ioctl c0306201 2000000001c0 returned -22 [ 1147.332407][T17862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.341209][T17862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.442213][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 1148.026834][ T7864] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1148.050133][ T7864] Bluetooth: hci5: Frame reassembly failed (-84) [ 1148.994973][ T6272] usb 5-1: USB disconnect, device number 28 [ 1149.141122][T17915] [U]  [ 1149.143941][T17915] [U] K{ [ 1149.147470][T17915] [U] T 1ŠFFˊ`GJǘGO/MC [ 1149.156682][T17915] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1149.173130][T17915] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1149.189906][T17915] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1149.242291][T17915] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1149.267124][T17915] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1149.279242][T17915] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1149.302059][T17915] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1149.402863][T17915] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1149.412823][T17915] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1149.426810][T17915] [U] 22Ʃ۩X?0;3U [ 1149.435112][T17915] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1149.461890][T17915] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1149.472161][T17915] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1149.481344][T17915] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1149.490085][T17915] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1149.502809][T17915] [U] EC [ 1149.507148][T17915] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1149.897173][T17911] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1150.129599][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1151.752982][T17944] dummy0: entered allmulticast mode [ 1152.311247][T17933] dummy0: left allmulticast mode [ 1152.428517][T17945] dummy0: entered allmulticast mode [ 1152.555542][T17932] dummy0: left allmulticast mode [ 1154.721042][ T30] audit: type=1400 audit(2000000762.837:1327): avc: denied { setopt } for pid=17957 comm="syz.5.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1154.909404][T17966] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1155.028100][ T30] audit: type=1400 audit(2000000763.127:1328): avc: denied { getopt } for pid=17970 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1156.244291][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 1156.251012][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.268407][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.273029][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1156.282772][ T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1157.373096][T17989] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x13 [ 1157.467496][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.489088][ T9] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1157.505482][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.600433][ T9] usb 6-1: config 0 descriptor?? [ 1158.878707][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'. [ 1158.887976][ T9] usb 6-1: can't set config #0, error -71 [ 1158.917691][T17995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17995 comm=syz.4.2778 [ 1158.982173][ T9] usb 6-1: USB disconnect, device number 19 [ 1159.176296][T17997] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1159.212420][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 1162.127965][ T7864] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1162.871421][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2797'. [ 1163.428514][T18063] [U]  [ 1163.431290][T18063] [U] K{ [ 1163.434835][T18063] [U] T 1ŠFFˊ`GJǘGO/MC [ 1163.452988][T18063] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1163.470535][T18063] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1163.486148][T18063] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1163.530622][T18064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2802'. [ 1163.547342][T18063] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1163.571994][T18063] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1163.584192][T18063] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1163.598218][T18063] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1163.701272][T18063] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1163.711577][T18063] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1163.725363][T18063] [U] 22Ʃ۩X?0;3U [ 1163.734700][T18063] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1163.760541][T18063] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1163.771817][T18063] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1163.780946][T18063] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1163.789333][T18063] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1163.801809][T18063] [U] EC [ 1163.806051][T18063] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1164.245835][T18061] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1164.384796][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1164.394291][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 1170.602228][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 