last executing test programs: 21m20.730355749s ago: executing program 3 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1) ftruncate(r3, 0x800799c) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) 21m20.547377253s ago: executing program 3 (id=192): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000001c0)) 21m20.250973482s ago: executing program 3 (id=195): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400), 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 21m15.890921583s ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 21m15.68883424s ago: executing program 3 (id=217): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2010491, 0x0) 21m15.446767181s ago: executing program 3 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000081008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xd, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bb", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m15.166390539s ago: executing program 32 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000081008500000017000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xd, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bb", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m52.208529213s ago: executing program 5 (id=1412): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @random="f4c8035ad62c", {0x2, 0x8}}, 0x10, 0x1f, @random, @void, @void}}]}, 0x48}}, 0x4854) 16m52.024303484s ago: executing program 5 (id=1415): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4048585}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0) 16m50.953493014s ago: executing program 5 (id=1416): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) 16m50.023249953s ago: executing program 5 (id=1419): syz_open_dev$evdev(0x0, 0x9, 0x88580) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x24000058) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x2, 0x5}) 16m49.054016217s ago: executing program 5 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 16m46.766211676s ago: executing program 5 (id=1431): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) 16m30.419677925s ago: executing program 33 (id=1431): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) 9.125807972s ago: executing program 2 (id=5103): syz_open_dev$vim2m(&(0x7f0000000680), 0x10007fffffff, 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) 8.843557741s ago: executing program 2 (id=5104): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xec, 0x18, 0x90, 0x20, 0x856, 0xac30, 0xdaf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x0, 0xb3, 0xcb, 0x2d}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x0, 0xe, 0x1, "8f"}, 0x0, 0x0, 0x0, 0x0}) 7.40238983s ago: executing program 0 (id=5109): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000037bf09200000000000000000800000", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 6.302794422s ago: executing program 0 (id=5110): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc042, 0x1ff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x8}}, 0x20) 6.258815165s ago: executing program 4 (id=5111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.177169611s ago: executing program 1 (id=5113): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 5.53197835s ago: executing program 4 (id=5114): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x46) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 5.316859911s ago: executing program 2 (id=5115): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.216431352s ago: executing program 6 (id=5116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800fc00b7040000000000008500000033000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.169770005s ago: executing program 6 (id=5117): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x15de, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) close(r3) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 4.651418498s ago: executing program 6 (id=5118): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16c3b14a4ab08a4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) socket(0x3e, 0x80000, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xb, [@float={0x9, 0x0, 0x0, 0x10, 0x2}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x3, 0x1}, {0x9, 0x7f}, {0x10}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x3}, @typedef={0xc}]}, {0x0, [0x7f, 0x61, 0x61, 0x30, 0x30, 0x30, 0x0, 0x2e, 0x5f]}}, &(0x7f00000008c0)=""/102, 0x83, 0x66, 0x1, 0x7fffffff, 0x10000}, 0x28) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x140000, 0x0) read$usbfs(r2, &(0x7f00000001c0)=""/90, 0x5a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0xc3000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000940)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xd, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r2], 0x0, 0x10, 0xc}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x1}, 0x1}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0xffffffe, 0x7, 0x269f, 0x40004, 0x7fff, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000004c0)={0x800100, 0x5, 0x1, 0x9, 0x6, 0x5}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="00000000000000001c00128009000100766c61", @ANYRES32, @ANYBLOB='\b\x00'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) 4.550362353s ago: executing program 4 (id=5119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010027bd7000fddbdf251d01000015000300030000200502000005b7780c02001a000600000015"], 0x44}}, 0x2404c0c8) 4.549377529s ago: executing program 6 (id=5120): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.492009303s ago: executing program 4 (id=5121): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000037bf09200000000000000000800000", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 4.341268967s ago: executing program 1 (id=5122): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, 0x0) 4.213010475s ago: executing program 0 (id=5123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) get_robust_list(r2, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x18) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f00000000c0), &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1}]}, 0x18}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/223, 0xdf, 0x1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0xc2}}) syz_emit_ethernet(0xfbf, &(0x7f0000001600)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '\x00', 0xf89, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x4, "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"}}}}}}, 0x0) 3.051384957s ago: executing program 0 (id=5124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="74c71536cea3e7c1818c5b", 0x0, 0x4}, 0x20) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2.989125438s ago: executing program 4 (id=5125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000380), &(0x7f0000000580)=r5}, 0x20) 2.657501813s ago: executing program 0 (id=5126): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) 1.918334216s ago: executing program 2 (id=5127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800fc00b7040000000000008500000033000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.740853426s ago: executing program 1 (id=5128): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x15de, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) close(r3) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.664935934s ago: executing program 2 (id=5129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.23341854s ago: executing program 1 (id=5130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 1.178083191s ago: executing program 6 (id=5131): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4fa, &(0x7f0000010400)={0x0, 0x86e0, 0x1000, 0x8, 0x397}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000400)=""/257, 0x101}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 1.101279112s ago: executing program 2 (id=5132): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 398.378148ms ago: executing program 1 (id=5133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2b003300d0000000ffffffffffff080211000000505050505050000000"], 0x48}}, 0x0) 383.561908ms ago: executing program 0 (id=5134): r0 = dup(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x1, 0x186) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5000) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xda}}, 0x3, 0x0, 0x2, 0x800, 0x10, 0x0, 0xe0}, 0x9c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 201.847607ms ago: executing program 4 (id=5135): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000037bf09200000000000000000800000", @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 200.812098ms ago: executing program 1 (id=5136): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ffc000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9) 0s ago: executing program 6 (id=5137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) kernel console output (not intermixed with test programs): 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1157.767494][T12507] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1157.777919][T12507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1157.788192][T12507] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1157.813189][T12507] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1157.826997][T12507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.835864][T12507] usb 5-1: Product: syz [ 1157.840232][T12507] usb 5-1: Manufacturer: syz [ 1157.845368][T12507] usb 5-1: SerialNumber: syz [ 1157.870610][T12507] usb 5-1: config 0 descriptor?? [ 1157.876561][T19349] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1157.887033][T12507] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1158.716947][ T5814] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1158.752884][ T5814] usb 2-1: USB disconnect, device number 97 [ 1158.919121][T12507] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1158.952234][T19308] udevd[19308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1159.168237][ T5869] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1159.181252][ T5869] usb 1-1: USB disconnect, device number 90 [ 1160.521508][ T5814] usb 5-1: USB disconnect, device number 88 [ 1161.550370][ T5862] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1161.700628][T19382] fuse: Unknown parameter 'group_id00000000000000000000' [ 1161.712381][ T5862] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1161.721647][ T5862] usb 7-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1161.730691][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.761247][ T5862] usb 7-1: config 0 descriptor?? [ 1161.995822][T16453] usb 7-1: USB disconnect, device number 62 [ 1162.228668][ T5862] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1162.376940][ T30] audit: type=1400 audit(2000000802.184:689): avc: denied { getopt } for pid=19401 comm="syz.4.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1162.471205][ T5862] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1162.479310][ T5862] usb 3-1: config 0 has no interface number 0 [ 1162.489339][ T5862] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1163.422081][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.432454][ T5862] usb 3-1: config 0 descriptor?? [ 1163.440449][ T5862] usb 3-1: selecting invalid altsetting 1 [ 1163.446656][ T5862] dvb_ttusb_budget: ttusb_init_controller: error [ 1163.453003][ T5862] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1163.532509][ T5862] DVB: Unable to find symbol cx22700_attach() [ 1163.579027][ T5862] DVB: Unable to find symbol tda10046_attach() [ 1163.585473][ T5862] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1163.667917][ T5862] usb 3-1: USB disconnect, device number 46 [ 1163.775576][T19416] fuse: Unknown parameter 'group_id00000000000000000000' [ 1164.298455][T16453] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1165.710843][T16453] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1165.725765][T16453] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.734041][T16453] usb 7-1: Product: syz [ 1165.738223][T16453] usb 7-1: Manufacturer: syz [ 1165.743222][T16453] usb 7-1: SerialNumber: syz [ 1165.766546][T16453] usb 7-1: config 0 descriptor?? [ 1165.805585][T16453] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 063 [ 1166.115034][ T30] audit: type=1400 audit(2000000805.617:690): avc: denied { read } for pid=19443 comm="syz.2.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1166.277385][T16453] (null): failure reading functionality [ 1166.519812][T16453] i2c i2c-1: failure reading functionality [ 1166.637489][T16453] i2c i2c-1: connected i2c-tiny-usb device [ 1167.661343][T16453] usb 7-1: USB disconnect, device number 63 [ 1167.748964][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1167.766473][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1167.805096][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 1168.178970][T19461] fuse: Bad value for 'user_id' [ 1168.198950][T19461] fuse: Bad value for 'user_id' [ 1168.328764][T16453] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1168.639513][T16453] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.648122][T16453] usb 7-1: config 0 has no interface number 0 [ 1168.655798][T16453] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1168.666637][T16453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.779685][T16453] usb 7-1: config 0 descriptor?? [ 1168.903046][T16453] usb 7-1: selecting invalid altsetting 1 [ 1168.982460][T16453] dvb_ttusb_budget: ttusb_init_controller: error [ 1169.062960][T16453] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1169.145286][T16453] DVB: Unable to find symbol cx22700_attach() [ 1169.191162][T16453] DVB: Unable to find symbol tda10046_attach() [ 1169.208150][T16453] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1169.246589][T16453] usb 7-1: USB disconnect, device number 64 [ 1169.600394][T12507] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1169.669032][T19500] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1169.851147][T12507] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1169.887626][T12507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.898963][T12507] usb 2-1: Product: syz [ 1169.904064][T12507] usb 2-1: Manufacturer: syz [ 1169.908728][T12507] usb 2-1: SerialNumber: syz [ 1169.929258][T12507] usb 2-1: config 0 descriptor?? [ 1169.942857][T12507] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 098 [ 1170.784923][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1170.946349][T12507] (null): failure reading functionality [ 1171.190518][T12507] i2c i2c-1: failure reading functionality [ 1171.209567][T12507] i2c i2c-1: connected i2c-tiny-usb device [ 1171.226216][T12507] usb 2-1: USB disconnect, device number 98 [ 1171.478292][T19533] fuse: Unknown parameter '00000000000000000003' [ 1171.706450][ T5920] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1172.727272][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1172.735800][ T5920] usb 3-1: config 0 has no interface number 0 [ 1172.742007][ T5920] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1172.751445][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.799392][ T5920] usb 3-1: config 0 descriptor?? [ 1172.826031][ T5920] usb 3-1: selecting invalid altsetting 1 [ 1172.843670][ T5920] dvb_ttusb_budget: ttusb_init_controller: error [ 1172.850032][ T5920] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1172.980913][ T5920] DVB: Unable to find symbol cx22700_attach() [ 1173.078183][ T5920] DVB: Unable to find symbol tda10046_attach() [ 1173.084390][ T5920] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1173.129477][ T5920] usb 3-1: USB disconnect, device number 47 [ 1173.129675][T19560] fuse: Unknown parameter '00000000000000000003' [ 1173.481032][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 1173.489096][ C0] lec:lec_tx_timeout: lec0 [ 1173.524413][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4310'. [ 1173.815150][ T30] audit: type=1400 audit(2000000812.605:691): avc: denied { prog_load } for pid=19561 comm="syz.6.