last executing test programs: 6m26.247641594s ago: executing program 32 (id=122): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@getlink={0x34, 0x12, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000000}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, '/\xca\'][!.\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2010040}, 0x8001) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d4, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m43.174486803s ago: executing program 33 (id=727): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000001780)=ANY=[@ANYBLOB="400d2800000092fa32bfeeeef109846e03ef1633235cc968cf7c5fe2ecaf6fa800e60c12fa3b08a3966d79c3e406956abf886e63e9b4b916a11e89749394581c8bb16dc723645b70b1ec6eef39238e0c33b5d81e2f962d74418472b9f83924c2a284096485522bfcce781c0f66a440d92837e438e4702eaa569a73e708887afb6aca5db754cb1ef2f02cfe3019d4701f721ba132336e38969877dafb67a7482fe350afdb3db005097d564659660306652b8077276692430ec92dbffa02aef547be663011cdd0165067f956d13425999bdf2442613abd7fe99da4472d3d38ef3d0b4f65cb20a776a430c0b0c4ebe2e646a62fd3ae23905e20e0bba8776cd5e58d954315366eaaa8a2cc2b36f8d549416fb3b7d4eb1895e8d3dbc743e8e58168e190bbdea1518887e246f48d18d65cd8dc021d6294ab01617f67b4b1167cb4eaf6ade31058497c7449f3b300"/347], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="001428"], 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) getpid() 1m16.614189951s ago: executing program 34 (id=936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58d6c69d7e5b2b6034d4c38488a470fb5e000000020601020000000000000000000008000c000780080012400006000011000300680600683a69702c6d61726b00000000050005000a000000050004000000260abc3b3964f1fbb1c2766ef000000900413ecb8a7ac3e5a99183ee7ae5abcc9f94ca7c6e87de7f"], 0x58}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket(0x8, 0x2, 0x0) bind$packet(r5, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0xffffffffffffffff) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x11000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 1m15.86159796s ago: executing program 7 (id=963): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000400)={0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d1002"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100001, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_usb_connect$uac2(0x0, 0xec, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0xb, 0x20, 0xa9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x9, 0x46, 0x8}, [@extension_unit={0xa, 0x24, 0x9, 0x2, 0x100, 0xd, "b4b347"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, [0x2, 0x8, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0x7, 0x4, 0x3, 0x5, 0x2}, @sample_rate={0xb, 0x24, 0xd, 0x3, 0x3, 0x4, [0x3, 0x0]}, @extension_unit={0x8, 0x24, 0x9, 0x4, 0x4, 0x7, "d5"}, @sample_rate={0xd, 0x24, 0xd, 0x2, 0x1, 0x1, [0x2, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x43, 0x3, 0x4, "9f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf9, 0x7, 0x9, {0x8, 0x25, 0x1, 0x2, 0x0, 0x1, 0x2974}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0x6, 0x7, 0x2, 0x1002, 0x0, 0x4, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x1, 0xf, "bacc1b102f6802bf63"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x3, 0x2, {0x8, 0x25, 0x1, 0x80, 0x36, 0x27, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9, 0xb, 0x1, 0x8, 0xa}, 0x2b, &(0x7f0000000240)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "e0e971a76db12b9ca30e29cc73b4fc3e"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8beddc74a4000f44, 0x6, 0xf2, 0x4, 0xf2}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io$uac2(r4, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x5, 0x29, {0x29, 0x6, "20b48647c80f53891437640da3ac16fad2b128fe5c83d536330267db5245a0691a3cd72cc36d53"}}, &(0x7f0000000380)={0x0, 0x3, 0x61, @string={0x61, 0x3, "302d86904a867af89e8657a25569166567455c072de47b9fea8afda864bd8a0c1c5d501826619059dbdf258f462bf2dbea10d8947d0d41acd77f21e161825903ed02144cf044a373b93f540b74923c60d9164889248838f8ce211f74e01d90"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000500)={0x40, 0x16, 0xc0, "172935e52c082692445b26f45572a38590ae07de6b2859e677ee300ed0339c6e56729425e3557e071c9cbed2708e878af3963726afdd29d434742116efc797e2d1b3c6cf6d0b30688233a3b9478cce487a93001faa6324b7737ecc3407abb562076366323ab47f856c895739d9a86c9d8b1fbac3788264bb4668827f8f4cd0a157b3950aa71435bc17cb0a7add46e556082373160018f178c7985d48bd2315748ed7cf49b6483e0d97af5f62b71de9f2ea21253208b7d9d41f11b4af805ec943"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x81, 0x2, "8253"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "1ec4"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "20dc"}, &(0x7f0000000740)={0x20, 0x84, 0x2, "4b8a"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "c66b79"}}) flock(r3, 0x1780f9c373410dea) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1m13.91940327s ago: executing program 35 (id=942): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68800040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = open(0x0, 0x400103842, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r5, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) write$UHID_INPUT(r6, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup\x00', &(0x7f0000000a00), 0x2000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) 1m13.067959042s ago: executing program 36 (id=948): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6d276b17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x7, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0xb, 