1170.706193][ T7865] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1170.732492][ T7865] Bluetooth: hci5: Frame reassembly failed (-84) [ 1170.776221][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1170.897778][T18130] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2825'. [ 1171.473673][ T24] usb 6-1: config index 0 descriptor too short (expected 157, got 72) [ 1171.758743][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1171.772114][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.780429][ T24] usb 6-1: Product: syz [ 1171.784581][ T24] usb 6-1: Manufacturer: syz [ 1171.789194][ T24] usb 6-1: SerialNumber: syz [ 1171.849936][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1171.871790][T13345] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1172.504365][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1172.568321][ T794] usb 6-1: USB disconnect, device number 20 [ 1172.869208][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1172.988873][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 1173.517863][T13345] usb 6-1: Service connection timeout for: 256 [ 1174.141013][T13345] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1174.184444][T13345] ath9k_htc: Failed to initialize the device [ 1174.342938][ T794] usb 6-1: ath9k_htc: USB layer deinitialized [ 1174.549630][T18183] netlink: 'syz.1.2845': attribute type 16 has an invalid length. [ 1174.612790][T18183] netlink: 'syz.1.2845': attribute type 17 has an invalid length. [ 1174.658567][T18183] tipc: Resetting bearer [ 1174.805033][T18183] tipc: Resetting bearer [ 1174.936717][T18202] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1174.994751][ T978] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1175.165902][T18211] ceph: No source [ 1175.181075][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.205012][ T978] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1175.224397][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.242843][ T978] usb 6-1: config 0 descriptor?? [ 1175.266693][ T978] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1175.477088][T18187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.487780][T18187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.499874][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 1175.699532][T18187] vlan2: entered allmulticast mode [ 1175.965634][T18234] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2865'. [ 1175.985232][T18235] can0: slcan on ttyS3. [ 1176.132003][T18237] netlink: 'syz.2.2866': attribute type 6 has an invalid length. [ 1176.187609][ T9] usb 6-1: USB disconnect, device number 21 [ 1176.435386][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1177.291503][T18263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.680214][T18273] can1: slcan on ptm0. [ 1178.203239][T18269] can1 (unregistered): slcan off ptm0. [ 1178.778560][T18229] can0 (unregistered): slcan off ttyS3. [ 1180.014704][T18300] [U]  [ 1180.018141][T18300] [U] K{ [ 1180.025262][T18300] [U] T 1ŠFFˊ`GJǘGO/MC [ 1180.038864][T18300] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1180.350838][T18300] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1180.365309][T18300] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1180.407716][T18307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2881'. [ 1180.422669][T18300] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1180.447422][T18300] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1180.459696][T18300] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1180.474837][T18300] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1180.572949][T18300] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1180.781144][ T30] audit: type=1400 audit(2000000787.158:1329): avc: denied { write } for pid=18308 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1180.881072][T18300] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1180.963506][T18300] [U] 22Ʃ۩X?0;3U [ 1181.171114][T18300] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1181.211914][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1181.326450][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 1181.352664][T18300] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1181.400190][T18300] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1181.443840][T18300] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1181.464192][T18300] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1181.509618][T18300] [U] EC [ 1181.517683][T18300] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1181.654521][T18300] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1181.905206][ T7862] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1182.126682][ T7862] Bluetooth: hci5: Frame reassembly failed (-84) [ 1182.339327][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 1183.397904][ T7862] Bluetooth: hci6: Frame reassembly failed (-84) [ 1183.431232][ T7869] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1183.919205][T18371] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2896'. [ 1183.951307][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 1184.078136][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1184.443193][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1185.606656][ T5813] Bluetooth: hci6: command 0x1003 tx timeout [ 1185.614936][ T5811] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1186.744352][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 1188.557962][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'. [ 1189.588181][ T7868] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1189.614370][ T7868] Bluetooth: hci5: Frame reassembly failed (-84) [ 1189.620835][ T7868] Bluetooth: hci5: Frame reassembly failed (-84) [ 1189.656025][T13345] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1190.877899][T13345] usb 6-1: config 6 has an invalid interface number: 79 but max is 0 [ 1190.888241][T13345] usb 6-1: config 6 has no interface number 0 [ 1190.894810][T13345] usb 6-1: config 6 interface 79 altsetting 255 endpoint 0xC has invalid wMaxPacketSize 0 [ 1190.906284][T13345] usb 6-1: config 6 interface 79 altsetting 255 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1190.918215][T13345] usb 6-1: config 6 interface 79 has no altsetting 0 [ 1191.240626][T13345] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=4d.7e [ 1191.683206][T13345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.691343][T13345] usb 6-1: Product: syz [ 1191.695506][T13345] usb 6-1: Manufacturer: syz [ 1191.700157][T13345] usb 6-1: SerialNumber: syz [ 1191.705944][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1191.718217][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1191.727494][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1191.736501][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1191.745834][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1191.754766][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 1191.763862][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 1191.770675][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1191.927185][T13345] usb 6-1: can't set config #6, error -71 [ 1191.965654][T13345] usb 6-1: USB disconnect, device number 22 [ 1192.267628][T18452] can0: slcan on ttyS3. [ 1192.396032][T18460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2926'. [ 1192.604871][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 1193.778848][T18444] can0 (unregistered): slcan off ttyS3. [ 1194.016246][ T30] audit: type=1400 audit(2000000799.605:1330): avc: denied { read write } for pid=18487 comm="syz.4.2932" name="mouse0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1194.085157][ T30] audit: type=1400 audit(2000000799.605:1331): avc: denied { open } for pid=18487 comm="syz.4.2932" path="/dev/input/mouse0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1194.301682][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1194.434804][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1194.466574][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1194.595234][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1195.035703][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 1195.131968][T18508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1195.517836][ T6272] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1195.695796][ T6272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.715632][ T6272] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1195.746385][ T6272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.783038][ T6272] usb 2-1: config 0 descriptor?? [ 1195.803327][ T6272] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1196.103060][T18538] can0: slcan on ttyS3. [ 1196.486455][T18510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.517265][T18510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.538815][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1196.562092][T18510] vlan2: entered allmulticast mode [ 1197.233691][T18532] can0 (unregistered): slcan off ttyS3. [ 1197.421971][ T978] usb 2-1: USB disconnect, device number 24 [ 1197.489091][ T30] audit: type=1400 audit(2000000802.852:1332): avc: denied { read } for pid=18549 comm="syz.4.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1197.796898][ T30] audit: type=1400 audit(2000000803.142:1333): avc: denied { read } for pid=18565 comm="syz.2.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1198.825125][ T30] audit: type=1400 audit(2000000804.059:1334): avc: denied { write } for pid=18578 comm="syz.1.2956" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1198.975600][T18586] tipc: Enabling of bearer rejected, failed to enable media [ 1200.188811][T14183] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1200.197199][T14183] Bluetooth: hci5: Frame reassembly failed (-84) [ 1201.171448][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 1201.287463][T18630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1201.825378][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 1202.361856][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1203.219534][ T5813] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1204.210042][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 1204.216916][ T5821] ------------[ cut here ]------------ [ 1204.222710][ T5821] refcnt < 0 [ 1204.222721][ T5821] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#1: kworker/u9:5/5821 [ 1204.236508][ T5821] Modules linked in: [ 1204.240573][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.251694][ T5821] Tainted: [L]=SOFTLOCKUP [ 1204.256074][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1204.266775][ T5821] Workqueue: hci4 hci_conn_timeout [ 1204.271905][ T5821] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1204.277606][ T5821] Code: 44 0f b6 2d 33 ad 4d 06 31 ff 41 83 e5 40 44 89 ee e8 7a 4b 81 f7 45 84 ed 0f 84 02 ff ff ff e9 86 2f ea f6 e8 17 51 81 f7 90 <0f> 0b 90 e8 0e 51 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1204.297245][ T5821] RSP: 0018:ffffc90003d97c18 EFLAGS: 00010293 [ 1204.303310][ T5821] RAX: 0000000000000000 RBX: ffff88803f130a40 RCX: ffffffff8a877def [ 1204.311322][ T5821] RDX: ffff88804c998000 RSI: ffffffff8a877ee9 RDI: ffff88804c998000 [ 1204.319512][ T5821] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1204.327624][ T5821] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88803f130000 [ 1204.335635][ T5821] R13: ffff88804c9984c4 R14: ffffffff90d9d404 R15: 0000000000000000 [ 1204.343632][ T5821] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 1204.352607][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.359189][ T5821] CR2: 00007f3279529ef8 CR3: 000000007b071000 CR4: 00000000003526f0 [ 1204.367200][ T5821] Call Trace: [ 1204.370477][ T5821] [ 1204.373448][ T5821] process_one_work+0xa23/0x19a0 [ 1204.378394][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 1204.383800][ T5821] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1204.389172][ T5821] worker_thread+0x5ef/0xe50 [ 1204.393805][ T5821] ? kthread+0x13a/0x450 [ 1204.398037][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 1204.403197][ T5821] kthread+0x370/0x450 [ 1204.407257][ T5821] ? __pfx_kthread+0x10/0x10 [ 1204.411840][ T5821] ret_from_fork+0x754/0xd80 [ 1204.416461][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.421569][ T5821] ? __switch_to+0x7b4/0x1120 [ 1204.426279][ T5821] ? __pfx_kthread+0x10/0x10 [ 1204.430863][ T5821] ret_from_fork_asm+0x1a/0x30 [ 1204.435822][ T5821] [ 1204.438835][ T5821] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1204.446104][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1204.457112][ T5821] Tainted: [L]=SOFTLOCKUP [ 1204.461420][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1204.471464][ T5821] Workqueue: hci4 hci_conn_timeout [ 1204.476579][ T5821] Call Trace: [ 1204.479844][ T5821] [ 1204.482761][ T5821] dump_stack_lvl+0x100/0x190 [ 1204.487441][ T5821] vpanic+0x552/0x970 [ 1204.491413][ T5821] ? __pfx_vpanic+0x10/0x10 [ 1204.495913][ T5821] panic+0xd1/0xe0 [ 1204.499626][ T5821] ? __pfx_panic+0x10/0x10 [ 1204.504042][ T5821] ? check_panic_on_warn+0x1f/0x90 [ 1204.509145][ T5821] check_panic_on_warn.cold+0x19/0x34 [ 1204.514509][ T5821] ? hci_conn_timeout+0x16a/0x230 [ 1204.519526][ T5821] __warn.cold+0x191/0x348 [ 1204.523935][ T5821] __report_bug+0x296/0x3d0 [ 1204.528431][ T5821] ? hci_conn_timeout+0x16a/0x230 [ 1204.533458][ T5821] ? __pfx___report_bug+0x10/0x10 [ 1204.538474][ T5821] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1204.544276][ T5821] ? __mod_timer+0x40e/0xca0 [ 1204.548867][ T5821] ? look_up_lock_class+0x55/0x120 [ 1204.553976][ T5821] ? register_lock_class+0x40/0x560 [ 1204.559167][ T5821] ? do_raw_spin_lock+0x128/0x260 [ 1204.564193][ T5821] ? hci_conn_timeout+0x16a/0x230 [ 1204.569215][ T5821] report_bug+0xb2/0x220 [ 1204.573454][ T5821] ? hci_conn_timeout+0x16a/0x230 [ 1204.578474][ T5821] handle_bug+0x16a/0x2a0 [ 1204.582803][ T5821] exc_invalid_op+0x17/0x50 [ 1204.587307][ T5821] asm_exc_invalid_op+0x1a/0x20 [ 1204.592150][ T5821] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1204.597785][ T5821] Code: 44 0f b6 2d 33 ad 4d 06 31 ff 41 83 e5 40 44 89 ee e8 7a 4b 81 f7 45 84 ed 0f 84 02 ff ff ff e9 86 2f ea f6 e8 17 51 81 f7 90 <0f> 0b 90 e8 0e 51 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1204.617383][ T5821] RSP: 0018:ffffc90003d97c18 EFLAGS: 00010293 [ 1204.623445][ T5821] RAX: 0000000000000000 RBX: ffff88803f130a40 RCX: ffffffff8a877def [ 1204.631406][ T5821] RDX: ffff88804c998000 RSI: ffffffff8a877ee9 RDI: ffff88804c998000 [ 1204.639369][ T5821] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1204.647329][ T5821] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88803f130000 [ 1204.655288][ T5821] R13: ffff88804c9984c4 R14: ffffffff90d9d404 R15: 0000000000000000 [ 1204.663254][ T5821] ? hci_conn_timeout+0x6f/0x230 [ 1204.668199][ T5821] ? hci_conn_timeout+0x169/0x230 [ 1204.673222][ T5821] ? hci_conn_timeout+0x169/0x230 [ 1204.678245][ T5821] process_one_work+0xa23/0x19a0 [ 1204.683191][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 1204.688564][ T5821] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1204.693934][ T5821] worker_thread+0x5ef/0xe50 [ 1204.698528][ T5821] ? kthread+0x13a/0x450 [ 1204.702758][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 1204.707859][ T5821] kthread+0x370/0x450 [ 1204.711917][ T5821] ? __pfx_kthread+0x10/0x10 [ 1204.716499][ T5821] ret_from_fork+0x754/0xd80 [ 1204.721082][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.726191][ T5821] ? __switch_to+0x7b4/0x1120 [ 1204.730863][ T5821] ? __pfx_kthread+0x10/0x10 [ 1204.735445][ T5821] ret_from_fork_asm+0x1a/0x30 [ 1204.740214][ T5821] [ 1204.743446][ T5821] Kernel Offset: disabled [ 1204.747744][ T5821] Rebooting in 86400 seconds..