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1174.354009][ T30] audit: type=1400 audit(2000000813.381:692): avc: denied { map_create } for pid=19576 comm="syz.6.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1174.531490][ T30] audit: type=1400 audit(2000000813.381:693): avc: denied { map_read map_write } for pid=19576 comm="syz.6.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1175.565790][ T5869] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1175.757181][ T5869] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1176.301289][ T5869] usb 1-1: config 0 has no interface number 0 [ 1176.322566][ T5869] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1176.363519][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.390192][ T5869] usb 1-1: config 0 descriptor?? [ 1176.472720][ T5869] usb 1-1: selecting invalid altsetting 1 [ 1176.492289][ T5869] dvb_ttusb_budget: ttusb_init_controller: error [ 1176.532865][ T5869] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1176.830157][T19617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4326'. [ 1177.627398][ T5869] DVB: Unable to find symbol cx22700_attach() [ 1178.685087][ T30] audit: type=1400 audit(2000000817.431:694): avc: denied { prog_run } for pid=19623 comm="syz.4.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1178.807330][ T5869] DVB: Unable to find symbol tda10046_attach() [ 1179.435800][ T5869] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1179.457212][ T5869] usb 1-1: USB disconnect, device number 91 [ 1180.351647][ T30] audit: type=1326 audit(2000000818.442:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.6.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8c39bf79 code=0x7fc00000 [ 1180.899913][T19647] binder: BINDER_SET_CONTEXT_MGR already set [ 1180.924298][T19647] binder: 19646:19647 ioctl 4018620d 200000000280 returned -16 [ 1181.518618][T19660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1182.092534][T19667] input: syz1 as /devices/virtual/input/input59 [ 1182.567648][T19656] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1182.621538][ T5920] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1183.580893][T13819] Bluetooth: hci0: command 0x040f tx timeout [ 1183.658556][ T29] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1183.692276][ T5920] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1183.711252][ T5920] usb 7-1: config 0 has no interface number 0 [ 1183.720402][ T5920] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1183.733373][ T5916] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1183.744863][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.676307][ T5920] usb 7-1: config 0 descriptor?? [ 1184.692189][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 1184.699703][ T5920] usb 7-1: selecting invalid altsetting 1 [ 1184.708824][ T29] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 1184.727678][ T29] usb 5-1: config 0 has no interface number 0 [ 1184.733953][ T5920] dvb_ttusb_budget: ttusb_init_controller: error [ 1184.741599][ T29] usb 5-1: config 0 interface 176 has no altsetting 0 [ 1184.750639][ T5916] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1184.762027][ T5920] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1184.776975][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.788629][ T29] usb 5-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1184.804076][ T5916] usb 3-1: Product: syz [ 1184.808280][ T5916] usb 3-1: Manufacturer: syz [ 1184.813378][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.823764][ T5916] usb 3-1: SerialNumber: syz [ 1184.829812][ T29] usb 5-1: Product: syz [ 1184.844161][ T5916] usb 3-1: config 0 descriptor?? [ 1184.849236][ T29] usb 5-1: Manufacturer: syz [ 1184.853837][ T29] usb 5-1: SerialNumber: syz [ 1184.865464][ T5916] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 048 [ 1184.895298][ T29] usb 5-1: config 0 descriptor?? [ 1184.901209][ T5920] DVB: Unable to find symbol cx22700_attach() [ 1184.911490][ T29] usb-storage 5-1:0.176: USB Mass Storage device detected [ 1184.932344][ T29] usb-storage 5-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1184.980678][ T5920] DVB: Unable to find symbol tda10046_attach() [ 1184.987093][ T5920] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1185.023132][ T5920] usb 7-1: USB disconnect, device number 65 [ 1185.511367][ T5916] i2c i2c-1: failure reading functionality [ 1185.520677][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 1185.543077][ T5916] usb 3-1: USB disconnect, device number 48 [ 1186.703165][ T5869] usb 5-1: USB disconnect, device number 89 [ 1186.747872][T19702] Bluetooth: hci0: too big key_count value 9038 [ 1187.039757][T19705] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 1188.961347][ T5916] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1189.047797][ T5128] Bluetooth: hci0: command 0x040f tx timeout [ 1189.054101][T13819] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1189.111967][T19734] input: syz1 as /devices/virtual/input/input60 [ 1189.151461][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1189.230530][ T5916] usb 5-1: config 0 has no interface number 0 [ 1189.354736][ T5916] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1189.518547][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.525120][T19736] Bluetooth: hci0: too big key_count value 9038 [ 1189.540154][ T5916] usb 5-1: config 0 descriptor?? [ 1189.549664][T19675] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1189.564910][ T5916] usb 5-1: selecting invalid altsetting 1 [ 1189.574109][ T5916] dvb_ttusb_budget: ttusb_init_controller: error [ 1189.582151][ T5916] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1190.597384][T19675] usb 1-1: Using ep0 maxpacket: 32 [ 1190.602639][ T5916] DVB: Unable to find symbol cx22700_attach() [ 1190.610552][T19675] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 1190.628797][T19675] usb 1-1: config 0 has no interface number 0 [ 1190.646648][T19675] usb 1-1: config 0 interface 176 has no altsetting 0 [ 1190.663029][T19675] usb 1-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1190.675499][ T5916] DVB: Unable to find symbol tda10046_attach() [ 1190.681680][ T5916] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1190.690678][T19675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.703745][T19675] usb 1-1: Product: syz [ 1190.707930][T19675] usb 1-1: Manufacturer: syz [ 1190.712534][T19675] usb 1-1: SerialNumber: syz [ 1190.726985][ T5916] usb 5-1: USB disconnect, device number 90 [ 1190.770812][T19675] usb 1-1: config 0 descriptor?? [ 1190.795146][T19675] usb-storage 1-1:0.176: USB Mass Storage device detected [ 1190.812536][T19675] usb-storage 1-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1191.433020][ T5128] Bluetooth: hci0: command 0x040f tx timeout [ 1191.528423][T19675] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1192.114770][T19675] usb 7-1: Using ep0 maxpacket: 16 [ 1192.129667][T19675] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.151001][T19675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.177769][T19675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1192.197450][T19675] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1192.221492][T19675] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.270632][T19675] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1192.312709][T19675] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1192.357267][T19675] usb 7-1: Manufacturer: syz [ 1192.411624][T19675] usb 7-1: config 0 descriptor?? [ 1193.617717][ T5814] usb 1-1: USB disconnect, device number 92 [ 1193.708043][T19675] rc_core: IR keymap rc-hauppauge not found [ 1193.716445][T19675] Registered IR keymap rc-empty [ 1193.722014][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1193.750566][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1193.774345][T19675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1193.794776][T19774] loop2: detected capacity change from 0 to 7 [ 1193.802015][T19774] Dev loop2: unable to read RDB block 7 [ 1193.810629][T19774] loop2: unable to read partition table [ 1193.818124][T19675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input61 [ 1193.831183][T19774] loop2: partition table beyond EOD, truncated [ 1193.837539][T19774] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1193.855153][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1193.985790][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.039382][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.061235][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.093205][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.445337][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.470936][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.654810][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.691634][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.713053][T19675] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1194.767706][T19675] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1194.781999][T19675] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1194.872014][T10197] lec:lec_start_xmit: lec0:No lecd attached [ 1194.946199][T19675] usb 7-1: USB disconnect, device number 66 [ 1195.108313][ T5814] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1196.210811][ T5814] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1196.228591][ T5814] usb 5-1: config 0 has no interface number 0 [ 1196.234874][ T5814] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1196.253634][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.374232][ T5814] usb 5-1: config 0 descriptor?? [ 1196.404693][ T5814] usb 5-1: selecting invalid altsetting 1 [ 1196.433914][ T5814] dvb_ttusb_budget: ttusb_init_controller: error [ 1196.457511][ T5814] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1196.711818][ T5814] DVB: Unable to find symbol cx22700_attach() [ 1196.742522][ T5814] DVB: Unable to find symbol tda10046_attach() [ 1196.752936][ T5814] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1197.177714][ T5814] usb 5-1: USB disconnect, device number 91 [ 1197.377234][T19810] input: syz1 as /devices/virtual/input/input62 [ 1197.973237][T19675] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1198.017581][T19816] batadv_slave_1: entered promiscuous mode [ 1198.050216][T19815] batadv_slave_1: left promiscuous mode [ 1198.159382][T19675] usb 7-1: Using ep0 maxpacket: 32 [ 1198.189548][T19675] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 1198.240628][T19675] usb 7-1: config 0 has no interface number 0 [ 1198.272041][T19675] usb 7-1: config 0 interface 176 has no altsetting 0 [ 1198.299853][T19820] kAFS: unable to lookup cell 'ÿ' [ 1198.317994][T19675] usb 7-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1198.329054][T19675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.340888][T19675] usb 7-1: Product: syz [ 1198.345084][T19675] usb 7-1: Manufacturer: syz [ 1198.357960][T19675] usb 7-1: SerialNumber: syz [ 1198.401584][T19675] usb 7-1: config 0 descriptor?? [ 1198.419615][T19675] usb-storage 7-1:0.176: USB Mass Storage device detected [ 1198.438582][T19675] usb-storage 7-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1199.053014][ T10] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1199.280806][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1199.297176][ T10] usb 1-1: config 0 has no interface number 0 [ 1199.732880][T19855] kAFS: unable to lookup cell 'ÿ' [ 1199.747238][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1199.764995][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.786675][ T10] usb 1-1: config 0 descriptor?? [ 1199.805973][ T10] usb 1-1: selecting invalid altsetting 1 [ 1199.822988][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1199.842874][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1199.979290][ T10] DVB: Unable to find symbol cx22700_attach() [ 1200.178651][ T10] DVB: Unable to find symbol tda10046_attach() [ 1200.189587][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1200.228927][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1200.236996][ C0] lec:lec_tx_timeout: lec0 [ 1200.533378][ T10] usb 1-1: USB disconnect, device number 93 [ 1200.537443][T19675] usb 7-1: USB disconnect, device number 67 [ 1201.237163][T19890] kAFS: unable to lookup cell 'ÿ' [ 1203.057926][T19901] loop2: detected capacity change from 0 to 7 [ 1203.077945][T19901] Dev loop2: unable to read RDB block 7 [ 1203.083935][T19901] loop2: unable to read partition table [ 1203.089686][T19901] loop2: partition table beyond EOD, truncated [ 1203.105175][T19901] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1203.153946][ T5176] Dev loop2: unable to read RDB block 7 [ 1203.163373][ T5176] loop2: unable to read partition table [ 1203.180000][ T5176] loop2: partition table beyond EOD, truncated [ 1203.425596][ T5920] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1204.300755][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1204.309302][ T5920] usb 2-1: config 0 has no interface number 0 [ 1204.315487][ T5920] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1204.325412][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.374268][ T5920] usb 2-1: config 0 descriptor?? [ 1204.406874][ T5920] usb 2-1: selecting invalid altsetting 1 [ 1204.415583][ T5920] dvb_ttusb_budget: ttusb_init_controller: error [ 1204.422285][ T5920] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1204.511119][ T5920] DVB: Unable to find symbol cx22700_attach() [ 1204.586195][ T5920] DVB: Unable to find symbol tda10046_attach() [ 1204.601424][ T5920] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1204.660391][T19932] kAFS: unable to lookup cell 'ÿ' [ 1204.771455][ T5920] usb 2-1: USB disconnect, device number 99 [ 1205.602913][T19947] loop2: detected capacity change from 0 to 7 [ 1205.624017][T19947] Dev loop2: unable to read RDB block 7 [ 1205.660067][T19947] loop2: unable to read partition table [ 1205.665882][T19947] loop2: partition table beyond EOD, truncated [ 1205.707520][T19947] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1205.743065][ T30] audit: type=1400 audit(2000000842.743:696): avc: denied { getopt } for pid=19943 comm="syz.4.