0x1, 0x7, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x0, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r14 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r14, 0x6, 0x9, &(0x7f0000000080)=0xfb78, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.018814953s ago: executing program 37 (id=950): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0xe803) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x80000000, 0x0, 0x100}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) 1m3.640233965s ago: executing program 8 (id=979): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, r0, 0x80000}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x0, &(0x7f0000000140)=""/108, &(0x7f00000001c0)=0x6c) 1m3.538318063s ago: executing program 8 (id=980): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 1m3.051940398s ago: executing program 8 (id=982): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pread64(r0, 0x0, 0x0, 0x7) 1m1.979932011s ago: executing program 8 (id=986): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lseek(r0, 0x854, 0x1) close_range(r0, r0, 0x0) getpriority(0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x400000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @func_proto]}}, 0x0, 0x4e}, 0x28) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) 1m0.611488823s ago: executing program 8 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) fchdir(r6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r10, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r10, r10, &(0x7f00000000c0)=0x7, 0x6fecb1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 59.388415537s ago: executing program 38 (id=963): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRESOCT], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000400)={0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d1002"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100001, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_usb_connect$uac2(0x0, 0xec, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0xb, 0x20, 0xa9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x9, 0x46, 0x8}, [@extension_unit={0xa, 0x24, 0x9, 0x2, 0x100, 0xd, "b4b347"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, [0x2, 0x8, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0x7, 0x4, 0x3, 0x5, 0x2}, @sample_rate={0xb, 0x24, 0xd, 0x3, 0x3, 0x4, [0x3, 0x0]}, @extension_unit={0x8, 0x24, 0x9, 0x4, 0x4, 0x7, "d5"}, @sample_rate={0xd, 0x24, 0xd, 0x2, 0x1, 0x1, [0x2, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x43, 0x3, 0x4, "9f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf9, 0x7, 0x9, {0x8, 0x25, 0x1, 0x2, 0x0, 0x1, 0x2974}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x7}, @as_header={0x10, 0x24, 0x1, 0x6, 0x7, 0x2, 0x1002, 0x0, 0x4, 0x1}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x1, 0xf, "bacc1b102f6802bf63"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x3, 0x2, {0x8, 0x25, 0x1, 0x80, 0x36, 0x27, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9, 0xb, 0x1, 0x8, 0xa}, 0x2b, &(0x7f0000000240)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "e0e971a76db12b9ca30e29cc73b4fc3e"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8beddc74a4000f44, 0x6, 0xf2, 0x4, 0xf2}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io$uac2(r4, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x5, 0x29, {0x29, 0x6, "20b48647c80f53891437640da3ac16fad2b128fe5c83d536330267db5245a0691a3cd72cc36d53"}}, &(0x7f0000000380)={0x0, 0x3, 0x61, @string={0x61, 0x3, "302d86904a867af89e8657a25569166567455c072de47b9fea8afda864bd8a0c1c5d501826619059dbdf258f462bf2dbea10d8947d0d41acd77f21e161825903ed02144cf044a373b93f540b74923c60d9164889248838f8ce211f74e01d90"}}}, &(0x7f0000000880)={0x44, &(0x7f0000000500)={0x40, 0x16, 0xc0, "172935e52c082692445b26f45572a38590ae07de6b2859e677ee300ed0339c6e56729425e3557e071c9cbed2708e878af3963726afdd29d434742116efc797e2d1b3c6cf6d0b30688233a3b9478cce487a93001faa6324b7737ecc3407abb562076366323ab47f856c895739d9a86c9d8b1fbac3788264bb4668827f8f4cd0a157b3950aa71435bc17cb0a7add46e556082373160018f178c7985d48bd2315748ed7cf49b6483e0d97af5f62b71de9f2ea21253208b7d9d41f11b4af805ec943"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x81, 0x2, "8253"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "1ec4"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "20dc"}, &(0x7f0000000740)={0x20, 0x84, 0x2, "4b8a"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "c66b79"}}) flock(r3, 0x1780f9c373410dea) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 58.858398031s ago: executing program 4 (id=992): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 58.563985349s ago: executing program 4 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x23, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x6, 0x6, 0x3, 0x6, 0x9, 0xd, 0x2, 0xd, 0xf, 0x1, 0x2, 0x8, 0xf, 0x4, 0x0, 0x8], 0x0, [0x1, 0x5, 0xc, 0x5, 0x3, 0x4, 0x0, 0xc, 0x1, 0x46, 0x3ff, 0x1, 0x4, 0x3, 0x9, 0x3], [0xc3e, 0x2, 0x3ff, 0x9, 0x2, 0x8, 0x5, 0x67, 0x9, 0x4, 0x9, 0x1, 0x9, 0x4, 0x6, 0x80]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 58.469139341s ago: executing program 4 (id=996): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000680)='T01\n', 0x4}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)='>', 0x1}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/152, 0x98}], 0x1) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e21, 