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1206.284965][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1208.720721][T19675] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1208.867207][T19980] batadv_slave_1: entered promiscuous mode [ 1208.878445][T19980] batadv_slave_1: left promiscuous mode [ 1208.944147][T19675] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1208.957551][T19675] usb 5-1: config 0 has no interface number 0 [ 1208.984589][T19675] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1208.993656][T19675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.029500][T19675] usb 5-1: config 0 descriptor?? [ 1209.061401][T19675] usb 5-1: selecting invalid altsetting 1 [ 1209.067285][T19675] dvb_ttusb_budget: ttusb_init_controller: error [ 1209.091531][T19675] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1209.194152][T19675] DVB: Unable to find symbol cx22700_attach() [ 1209.259080][T19675] DVB: Unable to find symbol tda10046_attach() [ 1209.286558][T19675] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1209.315404][T19675] usb 5-1: USB disconnect, device number 92 [ 1209.479750][T19988] loop2: detected capacity change from 0 to 7 [ 1209.487268][T19988] Dev loop2: unable to read RDB block 7 [ 1209.499504][T19988] loop2: unable to read partition table [ 1209.518056][T19988] loop2: partition table beyond EOD, truncated [ 1209.525596][T19988] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1210.412113][T20005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4449'. [ 1214.875222][T19675] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1215.138658][T20039] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1215.181932][T19675] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1215.254522][T19675] usb 2-1: config 0 has no interface number 0 [ 1215.261080][T19675] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1215.272191][T19675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.284110][T19675] usb 2-1: config 0 descriptor?? [ 1215.291862][T19675] usb 2-1: selecting invalid altsetting 1 [ 1215.298075][T19675] dvb_ttusb_budget: ttusb_init_controller: error [ 1215.304997][T19675] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1215.509131][T19675] DVB: Unable to find symbol cx22700_attach() [ 1215.545412][T19675] DVB: Unable to find symbol tda10046_attach() [ 1215.545668][T20052] MPI: mpi too large (113288 bits) [ 1215.553712][T19675] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1215.569317][T19675] usb 2-1: USB disconnect, device number 100 [ 1215.577096][ T5920] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1215.636170][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4467'. [ 1215.790854][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1215.906146][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1215.967410][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1215.999409][ T5920] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1216.012711][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.021122][ T5920] usb 1-1: Product: syz [ 1216.025314][ T5920] usb 1-1: Manufacturer: syz [ 1216.030767][ T5920] usb 1-1: SerialNumber: syz [ 1216.047439][ T5920] usb 1-1: config 0 descriptor?? [ 1216.513987][ T5920] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1216.665797][T20061] 9p: Bad value for 'rfdno' [ 1216.714355][ T5920] usb 1-1: USB disconnect, device number 94 [ 1217.300906][T20087] input: syz1 as /devices/virtual/input/input63 [ 1217.582109][T20089] tipc: Started in network mode [ 1217.586999][T20089] tipc: Node identity , cluster identity 4711 [ 1217.593158][T20089] tipc: Failed to obtain node identity [ 1217.598628][T20089] tipc: Enabling of bearer rejected, failed to enable media [ 1217.948990][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1218.520646][T16453] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1219.001804][ T5814] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1219.023139][T16453] usb 5-1: Using ep0 maxpacket: 32 [ 1219.155577][T16453] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 1219.168886][T16453] usb 5-1: config 0 has no interface number 0 [ 1219.175303][T16453] usb 5-1: config 0 interface 176 has no altsetting 0 [ 1219.193546][T16453] usb 5-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1219.204428][T16453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.219962][T16453] usb 5-1: Product: syz [ 1219.224144][T16453] usb 5-1: Manufacturer: syz [ 1219.237994][T16453] usb 5-1: SerialNumber: syz [ 1219.287167][T16453] usb 5-1: config 0 descriptor?? [ 1219.309415][T16453] usb-storage 5-1:0.176: USB Mass Storage device detected [ 1219.344802][ T5814] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1219.352954][ T5814] usb 2-1: config 0 has no interface number 0 [ 1219.386286][T16453] usb-storage 5-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1219.407167][ T5814] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1219.481643][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.526055][ T5814] usb 2-1: config 0 descriptor?? [ 1219.579547][ T5814] usb 2-1: selecting invalid altsetting 1 [ 1219.585602][ T5814] dvb_ttusb_budget: ttusb_init_controller: error [ 1219.645575][ T5814] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1219.821511][ T5814] DVB: Unable to find symbol cx22700_attach() [ 1219.901579][ T5814] DVB: Unable to find symbol tda10046_attach() [ 1219.912937][ T5814] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1219.945620][ T5814] usb 2-1: USB disconnect, device number 101 [ 1220.968793][ T5920] usb 5-1: USB disconnect, device number 93 [ 1221.312953][T20137] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1221.564979][ T5920] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1221.702531][T20137] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1221.866748][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 1221.924998][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.963470][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1221.985350][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1222.024598][ T5920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1222.069928][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.166576][ T5920] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1222.208910][ T5920] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1222.216914][ T5920] usb 5-1: Manufacturer: syz [ 1222.257892][ T5920] usb 5-1: config 0 descriptor?? [ 1222.585457][ T5920] rc_core: IR keymap rc-hauppauge not found [ 1222.591384][ T5920] Registered IR keymap rc-empty [ 1222.614295][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1222.649778][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1222.662870][T20157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.703772][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1222.719611][T20157] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1222.753398][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 1222.836367][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1222.845855][ T30] audit: type=1400 audit(2000000858.729:697): avc: denied { ioctl } for pid=20161 comm="syz.0.4508" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1222.854141][T20162] hpfs: Bad magic ... probably not HPFS [ 1222.916364][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1222.941941][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1222.978604][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.014330][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.085555][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.124667][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.160809][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.172614][T13819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1223.182346][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.191540][T13819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1223.202326][T13819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1223.211208][T13819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1223.218845][T13819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1223.226015][ T5920] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1223.249566][ T5920] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1223.267369][ T5920] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1223.286871][ T5920] usb 5-1: USB disconnect, device number 94 [ 1223.755908][T20172] chnl_net:caif_netlink_parms(): no params data found [ 1223.848899][T20172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.856473][T20172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.863729][T20172] bridge_slave_0: entered allmulticast mode [ 1223.871199][T20172] bridge_slave_0: entered promiscuous mode [ 1223.879843][T20172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.887026][T20172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.898416][T20172] bridge_slave_1: entered allmulticast mode [ 1223.905757][T20172] bridge_slave_1: entered promiscuous mode [ 1223.910210][T20183] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1223.934462][T20172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.946248][T20172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.975642][T20183] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1223.976624][T20172] team0: Port device team_slave_0 added [ 1223.991920][T20172] team0: Port device team_slave_1 added [ 1224.019521][T20172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.027259][T20172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.070220][T20172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.257111][T20172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.409119][T20172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.435759][T20172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.563058][T20172] hsr_slave_0: entered promiscuous mode [ 1224.749679][T20172] hsr_slave_1: entered promiscuous mode [ 1224.825519][T20172] debugfs: 'hsr0' already exists in 'hsr' [ 1224.881563][T20172] Cannot create hsr debugfs directory [ 1225.342693][T20172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.388936][T20172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.399581][ T5128] Bluetooth: hci2: command tx timeout [ 1225.662529][ T5916] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1225.684936][T20172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.715087][T20172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.814728][T20214] 9p: Bad value for 'rfdno' [ 1225.886871][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1225.918324][T20216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1225.922691][ T5916] usb 5-1: config 0 has no interface number 0 [ 1225.944946][T20172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1225.945925][T20216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1225.959127][T20172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.979262][ T5916] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1225.995557][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.003721][ T5916] usb 5-1: Product: syz [ 1226.008953][ T5916] usb 5-1: Manufacturer: syz [ 1226.013550][ T5916] usb 5-1: SerialNumber: syz [ 1226.021226][ T5916] usb 5-1: config 0 descriptor?? [ 1226.144700][T20172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.164350][T20172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.915720][T20172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1226.939606][T20172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1226.950246][T20172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1226.968012][T20172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1227.107681][ T30] audit: type=1400 audit(2000000862.733:698): avc: denied { egress } for pid=20231 comm="syz.2.4527" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1227.156847][ T30] audit: type=1400 audit(2000000862.733:699): avc: denied { sendto } for pid=20231 comm="syz.2.4527" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1227.190066][T20172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.226105][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1227.486856][T20172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.564496][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.571642][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.586677][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.593884][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.631587][ T5128] Bluetooth: hci2: command tx timeout [ 1227.926218][T20248] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1227.933334][T20248] VFS: Can't find a romfs filesystem on dev nullb0. [ 1227.933334][T20248] [ 1228.630825][T20254] 9p: Bad value for 'rfdno' [ 1228.884520][T16453] usb 5-1: USB disconnect, device number 95 [ 1229.139515][T20268] input: syz1 as /devices/virtual/input/input65 [ 1229.590162][T20172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.621912][T20268] tipc: Started in network mode [ 1229.626829][T20268] tipc: Node identity , cluster identity 4711 [ 1229.633002][T20268] tipc: Failed to obtain node identity [ 1229.638500][T20268] tipc: Enabling of bearer rejected, failed to enable media [ 1229.852935][ T5128] Bluetooth: hci2: command tx timeout [ 1229.963252][ T5920] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1230.141514][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 1230.151954][ T30] audit: type=1400 audit(2000000865.558:700): avc: denied { read } for pid=20282 comm="syz.0.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1230.192877][ T5920] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 1230.224451][ T5920] usb 2-1: config 0 has no interface number 0 [ 1230.224679][T20172] veth0_vlan: entered promiscuous mode [ 1230.237460][ T5920] usb 2-1: config 0 interface 176 has no altsetting 0 [ 1230.278412][ T5920] usb 2-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1230.292062][T20172] veth1_vlan: entered promiscuous mode [ 1230.310956][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.343437][ T5920] usb 2-1: Product: syz [ 1230.354235][ T5920] usb 2-1: Manufacturer: syz [ 1230.365038][ T5920] usb 2-1: SerialNumber: syz [ 1230.398018][ T5920] usb 2-1: config 0 descriptor?? [ 1230.427986][ T5920] usb-storage 2-1:0.176: USB Mass Storage device detected [ 1230.464214][T20287] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1230.471283][T20287] VFS: Can't find a romfs filesystem on dev nullb0. [ 1230.471283][T20287] [ 1230.486797][T20172] veth0_macvtap: entered promiscuous mode [ 1230.496540][T20172] veth1_macvtap: entered promiscuous mode [ 1230.512952][T20172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.523708][T20172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.576744][ T5920] usb-storage 2-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1230.821359][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.860267][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.905275][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.949836][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.984078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.005656][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.975500][ T355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.013876][ T355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.065931][T13819] Bluetooth: hci2: command tx timeout [ 1232.142050][ T5916] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1232.238751][T19675] usb 2-1: USB disconnect, device number 102 [ 1232.354329][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1232.405068][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1232.405886][T20315] fuse: Bad value for 'fd' [ 1232.426424][ T5916] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1232.453908][T20315] fuse: Unknown parameter 'silent' [ 1232.491913][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1232.514273][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1232.573921][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1232.589058][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.589115][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.590889][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 1232.632694][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1232.661959][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1232.706634][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1232.751128][ T5916] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1232.771823][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.779849][ T5916] usb 1-1: Product: syz [ 1232.847735][ T5916] usb 1-1: Manufacturer: syz [ 1232.864746][ T5916] usb 1-1: SerialNumber: syz [ 1232.892273][ T5916] usb 1-1: config 0 descriptor?? [ 1232.913230][T20300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1232.937794][ T5916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1233.050870][ T5916] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1233.124729][T19011] udevd[19011]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.390818][ T30] audit: type=1400 audit(2000000868.598:701): avc: denied { ioctl } for pid=20336 comm="syz.6.4557" path="socket:[67710]" dev="sockfs" ino=67710 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1235.104222][ T5814] usb 1-1: USB disconnect, device number 95 [ 1236.780628][ T30] audit: type=1326 audit(2000000871.769:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.4.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ab99bf79 code=0x7fc00000 [ 1237.154365][ T30] audit: type=1326 audit(2000000871.900:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.4.4564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09ab99bf79 code=0x7fc00000 [ 1238.650964][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1238.659001][ C0] lec:lec_tx_timeout: lec0 [ 1240.329410][ T30] audit: type=1400 audit(2000000874.837:704): avc: denied { unmount } for pid=13816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1240.514057][ T30] audit: type=1400 audit(2000000875.267:705): avc: denied { create } for pid=20406 comm="syz.4.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1241.009039][ T30] audit: type=1400 audit(2000000875.305:706): avc: denied { connect } for pid=20406 comm="syz.4.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1241.125576][ T30] audit: type=1400 audit(2000000875.305:707): avc: denied { write } for pid=20406 comm="syz.4.4573" path="socket:[67333]" dev="sockfs" ino=67333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1242.909820][ T5814] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1243.122435][ T5814] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1243.133144][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.157700][ T5814] usb 2-1: Product: syz [ 1243.283233][ T5814] usb 2-1: Manufacturer: syz [ 1243.299998][ T5814] usb 2-1: SerialNumber: syz [ 1243.922755][ T5814] usb 2-1: config 0 descriptor?? [ 1244.160602][ T5814] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1244.764847][ T30] audit: type=1326 audit(2000000879.243:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1244.875068][ T30] audit: type=1326 audit(2000000879.355:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1244.934280][ T30] audit: type=1326 audit(2000000879.355:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1244.979432][ T30] audit: type=1326 audit(2000000879.355:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.049790][ T30] audit: type=1326 audit(2000000879.355:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.103525][ T30] audit: type=1326 audit(2000000879.355:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.185316][ T30] audit: type=1326 audit(2000000879.355:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.209125][ T30] audit: type=1326 audit(2000000879.355:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.234795][ T30] audit: type=1326 audit(2000000879.355:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.299102][T20473] Bluetooth: hci0: too big key_count value 9038 [ 1245.410115][ T30] audit: type=1326 audit(2000000879.355:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20416 comm="syz.6.4581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1245.435042][T20475] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1245.442034][T20475] VFS: Can't find a romfs filesystem on dev nullb0. [ 1245.442034][T20475] [ 1246.064189][ T5814] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1246.091751][ T5814] usb 2-1: USB disconnect, device number 103 [ 1248.842781][T20509] Bluetooth: hci0: too big key_count value 9038 [ 1250.031740][ T5916] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1250.303763][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1250.344242][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1250.378657][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.386681][ T5916] usb 1-1: Product: syz [ 1250.420392][ T5916] usb 1-1: Manufacturer: syz [ 1250.437233][ T5916] usb 1-1: SerialNumber: syz [ 1250.466089][ T5916] usb 1-1: config 0 descriptor?? [ 1250.483190][ T5916] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1251.079486][ T5916] gspca_vc032x: reg_r err -110 [ 1251.447682][ T5916] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1251.497190][ T5916] usb 1-1: USB disconnect, device number 96 [ 1251.669248][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1251.669264][ T30] audit: type=1326 audit(2000000885.697:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.6.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1252.016756][ T30] audit: type=1326 audit(2000000885.968:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.6.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1252.277055][ T30] audit: type=1326 audit(2000000886.006:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20536 comm="syz.6.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70059bf79 code=0x7fc00000 [ 1252.314483][T20551] Bluetooth: hci0: too big key_count value 9038 [ 1253.213727][T20569] input: syz1 as /devices/virtual/input/input66 [ 1253.323661][T20572] tipc: Started in network mode [ 1253.328549][T20572] tipc: Node identity , cluster identity 4711 [ 1253.334679][T20572] tipc: Failed to obtain node identity [ 1253.340168][T20572] tipc: Enabling of bearer rejected, failed to enable media [ 1253.839211][ T30] audit: type=1400 audit(2000000887.708:728): avc: denied { recv } for pid=20564 comm="syz.6.4630" saddr=10.128.0.169 src=44594 daddr=10.128.1.75 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1254.045629][ T5916] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1254.426034][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4634'. [ 1255.709205][T20581] syz.6.4635 (20581): drop_caches: 2 [ 1256.825026][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 1256.837415][ T5916] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1256.847618][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.914467][T20617] input: syz1 as /devices/virtual/input/input67 [ 1256.978443][ T5916] usb 1-1: config 0 descriptor?? [ 1256.995584][ T5916] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1257.032676][T20619] tipc: Started in network mode [ 1257.037561][T20619] tipc: Node identity , cluster identity 4711 [ 1257.043676][T20619] tipc: Failed to obtain node identity [ 1257.049156][T20619] tipc: Enabling of bearer rejected, failed to enable media [ 1257.361772][ T5920] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1257.429343][ T5916] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1257.564442][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 1257.623238][ T5920] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 1257.652002][T20594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.666377][T20594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.779293][ T5920] usb 5-1: config 0 has no interface number 0 [ 1257.860164][ T5920] usb 5-1: config 0 interface 176 has no altsetting 0 [ 1257.906018][T20624] input: syz0 as /devices/virtual/input/input68 [ 1257.988024][ T5920] usb 5-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1258.102691][ T5916] gspca_cpia1: usb_control_msg 02, error -71 [ 1258.137956][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.195758][ T5916] gspca_cpia1: usb_control_msg 05, error -71 [ 1258.274637][ T5920] usb 5-1: Product: syz [ 1258.307776][ T5916] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1258.377537][ T5920] usb 5-1: Manufacturer: syz [ 1258.412872][ T5916] usb 1-1: USB disconnect, device number 97 [ 1258.424060][ T5920] usb 5-1: SerialNumber: syz [ 1259.390121][ T5920] usb 5-1: config 0 descriptor?? [ 1259.418826][ T5920] usb-storage 5-1:0.176: USB Mass Storage device detected [ 1259.439014][ T5920] usb-storage 5-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1259.539197][T20634] loop2: detected capacity change from 0 to 7 [ 1259.548565][T20575] Dev loop2: unable to read RDB block 7 [ 1259.554598][T20575] loop2: unable to read partition table [ 1259.560513][T20575] loop2: partition table beyond EOD, truncated [ 1259.573520][T20634] Dev loop2: unable to read RDB block 7 [ 1259.579115][T20634] loop2: unable to read partition table [ 1259.586161][T20634] loop2: partition table beyond EOD, truncated [ 1259.598755][T20634] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1260.762370][T20649] hub 8-0:1.0: USB hub found [ 1260.769297][T20649] hub 8-0:1.0: 1 port detected [ 1261.170423][ T10] usb 5-1: USB disconnect, device number 96 [ 1261.721445][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1261.897946][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1261.938945][ T10] usb 2-1: config 0 has no interface number 0 [ 1261.987642][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1262.041139][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.097893][ T10] usb 2-1: Product: syz [ 1262.124007][ T10] usb 2-1: Manufacturer: syz [ 1262.150808][ T10] usb 2-1: SerialNumber: syz [ 1262.224783][ T10] usb 2-1: config 0 descriptor?? [ 1262.408582][T10197] lec:lec_start_xmit: lec0:No lecd attached [ 1262.596617][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1262.632656][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1263.538894][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1263.547554][ T10] usb 2-1: media controller created [ 1263.567388][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1263.780862][ T30] audit: type=1400 audit(2000000897.034:729): avc: denied { block_suspend } for pid=20672 comm="syz.2.4657" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1264.009850][ T10] usb 2-1: USB disconnect, device number 104 [ 1266.082609][ T30] audit: type=1400 audit(2000000899.185:730): avc: denied { listen } for pid=20688 comm="syz.1.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1266.621130][T20698] libceph: resolve '0' (ret=-3): failed [ 1266.949030][ T5814] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1267.111061][ T5814] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1267.130908][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.153129][ T5814] usb 1-1: config 0 descriptor?? [ 1267.180114][ T5814] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1267.480622][ T30] audit: type=1326 audit(2000000900.495:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20700 comm="syz.1.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1267.523518][T20721] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1267.608810][ T5814] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1268.584756][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 1268.592747][ C0] lec:lec_tx_timeout: lec0 [ 1268.643672][T20697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.652121][ T30] audit: type=1326 audit(2000000901.571:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20700 comm="syz.1.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1268.690183][T20697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.970064][T20735] hub 8-0:1.0: USB hub found [ 1269.407002][ T5814] gspca_cpia1: usb_control_msg 02, error -71 [ 1269.420910][ T5814] gspca_cpia1: usb_control_msg 05, error -71 [ 1269.426934][ T5814] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1269.446003][ T5814] usb 1-1: USB disconnect, device number 98 [ 1269.450002][T20735] hub 8-0:1.0: 1 port detected [ 1270.712324][ T5916] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1270.926010][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 1270.932964][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.943917][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1270.960377][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1270.981154][ T5916] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1271.020668][T20767] input: syz1 as /devices/virtual/input/input69 [ 1271.136583][T20769] tipc: Started in network mode [ 1271.141534][T20769] tipc: Node identity , cluster identity 4711 [ 1271.147610][T20769] tipc: Failed to obtain node identity [ 1271.153120][T20769] tipc: Enabling of bearer rejected, failed to enable media [ 1271.492790][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1271.516004][ T5916] usb 1-1: Product: syz [ 1271.528023][ T5916] usb 1-1: Manufacturer: syz [ 1271.550390][ T5916] usb 1-1: SerialNumber: syz [ 1271.565207][ T5916] usb 1-1: config 0 descriptor?? [ 1271.581573][ T5916] usb 1-1: no audio or video endpoints found [ 1271.706398][ T5920] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1271.797983][ T5916] usb 1-1: USB disconnect, device number 99 [ 1271.808681][ T30] audit: type=1326 audit(2000000904.545:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.1.