0x5, @local, 0x63faeda}}}, 0x38) 58.283889147s ago: executing program 4 (id=998): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) 57.288791739s ago: executing program 8 (id=999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58d6c69d7e5b2b6034d4c38488a470fb5e000000020601020000000000000000000008000c000780080012400006000011000300680600683a69702c6d61726b00000000050005000a000000050004000000260abc3b3964f1fbb1c2766ef000000900413ecb8a7ac3e5a99183ee7ae5abcc9f94ca7c6e87de7f"], 0x58}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket(0x8, 0x2, 0x0) bind$packet(r5, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0xffffffffffffffff) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x11000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="530163000000000000000000000a722b2f66c6d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 56.877876284s ago: executing program 3 (id=1000): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20040080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, 0x0}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x8}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0xfcfd, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x800) write(0xffffffffffffffff, &(0x7f0000000040)="1c000000210025123510dbda164216270bdc3e51b6", 0x15) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000001c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, 0xc) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) 56.416559571s ago: executing program 4 (id=1002): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab538000905060200010000060905820200"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f000001fa40)={&(0x7f000001e580)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10, &(0x7f000001f900)=[{&(0x7f000001e5c0)="158b6d3c666af394f9257ad8be255d5d38bda2fd4b34533125b574ed85427834b0685dab4a5aa083dbf56ab6ee32aca02b9a76b6406093d803e219efbd32054516059f6aaf97ce4c9968af8ce7f9a94cb597b5c5cd37eca3e49185103d5e2233e67a4a4c25050156eaad48efaa9d7b47ea580f86d94abf1565846cbf519592370dce20422f707975cb3dec3bd922f7dba2e8bb25b26b6d186d1691bf54d6cbf88c5405badf969c69ef7ad88cf0e693ec30a2d3a88fad3674", 0xb8}, {&(0x7f000001e6c0)="368641f8faa78d99311fc132fe2ddb4af844a4b3a905725f40db1f200c2e16d4963d3162b6fb5cd932bdcc997e62b46679264dd2180d367994cf6f73495fc86355275880ab98a020bdb082643a0d831db66777a678c2e62a6d9fadb9d0dbc66e8b4b023f7a5471dd94ed1c5f5bc849fbde5ff43cad2f17e4a36018965af4c7ad1193035b166d2cef590b94d6537c573ce3f1f6f9c526dc63dacf16ef0005c13c4db24eea6c2b651109addb046f61e0773c1d629d726d303ab9df284819d98efddf29f2f98ba2e98fefcb5044bcf59e922f266943", 0xd4}, {&(0x7f000001e7c0)="4d111327840b62104a476889a9d6165cde4711597fa7d541647ab6f4499b20c3d01da5cc2ba76766d18acd914fb507a743e7a614fc464b95109ffabacc48025c90894ffbff550d3bf9170352db703d61fa3368e3e3047d365bf5ee4aa439b13cc0fe194374c5f39f94341370acc317a7a74bff9932931c773c8e019c87fd05b66d2d399f7c2b7ed272ed3ebafd9ce2d0fc6368563a67ec286d123c98d5dd74dac9597ef885", 0xa5}, {&(0x7f000001e880)="3546dfdaa7680d151fa4b9de58670d21398a89605c3d4b81849836", 0x1b}, {&(0x7f000001e8c0)="e3c543ab8babae0e509318c945c3abe8268099fb730fac2329cd625c3e000c2924d6cefd7f96974ddacadb85147fab23", 0x30}, {0x0}], 0x6, &(0x7f000001f980)="0a7efef02c21cb080b3ba4411a8da0b2947bab90203633731e9b48ee9d8aed424c1bed36c86c8813058e801f748ef6887e202d98d1881c0fb767f535c865328d9a3d6ccd3556992c5d10a870fc72d2a20b82d1b76445cc2482e3c31f4a3eb7ead96d2852c644176ec6b4b8bd355f7e994a332dfeb89f030fc96ac0fdc0b60dd3e8c9a0c9ee395adc9f4e75c578634bdf4c5be0ca0c53326a2f16b29090a7f0a9fdfb3b", 0xa3, 0x20048040}, 0x4000800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f000001e680)='net/protocols\x00') openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0xfffffffd, 0x14, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x1, 0x7, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl0\x00', r5, 0x4, 0x1, 0x3, 0x1, 0x44, @private0, @remote, 0x1, 0x7f10, 0x7fff, 0x1486db32}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x20, 0x22, 0xdb, {0xdb, 0x2, "7f70eedff9de781e0d6228a4ee0bec3ba6650f025c1d0be76cb37dec0dbde968e2e57b8b96373341ed813e5a555f2f2345d5a8d6002c4cb52b33571972ef457129fedd112747f0e02d8929ac8c3bb99942f65e03c167aab015aa544dce35742a09cd9aad9d8a969ef409ca342c07b37d0f1a4cc8ec72ccf79905bcdf11f56457e6e246ad2c466753c3c586aec09e9f2bb47850ffee7b2d292ac4a232a63c20bbeac42081ee90f94751871f985e9b6b66ec3ba433ec906d916a45b8bdd610461d3d438c7258b46f89dd52fd47122dc3ec37bcb9fe7e4afde4a4"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, &(0x7f0000000180)={0x0, 0x22, 0x15, {[@local=@item_4={0x3, 0x2, 0x1, "eda03b62"}, @main=@item_4={0x3, 0x0, 0x8, "8cfe8e44"}, @local=@item_012={0x2, 0x2, 0x1, '\x00\v'}, @main=@item_4={0x3, 0x0, 0x2, "5cd1d2ed"}, @local=@item_012={0x2, 0x2, 0xa, "0bde"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff7, 0x1, 0x1, {0x22, 0xba8}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x20, 0x5, 0xed, "f5f41fc84c8d2a2b30ee006286507c8ac0f20f8d90fa99b0dda097f501f411328660b19429700240569c5f30ce95eee8e50f15c63dc9b4fada8224dca8d6e2028e5e7fbae1fb58d54db57ca1d2f1e6cc242a4655c019fc1d6efa246d95970fe1b48aab89842bfffb59ba28d154f7683c1d0e92a2b2c7a955d49740ac1b96122ab6f62e46fe0065417a048e8db09353fc35bc70bab431ccee882237f7358c905f83bb0c320482c927fbca03b0eaab40e917bddc74a21726b37d82be1623a3a75fe3a70480f6dbaad6beeec2e61c6c4228f612c4b541dc005d8dd05bdec4dd719a5efc489ca65899b50846fef24f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x20, 0x3, 0x1, 0xd3}}) 55.841875642s ago: executing program 3 (id=1004): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32, @ANYRES64], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, 0x0, 0x8242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x1d, 0x2, 0x6) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000400)={@rand_addr=' \x01\x00', 0x6, 0x0, 0x0, 0x0, 0x280, 0xf4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000480)=0xdb26, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x1, 0x4, 0x12, 0x3, 0xaa, 0x9, 0xa61, 0x80}}}}]}, 0x58}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={0x0}}, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x900, &(0x7f00000000c0)={0x0, 0x80, 0x180000}, 0x20) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000480)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x10\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\x15\x04t\xc5\xcb\xe3\xbb<\xfcr\xea\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\x01\x04\x00\x00a)\x86\xa9U\xa0\xb7\x18\xfe\xe9\xd1\x97\x96\xb0\xe3\x13)v\x17\xfe\x9c.=b\xff#\x1a\xcf\x89_', 0x3) 52.195949122s ago: executing program 3 (id=1007): r0 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001280)={&(0x7f00000001c0)}) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) 52.112920926s ago: executing program 3 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x23, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000077000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1, 0x8000, 0xffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000000000047a15ae15ce4b7e"], 0x50) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) landlock_restrict_self(0xffffffffffffffff, 0xe) 51.392214133s ago: executing program 4 (id=1012): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6d276b17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x7, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0xb, 0x1, 0x7, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x0, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 51.063913436s ago: executing program 3 (id=1013): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x41001, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="01bb38010000fddbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x6048840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1048400, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}], [{@pcr={'pcr', 0x3d, 0x33}}]}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 50.023700432s ago: executing program 3 (id=1016): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000006580)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)=[{&(0x7f0000002c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00 \x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x27d4}], 0x1, &(0x7f0000006440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000c0300"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x44}, 0x20000400) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES64=r0, @ANYRES16], 0x28}}, 0x810) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x1, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x4, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x24004000}, 0x20008000) recvmmsg$unix(r5, &(0x7f0000000240)=[{{0x0, 0x1c2, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) 40.722565752s ago: executing program 39 (id=999): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58d6c69d7e5b2b6034d4c38488a470fb5e000000020601020000000000000000000008000c000780080012400006000011000300680600683a69702c6d61726b00000000050005000a000000050004000000260abc3b3964f1fbb1c2766ef000000900413ecb8a7ac3e5a99183ee7ae5abcc9f94ca7c6e87de7f"], 0x58}}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket(0x8, 0x2, 0x0) bind$packet(r5, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, 0xffffffffffffffff) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x11000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="530163000000000000000000000a722b2f66c6d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 34.831747253s ago: executing program 40 (id=1012): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6d276b17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x7, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0xb, 0x1, 0x7, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0xd03, 0xff05, 0x0, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 33.540058833s ago: executing program 41 (id=1016): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000006580)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)=[{&(0x7f0000002c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00 \x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x27d4}], 0x1, &(0x7f0000006440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000c0300"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x44}, 0x20000400) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES64=r0, @ANYRES16], 0x28}}, 0x810) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f0000000680)=@ethtool_link_settings={0x1, 0x2, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x4, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x24004000}, 0x20008000) recvmmsg$unix(r5, &(0x7f0000000240)=[{{0x0, 0x1c2, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) 25.181971375s ago: executing program 2 (id=1078): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4044014) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x50640, &(0x7f0000000080)={@_ha_fsid={[0xe679, 0x3]}, {0x9, 0x703, 0x6412, 