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1271.896998][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 1271.906912][ T5920] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 1271.953297][ T30] audit: type=1326 audit(2000000904.639:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.1.4692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1271.995143][ T29] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1272.033262][ T5920] usb 3-1: config 0 has no interface number 0 [ 1272.126126][ T5920] usb 3-1: config 0 interface 176 has no altsetting 0 [ 1272.185218][ T5920] usb 3-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1272.196774][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.205140][ T5920] usb 3-1: Product: syz [ 1272.211952][ T5920] usb 3-1: Manufacturer: syz [ 1272.216606][ T5920] usb 3-1: SerialNumber: syz [ 1272.226846][ T5920] usb 3-1: config 0 descriptor?? [ 1272.244024][ T5920] usb-storage 3-1:0.176: USB Mass Storage device detected [ 1272.267922][ T29] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1272.281878][ T5920] usb-storage 3-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1272.291304][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.308213][ T29] usb 7-1: Product: syz [ 1272.312542][ T29] usb 7-1: Manufacturer: syz [ 1272.317956][ T29] usb 7-1: SerialNumber: syz [ 1272.355703][ T29] usb 7-1: config 0 descriptor?? [ 1272.366656][ T29] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1273.269649][ C1] hrtimer: interrupt took 19893 ns [ 1273.562950][ T29] gspca_sq930x: reg_r 001f failed -110 [ 1274.254880][ T30] audit: type=1400 audit(2000000905.630:735): avc: denied { name_connect } for pid=20781 comm="syz.6.4696" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1274.346967][ T5920] usb 3-1: USB disconnect, device number 49 [ 1274.400939][ T29] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 1274.680026][T16453] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1275.449618][T16453] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1275.458848][T16453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.470815][T16453] usb 5-1: config 0 descriptor?? [ 1275.492864][T16453] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1275.519810][ T29] usb 7-1: USB disconnect, device number 68 [ 1275.576519][ T5920] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1276.136649][ T5920] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1276.153242][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.156515][T16453] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1276.179951][ T5920] usb 1-1: Product: syz [ 1276.190353][ T5920] usb 1-1: Manufacturer: syz [ 1276.194047][T16453] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1276.201585][ T5920] usb 1-1: SerialNumber: syz [ 1276.203829][T16453] usb 5-1: media controller created [ 1276.225874][T16453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1276.238028][ T5920] usb 1-1: config 0 descriptor?? [ 1276.247778][T16453] gp8psk_fe: Frontend attached [ 1276.253645][T16453] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1276.287038][T16453] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1276.395489][T16453] gp8psk: usb in 138 operation failed. [ 1276.401844][T16453] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1276.414618][T16453] gp8psk: found Genpix USB device pID = 203 (hex) [ 1276.433748][T16453] usb 5-1: USB disconnect, device number 97 [ 1276.524211][ T30] audit: type=1400 audit(2000000908.951:736): avc: denied { bind } for pid=20838 comm="syz.1.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1276.949678][ T5920] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1277.007448][ T30] audit: type=1400 audit(2000000908.951:737): avc: denied { setopt } for pid=20838 comm="syz.1.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1277.103424][T16453] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1279.772374][ T5920] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1279.850890][ T5920] usb 1-1: USB disconnect, device number 100 [ 1281.743584][T20868] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1282.997334][T12507] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1283.038878][T13819] Bluetooth: hci0: command 0x040f tx timeout [ 1283.188084][T12507] usb 5-1: device descriptor read/64, error -71 [ 1283.467100][T12507] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1283.618072][T12507] usb 5-1: device descriptor read/64, error -71 [ 1283.765427][T12507] usb usb5-port1: attempt power cycle [ 1284.171604][T12507] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1284.205710][T12507] usb 5-1: device descriptor read/8, error -71 [ 1284.492489][T12507] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1284.524839][T12507] usb 5-1: device descriptor read/8, error -71 [ 1284.545786][ T29] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1284.642843][T12507] usb usb5-port1: unable to enumerate USB device [ 1284.742931][ T29] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1284.754275][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.765972][ T29] usb 2-1: Product: syz [ 1284.770277][ T29] usb 2-1: Manufacturer: syz [ 1284.774924][ T29] usb 2-1: SerialNumber: syz [ 1284.803723][ T29] usb 2-1: config 0 descriptor?? [ 1284.974392][T20919] kvm: pic: non byte write [ 1284.986995][T20919] kvm: pic: non byte write [ 1285.000643][T20919] kvm: pic: non byte write [ 1285.059061][ T29] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1285.144855][T20919] kvm: pic: non byte write [ 1285.150054][T20919] kvm: pic: non byte write [ 1285.156071][T20919] kvm: pic: non byte write [ 1285.167015][T20919] kvm: pic: non byte write [ 1285.172493][T20919] kvm: pic: non byte write [ 1285.190701][T20919] kvm: pic: non byte write [ 1285.208160][T20919] kvm: pic: non byte write [ 1285.549269][T20911] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1285.566136][T20928] comedi comedi3: pcm3724: I/O port conflict (0x20024,16) [ 1286.389408][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 1286.579413][ T29] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1286.607293][ T29] usb 2-1: USB disconnect, device number 105 [ 1286.897666][T12507] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1286.924651][T13819] Bluetooth: hci0: command 0x040f tx timeout [ 1287.240175][T12507] usb 1-1: device descriptor read/64, error -71 [ 1288.516312][T12507] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1288.656213][T20969] 9p: Bad value for 'rfdno' [ 1288.709882][ T30] audit: type=1400 audit(2000000920.354:738): avc: denied { write } for pid=20970 comm="syz.1.4762" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1288.737517][T12507] usb 1-1: device descriptor read/64, error -71 [ 1288.749347][ T30] audit: type=1400 audit(2000000920.354:739): avc: denied { open } for pid=20970 comm="syz.1.4762" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1288.773352][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1288.775129][ T30] audit: type=1400 audit(2000000920.391:740): avc: denied { ioctl } for pid=20970 comm="syz.1.4762" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1288.954214][T12507] usb usb1-port1: attempt power cycle [ 1288.960426][ T29] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1289.088700][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4764'. [ 1289.097796][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4764'. [ 1289.540013][ T29] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1289.548040][ T29] usb 7-1: config 0 has no interface number 0 [ 1289.603693][ T29] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1289.730804][T12507] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1290.035203][ T29] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.066852][ T29] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.091164][T12507] usb 1-1: device descriptor read/8, error -71 [ 1290.098702][ T29] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1290.105451][ T29] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1290.114646][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.129887][ T29] usb 7-1: config 0 descriptor?? [ 1290.351196][T19675] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1291.687115][T19675] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1291.704419][T19675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.713925][T19675] usb 5-1: Product: syz [ 1291.718134][T19675] usb 5-1: Manufacturer: syz [ 1291.723896][T19675] usb 5-1: SerialNumber: syz [ 1291.740552][T19675] usb 5-1: config 0 descriptor?? [ 1291.899606][ T29] uclogic 0003:145F:0212.0035: pen parameters not found [ 1291.920731][ T29] uclogic 0003:145F:0212.0035: interface is invalid, ignoring [ 1291.975977][T19675] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1293.270183][T19675] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1293.287108][T16453] usb 7-1: USB disconnect, device number 69 [ 1293.560410][T21019] syz_tun: refused to change device tx_queue_len [ 1294.566482][T12507] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1294.574523][T13819] Bluetooth: hci0: command 0x040f tx timeout [ 1294.642983][T21034] netlink: 4975 bytes leftover after parsing attributes in process `syz.6.4784'. [ 1294.705287][T21034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1294.747958][T12507] usb 1-1: device descriptor read/64, error -71 [ 1294.782687][T19675] usb 5-1: USB disconnect, device number 102 [ 1294.896395][T21038] loop5: detected capacity change from 0 to 7 [ 1294.908668][ T30] audit: type=1400 audit(2000000926.134:741): avc: denied { append } for pid=21037 comm="syz.4.4787" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1294.911228][T21038] Dev loop5: unable to read RDB block 7 [ 1294.966517][T21038] loop5: unable to read partition table [ 1294.973820][ T30] audit: type=1400 audit(2000000926.181:742): avc: denied { link } for pid=21039 comm="syz.2.4788" name="file0" dev="tmpfs" ino=2713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1294.994084][T21038] loop5: partition table beyond EOD, truncated [ 1295.460848][T12507] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1295.516503][T21038] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1295.665996][T12507] usb 1-1: device descriptor read/64, error -71 [ 1295.861785][T12507] usb usb1-port1: attempt power cycle [ 1296.262669][T12507] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1296.305957][T12507] usb 1-1: device descriptor read/8, error -71 [ 1296.315570][T21054] loop2: detected capacity change from 0 to 7 [ 1296.339547][T21054] Dev loop2: unable to read RDB block 7 [ 1296.345154][T21054] loop2: unable to read partition table [ 1296.359180][T21054] loop2: partition table beyond EOD, truncated [ 1296.380434][T21054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1296.406002][ T5176] Dev loop2: unable to read RDB block 7 [ 1296.411629][ T5176] loop2: unable to read partition table [ 1296.428272][ T5176] loop2: partition table beyond EOD, truncated [ 1296.562042][T12507] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1296.614905][T12507] usb 1-1: device descriptor read/8, error -71 [ 1296.628153][T21066] fuse: Bad value for 'fd' [ 1296.677239][ T30] audit: type=1400 audit(2000000927.799:743): avc: denied { accept } for pid=21069 comm="syz.1.4801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1296.744030][T12507] usb usb1-port1: unable to enumerate USB device [ 1297.259955][T21082] batadv_slave_1: entered promiscuous mode [ 1297.267028][T21081] batadv_slave_1: left promiscuous mode [ 1297.449357][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1297.625297][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.646872][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1297.679905][ T10] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1297.704613][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.734372][ T10] usb 3-1: Product: syz [ 1297.740258][ T10] usb 3-1: Manufacturer: syz [ 1297.744870][ T10] usb 3-1: SerialNumber: syz [ 1297.746148][ T30] audit: type=1400 audit(2000000928.791:744): avc: denied { write } for pid=21100 comm="syz.0.4814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1297.759735][ T10] usb 3-1: config 0 descriptor?? [ 1297.779900][ T30] audit: type=1400 audit(2000000928.791:745): avc: denied { read } for pid=21100 comm="syz.0.4814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1297.929625][T21114] fuse: Unknown parameter 'group_id00000000000000000000' [ 1298.061371][T21115] kAFS: unable to lookup cell 'ÿ' [ 1298.084781][T16453] usb 3-1: USB disconnect, device number 50 [ 1298.090786][ T10] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1298.240457][ T10] usb 7-1: device descriptor read/64, error -71 [ 1298.267231][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1298.274685][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1298.282095][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 1298.497009][ T10] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1298.649033][ T10] usb 7-1: device descriptor read/64, error -71 [ 1298.814165][ T10] usb usb7-port1: attempt power cycle [ 1300.498540][ T10] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1300.552865][ T10] usb 7-1: device descriptor read/8, error -71 [ 1300.571165][ T29] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1300.746155][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1300.870340][ T10] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1300.873375][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1300.913139][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1300.915556][ T10] usb 7-1: device descriptor read/8, error -71 [ 1300.936678][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1300.975437][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1300.991680][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.043920][ T29] usb 2-1: config 0 descriptor?? [ 1301.075420][ T10] usb usb7-port1: unable to enumerate USB device [ 1301.320090][T21160] fuse: Unknown parameter 'group_id00000000000000000000' [ 1301.340500][ T29] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1301.742795][ T29] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1301.759213][T21163] loop2: detected capacity change from 0 to 7 [ 1301.806594][T20485] Dev loop2: unable to read RDB block 7 [ 1301.813631][T20485] loop2: unable to read partition table [ 1301.821229][T20485] loop2: partition table beyond EOD, truncated [ 1301.830195][T21163] Dev loop2: unable to read RDB block 7 [ 1301.836392][T21163] loop2: unable to read partition table [ 1301.848739][T21163] loop2: partition table beyond EOD, truncated [ 1301.856378][T21163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1302.124101][ T29] hdpvr 2-1:0.0: Could not setup controls [ 1302.137448][ T29] hdpvr 2-1:0.0: registering videodev failed [ 1302.243905][ T29] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 1302.703536][ T29] usb 2-1: USB disconnect, device number 106 [ 1302.717789][ T5883] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1302.965728][ T5883] usb 3-1: device descriptor read/64, error -71 [ 1303.167536][T13819] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1303.178766][T13819] CPU: 1 UID: 0 PID: 13819 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1303.178800][T13819] Tainted: [L]=SOFTLOCKUP [ 1303.178807][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1303.178821][T13819] Workqueue: hci3 hci_rx_work [ 1303.178846][T13819] Call Trace: [ 1303.178854][T13819] [ 1303.178862][T13819] dump_stack_lvl+0x100/0x190 [ 1303.178897][T13819] sysfs_warn_dup.cold+0x1c/0x28 [ 1303.178925][T13819] sysfs_create_dir_ns+0x24b/0x2b0 [ 1303.178968][T13819] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1303.178992][T13819] ? find_held_lock+0x2b/0x80 [ 1303.179016][T13819] ? kobject_add_internal+0x25f/0x930 [ 1303.179043][T13819] ? kobject_add_internal+0x25f/0x930 [ 1303.179072][T13819] ? do_raw_spin_unlock+0x145/0x1e0 [ 1303.179093][T13819] kobject_add_internal+0x2c8/0x930 [ 1303.179125][T13819] kobject_add+0x16a/0x1e0 [ 1303.179153][T13819] ? __pfx_kobject_add+0x10/0x10 [ 1303.179179][T13819] ? class_to_subsys+0x10f/0x150 [ 1303.179204][T13819] ? kobject_put+0xb9/0x640 [ 1303.179227][T13819] ? _raw_spin_unlock+0x28/0x50 [ 1303.179254][T13819] device_add+0x294/0x1950 [ 1303.179274][T13819] ? __pfx_dev_set_name+0x10/0x10 [ 1303.179296][T13819] ? __pfx_device_add+0x10/0x10 [ 1303.179326][T13819] ? mgmt_send_event_skb+0x2fb/0x460 [ 1303.179356][T13819] hci_conn_add_sysfs+0x1a3/0x260 [ 1303.179381][T13819] le_conn_complete_evt+0x11cb/0x1f40 [ 1303.179406][T13819] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1303.179431][T13819] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1303.179451][T13819] ? skb_pull_data+0x15f/0x1e0 [ 1303.179478][T13819] hci_le_meta_evt+0x34a/0x5f0 [ 1303.179499][T13819] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1303.179521][T13819] hci_event_packet+0x682/0x11c0 [ 1303.179541][T13819] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1303.179565][T13819] ? __pfx_hci_event_packet+0x10/0x10 [ 1303.179587][T13819] ? kcov_remote_start+0x374/0x660 [ 1303.179607][T13819] ? lockdep_hardirqs_on+0x78/0x100 [ 1303.179632][T13819] hci_rx_work+0x451/0xfc0 [ 1303.179654][T13819] process_one_work+0x9d7/0x1920 [ 1303.179676][T13819] ? __pfx_process_one_work+0x10/0x10 [ 1303.179692][T13819] ? __pfx_hci_rx_work+0x10/0x10 [ 1303.179706][T13819] worker_thread+0x5da/0xe40 [ 1303.179722][T13819] ? kthread+0x13a/0x450 [ 1303.179731][T13819] ? __pfx_worker_thread+0x10/0x10 [ 1303.179742][T13819] kthread+0x370/0x450 [ 1303.179751][T13819] ? __pfx_kthread+0x10/0x10 [ 1303.179770][T13819] ret_from_fork+0x754/0xd80 [ 1303.179782][T13819] ? __pfx_ret_from_fork+0x10/0x10 [ 1303.179794][T13819] ? __switch_to+0x7b4/0x1120 [ 1303.179808][T13819] ? __pfx_kthread+0x10/0x10 [ 1303.179826][T13819] ret_from_fork_asm+0x1a/0x30 [ 1303.179846][T13819] [ 1303.438041][ T5883] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1303.451261][T13819] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1303.476636][T13819] Bluetooth: hci3: failed to register connection device [ 1303.596460][ T29] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1303.607131][ T5883] usb 3-1: device descriptor read/64, error -71 [ 1303.724910][ T5883] usb usb3-port1: attempt power cycle [ 1303.746869][ T29] usb 1-1: device descriptor read/64, error -71 [ 1303.906421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1303.914449][ C0] lec:lec_tx_timeout: lec0 [ 1304.762005][ T5883] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1304.794587][ T5883] usb 3-1: device descriptor read/8, error -71 [ 1304.879733][ T29] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1305.063458][ T5883] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1305.116609][ T5883] usb 3-1: device descriptor read/8, error -71 [ 1305.255798][ T5883] usb usb3-port1: unable to enumerate USB device [ 1305.991498][ T29] usb 1-1: device descriptor read/64, error -71 [ 1306.468378][ T29] usb usb1-port1: attempt power cycle [ 1306.667861][T19675] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1306.710858][T19675] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1307.702114][T21248] fuse: Unknown parameter 'group_id00000000000000000000' [ 1308.254393][ T30] audit: type=1326 audit(2000000938.622:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21244 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1308.400456][ T30] audit: type=1400 audit(2000000938.772:747): avc: denied { watch } for pid=21250 comm="syz.6.4868" path="/" dev="ramfs" ino=71989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1308.547258][ T30] audit: type=1326 audit(2000000938.893:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21244 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1308.689576][ T30] audit: type=1400 audit(2000000938.931:749): avc: denied { allowed } for pid=21254 comm="syz.2.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1310.849821][ T30] audit: type=1400 audit(2000000940.474:750): avc: denied { read } for pid=21259 comm="syz.6.4870" dev="nsfs" ino=4026533767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1311.094517][ T30] audit: type=1400 audit(2000000940.474:751): avc: denied { open } for pid=21259 comm="syz.6.4870" path="net:[4026533767]" dev="nsfs" ino=4026533767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1311.284614][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4874'. [ 1311.295681][T21270] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4874'. [ 1311.308584][ T30] audit: type=1804 audit(2000000941.494:752): pid=21269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4873" name="/newroot/327/file0" dev="tmpfs" ino=1760 res=1 errno=0 [ 1312.092205][T21281] fuse: Unknown parameter 'group_id00000000000000000000' [ 1312.159860][T19675] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1312.330910][ T30] audit: type=1400 audit(2000000942.438:753): avc: denied { setopt } for pid=21284 comm="syz.6.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1312.678406][T19675] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1312.730499][T19675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.760130][T19675] usb 1-1: Product: syz [ 1312.773669][T19675] usb 1-1: Manufacturer: syz [ 1312.790070][T19675] usb 1-1: SerialNumber: syz [ 1312.871594][T19675] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1313.061226][T12507] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1313.983169][T19675] usb 1-1: USB disconnect, device number 112 [ 1314.045365][ T5814] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1314.941020][T12507] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1314.945941][ T5814] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1315.170921][T12507] ath9k_htc: Failed to initialize the device [ 1315.222568][T19675] usb 1-1: ath9k_htc: USB layer deinitialized [ 1315.380842][T21314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4889'. [ 1315.390349][T21314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1315.398500][T21314] IPv6: NLM_F_CREATE should be set when creating new route [ 1315.888140][ T30] audit: type=1400 audit(2000000945.768:754): avc: denied { map } for pid=21317 comm="syz.0.4890" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1315.919814][T21323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.037265][ T30] audit: type=1400 audit(2000000945.768:755): avc: denied { execute } for pid=21317 comm="syz.0.4890" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1316.061700][T21314] ref_ctr_offset mismatch. inode: 0x14f offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 1316.181900][T21326] fuse: Unknown parameter 'group_id00000000000000000000' [ 1316.297563][T19675] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1316.506273][T19675] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1316.539762][T19675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.564553][ T5920] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1317.177307][T19675] usb 1-1: config 0 has no interface number 0 [ 1318.126581][T19675] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1318.153914][T19675] usb 1-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.178300][ T5920] usb 2-1: no configurations [ 1318.187119][ T5920] usb 2-1: can't read configurations, error -22 [ 1318.194199][T19675] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1318.209346][T19675] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1318.222851][T19675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.230870][T19675] usb 1-1: Product: syz [ 1318.235431][T19675] usb 1-1: Manufacturer: syz [ 1318.240058][T19675] usb 1-1: SerialNumber: syz [ 1318.247322][T19675] usb 1-1: config 0 descriptor?? [ 1318.266555][T19675] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1318.349467][ T5920] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1318.924331][ T5920] usb 2-1: no configurations [ 1319.268823][ T5920] usb 2-1: can't read configurations, error -22 [ 1319.312993][ T5920] usb usb2-port1: attempt power cycle [ 1319.489477][T19675] usb 1-1: USB disconnect, device number 113 [ 1321.184455][T21358] fuse: Unknown parameter 'group_id00000000000000000000' [ 1321.404369][ T30] audit: type=1326 audit(2000000950.932:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.1.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1321.435548][ T5920] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1321.465715][ T5920] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1321.579064][ T5814] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1321.594513][ T30] audit: type=1326 audit(2000000951.091:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.1.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119bb9bf79 code=0x7fc00000 [ 1321.719572][ T5883] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1321.890800][ T5814] usb 3-1: device descriptor read/64, error -71 [ 1322.037994][ T5883] usb 1-1: device descriptor read/64, error -71 [ 1322.262498][ T5814] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1322.437318][ T5883] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1322.508129][ T5814] usb 3-1: device descriptor read/64, error -71 [ 1322.575070][T21393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.593645][ T5883] usb 1-1: device descriptor read/64, error -71 [ 1322.644729][ T5814] usb usb3-port1: attempt power cycle [ 1322.647112][ T5920] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1322.732937][ T5883] usb usb1-port1: attempt power cycle [ 1323.820951][ T10] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1323.830890][ T5814] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1323.856391][ T5814] usb 3-1: device descriptor read/8, error -71 [ 1324.028030][ T5883] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1324.186599][ T5814] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1325.069478][ T10] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1325.080148][ T5920] usb 7-1: no configurations [ 1325.084788][ T5920] usb 7-1: can't read configurations, error -22 [ 1325.101789][ T5883] usb 1-1: device descriptor read/8, error -71 [ 1326.154094][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.177795][ T5920] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1326.188495][ T5814] usb 3-1: device descriptor read/8, error -71 [ 1326.218164][ T10] usb 5-1: config 0 has no interface number 0 [ 1326.225317][ T10] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1326.335570][ T5814] usb usb3-port1: unable to enumerate USB device [ 1326.341969][ T10] usb 5-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1326.361970][ T10] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1326.538653][ T10] usb 5-1: string descriptor 0 read error: -71 [ 1326.544953][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1327.426125][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.446389][ T10] usb 5-1: config 0 descriptor?? [ 1327.451919][ T10] usb 5-1: can't set config #0, error -71 [ 1327.537154][ T10] usb 5-1: USB disconnect, device number 103 [ 1327.703755][ T5883] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1327.760550][ T5883] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1327.790107][ T5883] usb 1-1: config 1 has no interface number 0 [ 1327.814068][ T5883] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 1327.832025][ T5883] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 1327.841890][ T5883] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x3 has an invalid bInterval 230, changing to 11 [ 1327.887448][ T5883] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1327.898177][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.906203][ T5883] usb 1-1: Product: syz [ 1327.929836][ T5883] usb 1-1: Manufacturer: syz [ 1327.939084][ T5883] usb 1-1: SerialNumber: syz [ 1327.960338][ T30] audit: type=1326 audit(2000000957.059:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.2.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72aa39bf79 code=0x7fc00000 [ 1327.992751][T21409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1328.014145][ T30] audit: type=1326 audit(2000000957.059:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.2.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72aa39bf79 code=0x7fc00000 [ 1328.032655][T21409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1329.238695][ T5883] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1329.250383][ T30] audit: type=1326 audit(2000000957.059:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.2.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72aa39bf79 code=0x7fc00000 [ 1329.315913][ T30] audit: type=1326 audit(2000000957.059:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.2.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72aa39bf79 code=0x7fc00000 [ 1330.376710][T10197] lec:lec_start_xmit: lec0:No lecd attached [ 1330.417482][ T5920] usb 1-1: USB disconnect, device number 117 [ 1331.738711][ T5920] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1331.883794][ T5862] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1331.915855][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 1331.925541][ T5920] usb 7-1: config 0 has no interfaces? [ 1331.944337][ T5920] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1331.986588][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1332.429282][ T5920] usb 7-1: Product: syz [ 1332.434001][ T5920] usb 7-1: Manufacturer: syz [ 1332.438607][ T5920] usb 7-1: SerialNumber: syz [ 1332.446996][ T5920] usb 7-1: config 0 descriptor?? [ 1332.452825][ T5862] usb 5-1: no configurations [ 1332.458550][ T5862] usb 5-1: can't read configurations, error -22 [ 1332.681224][ T5862] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1332.722664][ T10] usb 7-1: USB disconnect, device number 76 [ 1333.744723][ T5862] usb 5-1: no configurations [ 1333.749344][ T5862] usb 5-1: can't read configurations, error -22 [ 1334.851583][ T5862] usb usb5-port1: attempt power cycle [ 1335.231006][T21475] fuse: Bad value for 'fd' [ 1335.292647][ T5883] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1335.308798][ T30] audit: type=1400 audit(2000000963.943:762): avc: denied { watch_mount } for pid=21478 comm="syz.6.4943" path="/71" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1335.333794][T21472] bond1: entered allmulticast mode [ 1335.433475][T21472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1335.476096][ T5883] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1335.581089][T21403] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1335.978234][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 1335.986275][ C0] lec:lec_tx_timeout: lec0 [ 1336.578110][T21403] usb 3-1: device descriptor read/64, error -71 [ 1336.829939][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4948'. [ 1336.887099][T21403] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1337.036731][T21403] usb 3-1: device descriptor read/64, error -71 [ 1337.177473][T21403] usb usb3-port1: attempt power cycle [ 1338.142736][T21506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4951'. [ 1338.942826][T21526] macvlan1: entered promiscuous mode [ 1338.948358][T21526] macvlan1: entered allmulticast mode [ 1338.953795][T21526] veth1_vlan: entered allmulticast mode [ 1338.961225][ T30] audit: type=1400 audit(2000000967.357:763): avc: denied { map } for pid=21522 comm="syz.1.4959" path="socket:[72680]" dev="sockfs" ino=72680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1339.012685][ T5883] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1339.200118][ T5883] usb 5-1: config index 0 descriptor too short (expected 49, got 21) [ 1339.221228][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.290932][ T5883] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1339.359863][ T5883] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1339.370666][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.072783][ T5883] usb 5-1: Product: syz [ 1340.076980][ T5883] usb 5-1: Manufacturer: syz [ 1340.081584][ T5883] usb 5-1: SerialNumber: syz [ 1340.092896][ T5883] usb 5-1: config 0 descriptor?? [ 1340.376271][ T5920] usb 5-1: USB disconnect, device number 107 [ 1340.573132][T21542] loop5: detected capacity change from 0 to 7 [ 1340.605060][T21542] Dev loop5: unable to read RDB block 7 [ 1340.613171][T21542] loop5: AHDI p1 [ 1340.616962][T21542] loop5: partition table partially beyond EOD, truncated [ 1341.168820][ T5920] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1341.341419][ T5920] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1341.459850][ T5128] Bluetooth: hci1: Unable to find connection for big 0x00 [ 1341.558051][T21557] kAFS: unable to lookup cell 'ÿ' [ 1341.574096][ T5920] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1341.956236][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4972'. [ 1341.965305][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4972'. [ 1342.277560][ T5920] usb 3-1: device descriptor read/64, error -71 [ 1342.531651][ T5920] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1342.766797][ T5920] usb 3-1: device descriptor read/64, error -71 [ 1342.887705][ T5920] usb usb3-port1: attempt power cycle [ 1343.312055][ T5920] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1343.333470][ T5883] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1343.333850][ T5920] usb 3-1: device descriptor read/8, error -71 [ 1343.515181][ T5862] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1343.583786][ T5883] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1343.602147][ T5920] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1343.624190][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.644584][ T5920] usb 3-1: device descriptor read/8, error -71 [ 1343.655999][ T5883] usb 5-1: config 0 descriptor?? [ 1343.687597][ T5883] cp210x 5-1:0.0: cp210x converter detected [ 1343.689229][ T5862] usb 1-1: config index 0 descriptor too short (expected 49, got 21) [ 1343.713031][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.726205][ T5862] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1343.743442][ T5862] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1343.753191][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.775953][ T5862] usb 1-1: Product: syz [ 1343.780148][ T5862] usb 1-1: Manufacturer: syz [ 1343.787006][ T5862] usb 1-1: SerialNumber: syz [ 1343.793818][ T5920] usb usb3-port1: unable to enumerate USB device [ 1343.801099][ T5862] usb 1-1: config 0 descriptor?? [ 1343.881589][ T5883] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1344.832675][ T5920] usb 1-1: USB disconnect, device number 118 [ 1345.422425][ T5920] usb 5-1: USB disconnect, device number 108 [ 1346.155916][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1346.164008][ T5920] cp210x 5-1:0.0: device disconnected [ 1346.537137][T21621] ieee802154 phy0 wpan0: encryption failed: -22 [ 1348.999471][T19675] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1349.415828][T19675] usb 5-1: config index 0 descriptor too short (expected 49, got 21) [ 1349.426811][T19675] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.448156][T19675] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1349.474810][T19675] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1349.494457][T19675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.503052][T19675] usb 5-1: Product: syz [ 1349.507245][T19675] usb 5-1: Manufacturer: syz [ 1349.511872][T19675] usb 5-1: SerialNumber: syz [ 1349.525026][T19675] usb 5-1: config 0 descriptor?? [ 1349.701866][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1349.792176][ T5814] usb 5-1: USB disconnect, device number 109 [ 1350.239537][ T5920] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1350.399924][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 1350.409252][ T5920] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1350.423346][ T5920] usb 3-1: config 0 has no interface number 0 [ 1350.429849][ T5920] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1350.439530][ T5920] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1350.454967][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.471098][ T5920] usb 3-1: Product: syz [ 1350.478047][ T5920] usb 3-1: Manufacturer: syz [ 1350.484978][ T5920] usb 3-1: SerialNumber: syz [ 1350.501973][ T5920] usb 3-1: config 0 descriptor?? [ 1351.203821][T21696] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5020'. [ 1351.351395][ T10] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1351.512289][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1351.528240][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.543913][ T5814] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1351.555098][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.580273][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.598297][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.607437][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.629641][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.646448][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.660594][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.684446][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.702196][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.712762][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.734108][ T5814] usb 7-1: config index 0 descriptor too short (expected 49, got 21) [ 1351.746134][ T5814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.756297][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.771177][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.784892][ T5814] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1351.797181][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.809822][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.817960][ T5814] usb 7-1: Product: syz [ 1351.822185][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.831399][ T5814] usb 7-1: Manufacturer: syz [ 1351.836152][ T5814] usb 7-1: SerialNumber: syz [ 1351.841721][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.852077][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.863670][ T5814] usb 7-1: config 0 descriptor?? [ 1351.874281][ T5814] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1351.884699][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.896658][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.908914][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.920765][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1351.932467][ T5814] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1351.945618][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1351.952376][ T5814] usb 7-1: media controller created [ 1351.958778][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1351.970982][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1351.990645][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1352.000238][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1352.014857][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1352.028516][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1352.052785][ T10] usb 1-1: Product: syz [ 1352.073236][ T10] usb 1-1: Manufacturer: syz [ 1352.083713][ T5814] DVB: Unable to find symbol mt352_attach() [ 1352.098559][ T10] usb 1-1: SerialNumber: syz [ 1352.119735][ T10] usb 1-1: config 0 descriptor?? [ 1352.174827][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1352.195061][ T5814] DVB: Unable to find symbol nxt6000_attach() [ 1352.221488][ T5814] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1352.249780][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input70 [ 1352.325986][ T5814] dvb-usb: schedule remote query interval to 1000 msecs. [ 1352.344989][ T5814] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1352.524722][ T5814] dvb-usb: bulk message failed: -22 (7/0) [ 1352.531925][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 1352.532090][T19675] usb 1-1: USB disconnect, device number 119 [ 1352.544445][ T5814] dvb-usb: bulk message failed: -22 (7/0) [ 1352.547213][T21692] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 1352.790179][ T5814] usb 7-1: USB disconnect, device number 77 [ 1353.047520][ T5920] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 1353.057523][ T5920] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 1353.058827][T21688] bridge1: entered promiscuous mode [ 1353.065253][ T5920] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1353.078376][T19675] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1353.092514][ T5920] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 1353.096141][T21688] bridge1: entered allmulticast mode [ 1353.230540][ T5814] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1353.346899][ T5920] usb 3-1: USB disconnect, device number 66 [ 1354.644282][ T5814] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1354.855787][ T5814] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1354.975656][ T5814] usb 2-1: config 0 has no interface number 0 [ 1354.997038][ T5814] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1355.040032][ T5814] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.360373][T13819] Bluetooth: hci2: command 0x0406 tx timeout [ 1355.371249][ T5814] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1355.427065][ T5814] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1355.456590][ T5920] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1355.478156][ T5814] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1355.513191][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.554844][ T5814] usb 2-1: config 0 descriptor?? [ 1355.692654][ T5920] usb 3-1: config index 0 descriptor too short (expected 49, got 21) [ 1355.700768][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.721771][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1357.019913][ T5920] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1357.031886][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.041409][ T5920] usb 3-1: Product: syz [ 1357.050560][ T5920] usb 3-1: Manufacturer: syz [ 1357.055269][ T5920] usb 3-1: SerialNumber: syz [ 1357.077302][ T5920] usb 3-1: config 0 descriptor?? [ 1357.323329][ T5920] usb 3-1: USB disconnect, device number 67 [ 1357.370313][ T5814] uclogic 0003:145F:0212.003B: pen parameters not found [ 1357.412940][ T5814] uclogic 0003:145F:0212.003B: interface is invalid, ignoring [ 1357.438451][ T5814] usb 2-1: USB disconnect, device number 110 [ 1359.608343][T19675] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1359.608740][ T30] audit: type=1400 audit(2000000986.290:764): avc: denied { mounton } for pid=21774 comm="syz.6.5046" path="/105/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1359.822920][T19675] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1359.847369][T19675] usb 5-1: config 0 has no interface number 0 [ 1359.861446][T19675] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1359.900990][T19675] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1359.920115][T19675] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1359.974709][T19675] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1359.984001][T19675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.021487][T19675] usb 5-1: Product: syz [ 1360.028455][T19675] usb 5-1: Manufacturer: syz [ 1360.033387][T19675] usb 5-1: SerialNumber: syz [ 1360.140542][T19675] usb 5-1: config 0 descriptor?? [ 1360.146196][T21769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1360.155084][T19675] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1360.165137][T19675] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1360.173374][T19675] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1360.957191][T19675] usb 5-1: USB disconnect, device number 110 [ 1360.998044][T19675] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1361.054457][T19675] cyberjack 5-1:0.69: device disconnected [ 1361.956464][ T5920] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1362.943808][ T5920] usb 5-1: config index 0 descriptor too short (expected 49, got 21) [ 1362.958963][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.969756][ T5920] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1362.994111][ T5920] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1363.003264][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.014031][ T5920] usb 5-1: Product: syz [ 1363.031896][ T5920] usb 5-1: Manufacturer: syz [ 1363.044331][ T5920] usb 5-1: SerialNumber: syz [ 1363.061239][ T5920] usb 5-1: config 0 descriptor?? [ 1363.207673][T21801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5052'. [ 1363.327845][T12507] usb 5-1: USB disconnect, device number 111 [ 1363.967018][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.973348][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.989644][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 1364.116413][T21818] fuse: Bad value for 'fd' [ 1365.505951][T21827] misc userio: Begin command sent, but we're already running [ 1368.903447][T21859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1370.188176][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 1370.196203][ C0] lec:lec_tx_timeout: lec0 [ 1370.241676][ T5920] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1370.450408][ T5920] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1370.477575][ T5920] usb 3-1: config 0 has no interface number 0 [ 1370.487910][ T5920] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1370.504357][ T5920] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1370.531166][T21873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5070'. [ 1370.555429][ T5920] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1370.600504][ T5920] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1370.627742][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.657960][ T5920] usb 3-1: Product: syz [ 1370.690706][ T5920] usb 3-1: Manufacturer: syz [ 1370.695411][ T5920] usb 3-1: SerialNumber: syz [ 1370.706607][ T5920] usb 3-1: config 0 descriptor?? [ 1370.719881][T21865] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1370.731194][ T5920] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1370.743924][ T5920] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1370.756758][ T5920] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1371.804086][ T5814] usb 3-1: USB disconnect, device number 68 [ 1371.841160][ T5814] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1371.854268][ T30] audit: type=1400 audit(2000000998.123:765): avc: denied { write } for pid=21886 comm="syz.4.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1371.903993][ T5814] cyberjack 3-1:0.69: device disconnected [ 1372.051741][T21893] kernel read not supported for file /file1 (pid: 21893 comm: syz.6.5086) [ 1372.077268][ T30] audit: type=1800 audit(2000000998.328:766): pid=21893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5086" name="file1" dev="mqueue" ino=74384 res=0 errno=0 [ 1372.971050][T21906] input: syz1 as /devices/virtual/input/input72 [ 1374.507302][T12507] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1374.604313][T21922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5083'. [ 1374.707515][T12507] usb 5-1: Using ep0 maxpacket: 32 [ 1374.775571][T12507] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.821168][T12507] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1374.971969][T12507] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1374.985806][T12507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1374.994787][T12507] usb 5-1: Product: syz [ 1374.999461][T12507] usb 5-1: Manufacturer: syz [ 1375.004142][T12507] usb 5-1: SerialNumber: syz [ 1375.065275][T12507] usb 5-1: config 0 descriptor?? [ 1375.721528][T12507] usb 5-1: no audio or video endpoints found [ 1375.736945][T12507] usb 5-1: USB disconnect, device number 112 [ 1376.933993][ T5883] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1377.096048][ T5883] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1377.116071][ T5883] usb 5-1: config 0 has no interface number 0 [ 1377.126135][ T5883] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1377.141442][ T5883] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1377.164739][ T5883] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1377.175955][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.229339][ T5883] usb 5-1: Product: syz [ 1377.265469][ T5883] usb 5-1: Manufacturer: syz [ 1377.281052][ T5883] usb 5-1: SerialNumber: syz [ 1377.307573][ T5883] usb 5-1: config 0 descriptor?? [ 1377.329588][ T5814] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1377.338029][T21944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1377.352166][ T5883] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1377.375004][ T5883] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1377.543440][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 1377.551785][ T5814] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1377.576998][ T5814] usb 3-1: config 0 has no interface number 0 [ 1377.605542][ T5814] usb 3-1: config 0 interface 119 has no altsetting 0 [ 1377.613499][ T5883] usb 5-1: USB disconnect, device number 113 [ 1377.630310][ T5883] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1377.649654][ T5814] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 1377.664515][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.683094][ T5883] cyberjack 5-1:0.69: device disconnected [ 1378.089239][ T5814] usb 3-1: Product: syz [ 1378.115156][ T5814] usb 3-1: Manufacturer: syz [ 1378.125192][ T5814] usb 3-1: SerialNumber: syz [ 1378.155855][ T5814] usb 3-1: config 0 descriptor?? [ 1379.335905][ T5814] mos7840 3-1:0.119: required endpoints missing [ 1379.569467][T19675] usb 3-1: USB disconnect, device number 69 [ 1379.656629][T21970] random: crng reseeded on system resumption [ 1380.250778][ T30] audit: type=1326 audit(2000001005.915:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.4.5114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09ab99bf79 code=0x0 [ 1380.303114][ T30] audit: type=1326 audit(2000001005.980:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.4.5114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09ab99bf79 code=0x0 [ 1380.665406][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1380.881279][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1380.929140][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1381.007760][ T10] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1381.010750][ T5128] Bluetooth: hci2: Unable to find connection for big 0x00 [ 1381.069501][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1381.114100][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1381.124230][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1381.164589][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1381.203348][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1381.219014][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1381.234947][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1381.244147][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.252146][ T10] usb 3-1: Product: syz [ 1381.256556][ T10] usb 3-1: Manufacturer: syz [ 1381.261160][ T10] usb 3-1: SerialNumber: syz [ 1381.298316][ T10] usb 3-1: config 0 descriptor?? [ 1381.308672][T21978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1381.337355][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1381.691775][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5123'. [ 1382.033563][T12507] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1382.665642][T12507] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1382.697505][ T5814] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1382.704051][T12507] usb 2-1: config 0 has no interface number 0 [ 1382.707245][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1382.745159][T20380] udevd[20380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1382.745782][T12507] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1382.836382][T12507] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1382.850984][T12507] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1382.861436][T12507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.872379][T12507] usb 2-1: Product: syz [ 1382.876827][T12507] usb 2-1: Manufacturer: syz [ 1382.881914][T12507] usb 2-1: SerialNumber: syz [ 1382.890042][ T5814] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 1382.898470][T12507] usb 2-1: config 0 descriptor?? [ 1382.908117][ T5814] usb 7-1: config 0 has no interface number 0 [ 1382.915905][T21995] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1382.927085][ T5814] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1382.927222][T12507] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1382.965490][ T5814] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1382.985135][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.993158][ T5814] usb 7-1: Product: syz [ 1383.011110][T12507] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1383.017011][ T5814] usb 7-1: Manufacturer: syz [ 1383.025039][ T5814] usb 7-1: SerialNumber: syz [ 1383.038795][ T5814] usb 7-1: config 0 descriptor?? [ 1383.049091][T21991] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1383.062727][ T5814] usb-storage 7-1:0.20: USB Mass Storage device detected [ 1383.101668][ T5814] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1383.195203][ T10] usb 2-1: USB disconnect, device number 111 [ 1383.206145][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1383.600050][ T5883] usb 3-1: USB disconnect, device number 70 [ 1383.610294][ T5814] scsi host1: usb-storage 7-1:0.20 [ 1383.736374][ T10] cyberjack 2-1:0.69: device disconnected [ 1383.752574][ T5814] usb 7-1: USB disconnect, device number 78 [ 1385.497753][ T5128] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1385.508381][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1385.508418][ T5128] Tainted: [L]=SOFTLOCKUP [ 1385.508426][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1385.508441][ T5128] Workqueue: hci0 hci_rx_work [ 1385.508466][ T5128] Call Trace: [ 1385.508474][ T5128] [ 1385.508482][ T5128] dump_stack_lvl+0x100/0x190 [ 1385.508519][ T5128] sysfs_warn_dup.cold+0x1c/0x28 [ 1385.508549][ T5128] sysfs_create_dir_ns+0x24b/0x2b0 [ 1385.508574][ T5128] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1385.508597][ T5128] ? find_held_lock+0x2b/0x80 [ 1385.508622][ T5128] ? kobject_add_internal+0x25f/0x930 [ 1385.508653][ T5128] ? kobject_add_internal+0x25f/0x930 [ 1385.508685][ T5128] ? do_raw_spin_unlock+0x145/0x1e0 [ 1385.508710][ T5128] kobject_add_internal+0x2c8/0x930 [ 1385.508743][ T5128] kobject_add+0x16a/0x1e0 [ 1385.508771][ T5128] ? __pfx_kobject_add+0x10/0x10 [ 1385.508798][ T5128] ? class_to_subsys+0x10f/0x150 [ 1385.508824][ T5128] ? kobject_put+0xb9/0x640 [ 1385.508849][ T5128] ? _raw_spin_unlock+0x28/0x50 [ 1385.508877][ T5128] device_add+0x294/0x1950 [ 1385.508898][ T5128] ? __pfx_dev_set_name+0x10/0x10 [ 1385.508922][ T5128] ? __pfx_device_add+0x10/0x10 [ 1385.508943][ T5128] ? mgmt_send_event_skb+0x2fb/0x460 [ 1385.508972][ T5128] hci_conn_add_sysfs+0x1a3/0x260 [ 1385.508998][ T5128] le_conn_complete_evt+0x11cb/0x1f40 [ 1385.509026][ T5128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1385.509054][ T5128] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1385.509076][ T5128] ? skb_pull_data+0x15f/0x1e0 [ 1385.509107][ T5128] hci_le_meta_evt+0x34a/0x5f0 [ 1385.509130][ T5128] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1385.509155][ T5128] hci_event_packet+0x682/0x11c0 [ 1385.509176][ T5128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1385.509200][ T5128] ? __pfx_hci_event_packet+0x10/0x10 [ 1385.509230][ T5128] ? kcov_remote_start+0x374/0x660 [ 1385.509254][ T5128] ? lockdep_hardirqs_on+0x78/0x100 [ 1385.509289][ T5128] hci_rx_work+0x451/0xfc0 [ 1385.509316][ T5128] process_one_work+0x9d7/0x1920 [ 1385.509349][ T5128] ? __pfx_process_one_work+0x10/0x10 [ 1385.509376][ T5128] ? __pfx_hci_rx_work+0x10/0x10 [ 1385.509399][ T5128] worker_thread+0x5da/0xe40 [ 1385.509426][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 1385.509447][ T5128] ? kthread+0x13a/0x450 [ 1385.509462][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 1385.509480][ T5128] kthread+0x370/0x450 [ 1385.509496][ T5128] ? __pfx_kthread+0x10/0x10 [ 1385.509527][ T5128] ret_from_fork+0x754/0xd80 [ 1385.509548][ T5128] ? __pfx_ret_from_fork+0x10/0x10 [ 1385.509570][ T5128] ? __switch_to+0x7b4/0x1120 [ 1385.509593][ T5128] ? __pfx_kthread+0x10/0x10 [ 1385.509624][ T5128] ret_from_fork_asm+0x1a/0x30 [ 1385.509661][ T5128] [ 1385.509773][ T5128] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1386.639102][ T5128] Bluetooth: hci0: failed to register connection device [ 1386.660145][ T5128] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 1386.672238][ T5128] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 1386.680644][ T5128] CPU: 1 UID: 0 PID: 5128 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.691655][ T5128] Tainted: [L]=SOFTLOCKUP [ 1386.695962][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1386.706026][ T5128] Workqueue: hci0 hci_rx_work [ 1386.710697][ T5128] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1386.716575][ T5128] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1386.736168][ T5128] RSP: 0018:ffffc900060c7628 EFLAGS: 00010282 [ 1386.742656][ T5128] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1386.750614][ T5128] RDX: 0000000000000000 RSI: ffffffff89557561 RDI: dffffc000000004c [ 1386.758582][ T5128] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 1386.766542][ T5128] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff89557561 [ 1386.774509][ T5128] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1386.782459][ T5128] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 1386.791371][ T5128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1386.798004][ T5128] CR2: 000000110c3e2421 CR3: 00000000382bc000 CR4: 00000000003526f0 [ 1386.806018][ T5128] Call Trace: [ 1386.809297][ T5128] [ 1386.812231][ T5128] __kasan_check_byte+0x13/0x50 [ 1386.817075][ T5128] lock_acquire+0x148/0x380 [ 1386.821567][ T5128] ? __pfx___cancel_work+0x10/0x10 [ 1386.826659][ T5128] ? trace_contention_end+0x140/0x180 [ 1386.832012][ T5128] lock_sock_nested+0x41/0xf0 [ 1386.836676][ T5128] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 1386.841857][ T5128] l2cap_sock_ready_cb+0x43/0x1a0 [ 1386.846864][ T5128] l2cap_le_start+0x1ea/0xea0 [ 1386.851520][ T5128] ? __pfx___mutex_lock+0x10/0x10 [ 1386.856526][ T5128] ? __pfx_l2cap_le_start+0x10/0x10 [ 1386.861710][ T5128] ? lockdep_hardirqs_on+0x78/0x100 [ 1386.866892][ T5128] l2cap_connect_cfm+0x8ce/0x1050 [ 1386.871899][ T5128] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1386.877336][ T5128] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1386.882773][ T5128] le_conn_complete_evt+0x195c/0x1f40 [ 1386.888126][ T5128] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1386.893824][ T5128] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1386.899362][ T5128] ? skb_pull_data+0x15f/0x1e0 [ 1386.904124][ T5128] hci_le_meta_evt+0x34a/0x5f0 [ 1386.908887][ T5128] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1386.914935][ T5128] hci_event_packet+0x682/0x11c0 [ 1386.919855][ T5128] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1386.925125][ T5128] ? __pfx_hci_event_packet+0x10/0x10 [ 1386.930480][ T5128] ? kcov_remote_start+0x374/0x660 [ 1386.935583][ T5128] ? lockdep_hardirqs_on+0x78/0x100 [ 1386.940767][ T5128] hci_rx_work+0x451/0xfc0 [ 1386.945165][ T5128] process_one_work+0x9d7/0x1920 [ 1386.950101][ T5128] ? __pfx_process_one_work+0x10/0x10 [ 1386.955456][ T5128] ? __pfx_hci_rx_work+0x10/0x10 [ 1386.960377][ T5128] worker_thread+0x5da/0xe40 [ 1386.964961][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 1386.970052][ T5128] ? kthread+0x13a/0x450 [ 1386.974271][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 1386.979368][ T5128] kthread+0x370/0x450 [ 1386.983433][ T5128] ? __pfx_kthread+0x10/0x10 [ 1386.988008][ T5128] ret_from_fork+0x754/0xd80 [ 1386.992581][ T5128] ? __pfx_ret_from_fork+0x10/0x10 [ 1386.997670][ T5128] ? __switch_to+0x7b4/0x1120 [ 1387.002328][ T5128] ? __pfx_kthread+0x10/0x10 [ 1387.006904][ T5128] ret_from_fork_asm+0x1a/0x30 [ 1387.011653][ T5128] [ 1387.014649][ T5128] Modules linked in: [ 1387.019591][ T5128] ---[ end trace 0000000000000000 ]--- [ 1387.044660][T22045] fuse: Unknown parameter 'group_id00000000000000000000' [ 1387.060494][ T5128] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1387.068041][ T5128] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1387.087819][ T5128] RSP: 0018:ffffc900060c7628 EFLAGS: 00010282 [ 1387.090048][ T30] audit: type=1400 audit(2000001012.322:769): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1387.093953][ T5128] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1387.123750][ T5128] RDX: 0000000000000000 RSI: ffffffff89557561 RDI: dffffc000000004c [ 1387.131727][ T5128] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 1387.140578][ T5128] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff89557561 [ 1387.149158][ T5128] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1387.157170][ T5128] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 1387.166131][ T5128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1387.173035][ T5128] CR2: 00007ffc1b7c5588 CR3: 00000000782c3000 CR4: 00000000003526f0 [ 1387.191413][ T5128] Kernel panic - not syncing: Fatal exception [ 1387.197771][ T5128] Kernel Offset: disabled [ 1387.202097][ T5128] Rebooting in 86400 seconds..