0xe288}}, 0xecb, &(0x7f00000000c0)={@_ha_fsid}, 0x0}) getsockname$llc(r1, 0x0, &(0x7f0000000200)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x20}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r5 = fsopen(&(0x7f0000000200)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 20.095346397s ago: executing program 2 (id=1180): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 19.932244548s ago: executing program 2 (id=1187): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@sg0, 0x0, &(0x7f0000000200)='./file0\x00') 19.907672528s ago: executing program 2 (id=1188): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x470f}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x109800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x400007bf, 0x1, 0x810003, 0x8, 0x400600cc4, 0x1, 0x462e00000000000, 0x7fffffff, 0x801, 0x800000000000, 0x2, 0x2, 0x9, 0x6], 0x58000, 0x391181}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x1, 0xa16a, 0x4, 0x6, 0x0, 0x3, 0xffffffff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19.896157943s ago: executing program 5 (id=1190): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xb01, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000200)={0x28, 0x1, 0x0, 0x0, 0x4, 0x80, 0x70}) 19.846129263s ago: executing program 5 (id=1193): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 19.788334131s ago: executing program 6 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x4) 19.659658719s ago: executing program 5 (id=1197): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) 19.424255761s ago: executing program 6 (id=1198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 18.891974405s ago: executing program 2 (id=1200): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0x3d9}], 0x2}}], 0x1, 0x2404c845) 18.803653584s ago: executing program 6 (id=1201): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0xfec56002, 0x8000, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.731903026s ago: executing program 2 (id=1203): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 18.731627025s ago: executing program 9 (id=1204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000040)) 18.680000533s ago: executing program 6 (id=1205): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40, 0x0) 18.646919392s ago: executing program 6 (id=1206): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(0x0, 0xdc3, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x40, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 18.596229819s ago: executing program 9 (id=1207): mknod$loop(0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20043, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000a40)) 18.568573851s ago: executing program 9 (id=1208): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xcdf3eb4ab9c45b7f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4624, 0x40003, @mcast1}, {0x2, 0x4e22, 0xe0100000, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 18.460142869s ago: executing program 9 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 18.459672597s ago: executing program 9 (id=1212): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 18.418260918s ago: executing program 9 (id=1214): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 18.182829481s ago: executing program 5 (id=1222): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000540)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r6, &(0x7f0000000340), 0x8) getpeername$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', r7, 0x4, 0x25, 0x43, 0x7ff, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0x4, 0x10ba2f1a}}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb96e7505305a17d3, 0x8}, {0xe, 0x9}, {0xfffa, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x30}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000040) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 18.127139497s ago: executing program 5 (id=1224): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 17.840636323s ago: executing program 5 (id=1229): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 17.172189888s ago: executing program 6 (id=1230): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xfdf4, r0, 0x80000}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 15.224285669s ago: executing program 0 (id=1238): r0 = io_uring_setup(0x2cc1, &(0x7f0000000080)={0x0, 0x52b0, 0x2, 0x80003, 0xfb}) io_uring_setup(0x41b7, &(0x7f0000000000)={0x0, 0xd0ad, 0x7f, 0xffffffff, 0x20221, 0x0, r0}) 15.223741036s ago: executing program 0 (id=1239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000680), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98caca7122df"}, 0x14) sendto$packet(r7, &(0x7f00000006c0)="c1858aec1d0a21756f66ac805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0xb, 0x6, @broadcast}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.162766205s ago: executing program 0 (id=1240): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x1, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 15.099008317s ago: executing program 0 (id=1241): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e00ff0214fffffffffffff80700000013000000000000010800090016000000", 0x24) 15.036030799s ago: executing program 0 (id=1242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f0000000900)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 15.035741574s ago: executing program 0 (id=1243): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) 2.374634306s ago: executing program 42 (id=1203): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.520790812s ago: executing program 43 (id=1214): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 1.518714871s ago: executing program 1 (id=1244): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x4, 0x1, 0x100, &(0x7f0000000440)="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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x14, 0x38, 0x825, 0x70bd25, 0x25dfdbf9, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.499668008s ago: executing program 44 (id=1229): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) 1.465419835s ago: executing program 1 (id=1247): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) sendmmsg$unix(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000010}}], 0x1, 0x40) 1.175808813s ago: executing program 1 (id=1248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) listen(r3, 0x800) accept(r3, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'dvmrp1\x00', {0x2, 0x0, @dev}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 789.07085ms ago: executing program 45 (id=1230): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xfdf4, r0, 0x80000}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 213.42325ms ago: executing program 1 (id=1250): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x440, 0x0) 120.688205ms ago: executing program 1 (id=1251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="0130040004e8020018003480140035006d6163766c616e3100000000000000001400030076657468315f746f5f626f6e6400"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 1 (id=1252): ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) kernel console output (not intermixed with test programs): x77/0x7f [ 294.107176][ T8306] RIP: 0033:0x7f921db5d68e [ 294.107191][ T8306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.107207][ T8306] RSP: 002b:00007f921eaa1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.107225][ T8306] RAX: ffffffffffffffda RBX: 00007f921eaa26c0 RCX: 00007f921db5d68e [ 294.107237][ T8306] RDX: 0000000000000002 RSI: 00007f921eaa1f90 RDI: ffffffffffffff9c [ 294.107248][ T8306] RBP: 00007f921eaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 294.107258][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.107268][ T8306] R13: 00007f921de16128 R14: 00007f921de16090 R15: 00007ffe7c6ec8e8 [ 294.107293][ T8306] [ 294.612190][ T30] audit: type=1400 audit(1779742070.309:535): avc: denied { watch } for pid=8304 comm="syz.3.584" path="/proc/321/fd" dev="proc" ino=21121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 295.990066][ T804] usbhid 3-1:0.0: can't add hid device: -71 [ 295.996199][ T804] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 296.010331][ T804] usb 3-1: USB disconnect, device number 37 [ 296.166311][ T8324] netlink: 'syz.0.590': attribute type 2 has an invalid length. [ 296.217688][ T8324] syzkaller0: left promiscuous mode [ 296.232268][ T8324] syzkaller0: left allmulticast mode [ 296.452165][ T804] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 296.704115][ T804] usb 3-1: Using ep0 maxpacket: 8 [ 296.710442][ T804] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 296.718803][ T804] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 296.729335][ T804] usb 3-1: config 6 has no interface number 0 [ 296.735953][ T30] audit: type=1400 audit(1779742072.639:536): avc: denied { read } for pid=8327 comm="syz.1.592" lport=57602 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.735978][ T804] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.774263][ T804] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 296.783371][ T804] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 296.791700][ T804] usb 3-1: Product: syz [ 296.795983][ T804] usb 3-1: Manufacturer: syz [ 296.800811][ T804] usb 3-1: SerialNumber: syz [ 296.887458][ T804] hso 3-1:6.2: Failed to find INT IN ep [ 296.902147][ T5703] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 297.162708][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.289487][ T5703] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.389695][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.436959][ T5703] usb 6-1: config 0 descriptor?? [ 297.718614][ T8320] overlayfs: missing 'lowerdir' [ 297.748726][ T5794] usb 3-1: USB disconnect, device number 38 [ 298.038576][ T5703] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 298.538312][ T5703] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0019/input/input32 [ 298.667763][ T8350] Set syz1 is full, maxelem 65536 reached [ 298.718804][ T5703] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 299.056524][ T8356] netlink: 'syz.0.597': attribute type 40 has an invalid length. [ 299.376864][ T5794] usb 6-1: USB disconnect, device number 15 [ 301.295381][ T5703] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 301.317582][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.604'. [ 301.474958][ T5703] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 301.510174][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.528630][ T5703] usb 6-1: Product: syz [ 301.538453][ T5703] usb 6-1: Manufacturer: syz [ 301.550744][ T5703] usb 6-1: SerialNumber: syz [ 301.582291][ T5704] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 301.590471][ T5703] usb 6-1: config 0 descriptor?? [ 302.059226][ T5704] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.079477][ T5704] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.101329][ T5704] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.128250][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.211305][ T8374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.228499][ T5704] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.312964][ T5703] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 302.333155][ T5703] usb 6-1: Firmware version (0.0) predates our first public release. [ 302.370239][ T5703] usb 6-1: Please update to version 0.2 or newer [ 302.432138][ T804] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 302.617717][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 302.638749][ T804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.652190][ T5703] usb 6-1: USB disconnect, device number 16 [ 302.669086][ T804] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.691429][ T804] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 302.744578][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.760238][ T804] usb 4-1: Product: syz [ 302.781077][ T804] usb 4-1: Manufacturer: syz [ 302.797044][ T804] usb 4-1: SerialNumber: syz [ 302.826002][ T804] snd-ua101 4-1:1.1: invalid bNumEndpoints [ 302.845454][ T804] snd-ua101 4-1:1.0: invalid num_altsetting [ 303.186458][ T30] audit: type=1400 audit(1779742079.089:537): avc: denied { lock } for pid=8391 comm="syz.2.608" path="socket:[21232]" dev="sockfs" ino=21232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 303.295204][ T5794] usb 4-1: USB disconnect, device number 45 [ 303.319822][ T8394] capability: warning: `syz.5.609' uses 32-bit capabilities (legacy support in use) [ 303.381979][ T8397] FAULT_FLAG_ALLOW_RETRY missing 801 [ 303.401565][ T8397] CPU: 1 UID: 0 PID: 8397 Comm: syz.2.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.401598][ T8397] Tainted: [L]=SOFTLOCKUP [ 303.401605][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.401616][ T8397] Call Trace: [ 303.401621][ T8397] [ 303.401629][ T8397] dump_stack_lvl+0x100/0x190 [ 303.401657][ T8397] handle_userfault.cold+0x56/0x69 [ 303.401681][ T8397] ? do_raw_spin_unlock+0x145/0x1e0 [ 303.401708][ T8397] ? _raw_spin_unlock+0x28/0x50 [ 303.401730][ T8397] ? __free_frozen_pages+0x59e/0x1040 [ 303.401754][ T8397] ? __pfx_handle_userfault+0x10/0x10 [ 303.401788][ T8397] ? rcu_read_unlock+0x2d/0xb0 [ 303.401816][ T8397] ? rcu_read_unlock+0x2d/0xb0 [ 303.401854][ T8397] do_anonymous_page+0x1a83/0x2050 [ 303.401889][ T8397] __handle_mm_fault+0x1d2c/0x2a00 [ 303.401919][ T8397] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 303.401946][ T8397] ? __pfx___handle_mm_fault+0x10/0x10 [ 303.401972][ T8397] ? pte_offset_map_lock+0x174/0x320 [ 303.401992][ T8397] ? find_held_lock+0x2b/0x80 [ 303.402016][ T8397] ? follow_page_pte+0x4d0/0x13f0 [ 303.402039][ T8397] handle_mm_fault+0x36d/0xa20 [ 303.402067][ T8397] __get_user_pages+0x1178/0x32a0 [ 303.402097][ T8397] ? __pfx___get_user_pages+0x10/0x10 [ 303.402127][ T8397] populate_vma_page_range+0x267/0x3f0 [ 303.402159][ T8397] ? __pfx_populate_vma_page_range+0x10/0x10 [ 303.402186][ T8397] ? vma_set_page_prot+0xb1/0x120 [ 303.402211][ T8397] mprotect_fixup+0x955/0xe30 [ 303.402242][ T8397] ? __pfx_mprotect_fixup+0x10/0x10 [ 303.402284][ T8397] ? selinux_file_mprotect+0x18c/0x610 [ 303.402317][ T8397] do_mprotect_pkey+0xa4b/0xef0 [ 303.402353][ T8397] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 303.402412][ T8397] __x64_sys_mprotect+0x78/0xc0 [ 303.402438][ T8397] ? lockdep_hardirqs_on+0x78/0x100 [ 303.402466][ T8397] do_syscall_64+0x10b/0x860 [ 303.402493][ T8397] ? clear_bhb_loop+0x40/0x90 [ 303.402517][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.402536][ T8397] RIP: 0033:0x7fa871b9ce59 [ 303.402552][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.402569][ T8397] RSP: 002b:00007fa872a16028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 303.402587][ T8397] RAX: ffffffffffffffda RBX: 00007fa871e15fa0 RCX: 00007fa871b9ce59 [ 303.402599][ T8397] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 303.402609][ T8397] RBP: 00007fa871c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 303.402620][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.402629][ T8397] R13: 00007fa871e16038 R14: 00007fa871e15fa0 R15: 00007ffd2c3ead38 [ 303.402654][ T8397] [ 304.636945][ T804] usb 1-1: USB disconnect, device number 31 [ 304.972534][ T5704] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 305.422163][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 305.432545][ T5609] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 305.433831][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.470373][ T5704] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.518919][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.718821][ T5704] usb 4-1: config 0 descriptor?? [ 305.821686][ T8420] netlink: 'syz.5.616': attribute type 4 has an invalid length. [ 305.998958][ T5703] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 306.234254][ T5703] usb 1-1: device descriptor read/64, error -71 [ 306.299531][ T5704] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 306.327615][ T5704] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001A/input/input33 [ 306.483650][ T5794] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 306.522155][ T5703] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 306.565330][ T5704] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 306.702096][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 306.708750][ T5794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.719619][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.730698][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.767990][ T5794] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 306.812317][ T5703] usb 1-1: device descriptor read/64, error -71 [ 307.108042][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.148760][ T5794] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.182268][ T5794] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.203492][ T5794] usb 3-1: Manufacturer: syz [ 307.209129][ T9] usb 4-1: USB disconnect, device number 46 [ 307.258598][ T5703] usb usb1-port1: attempt power cycle [ 307.268844][ T5794] usb 3-1: config 0 descriptor?? [ 307.552526][ T5794] rc_core: IR keymap rc-hauppauge not found [ 307.561790][ T5794] Registered IR keymap rc-empty [ 307.661393][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 307.719580][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 307.760269][ T5703] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 307.768206][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 307.868705][ T5794] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 308.021818][ T5794] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 308.194913][ T5703] usb 1-1: device descriptor read/8, error -71 [ 308.651419][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 308.806201][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 308.999935][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 309.139246][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 309.266217][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 309.300646][ T30] audit: type=1400 audit(1779742085.039:538): avc: denied { getopt } for pid=8441 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.171972][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.192380][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.212238][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.236233][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.262432][ T5794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 310.302253][ T5794] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 310.312812][ T5794] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 310.327601][ T5794] usb 3-1: USB disconnect, device number 39 [ 310.639616][ T8456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.628'. [ 311.109251][ T30] audit: type=1400 audit(1779742086.909:539): avc: denied { write } for pid=8457 comm="syz.2.627" name="file0" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 311.501004][ T30] audit: type=1400 audit(1779742086.909:540): avc: denied { open } for pid=8457 comm="syz.2.627" path="/120/file0" dev="tmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 311.746246][ T30] audit: type=1400 audit(1779742086.919:541): avc: denied { ioctl } for pid=8457 comm="syz.2.627" path="/120/file0" dev="tmpfs" ino=650 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 311.777966][ T30] audit: type=1400 audit(1779742086.989:542): avc: denied { getopt } for pid=8457 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.222458][ T5794] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 312.242139][ T5731] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 312.282094][ T804] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 312.415265][ T5794] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.438358][ T5731] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 312.450970][ T5731] usb 1-1: config 0 interface 0 has no altsetting 0 [ 312.453834][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.464087][ T5731] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.479169][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 312.504023][ T5794] usb 3-1: New USB device found, idVendor=0499, idProduct=1019, bcdDevice= 0.40 [ 312.521297][ T804] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.531674][ T5731] usb 1-1: Product: syz [ 312.556563][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.564692][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.576988][ T804] usb 4-1: config 0 descriptor?? [ 312.577825][ T5731] usb 1-1: Manufacturer: syz [ 312.592136][ T5794] usb 3-1: Product: syz [ 312.604705][ T5731] usb 1-1: SerialNumber: syz [ 312.609487][ T5794] usb 3-1: Manufacturer: syz [ 312.623262][ T5794] usb 3-1: SerialNumber: syz [ 312.628550][ T5731] usb 1-1: config 0 descriptor?? [ 312.647082][ T8479] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.671615][ T5731] usb 1-1: selecting invalid altsetting 0 [ 312.848106][ T30] audit: type=1400 audit(1779742088.749:543): avc: denied { connect } for pid=8472 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 312.892763][ T8473] netem: incorrect ge model size [ 312.902121][ T8473] netem: change failed [ 312.963420][ T30] audit: type=1400 audit(1779742088.869:544): avc: denied { ioctl } for pid=8478 comm="syz.0.633" path="socket:[21431]" dev="sockfs" ino=21431 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.998547][ T5731] usb 1-1: USB disconnect, device number 36 [ 313.035571][ T804] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 313.093008][ T804] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001B/input/input35 [ 313.201600][ T5794] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.401166][ T804] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 314.480095][ T5794] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 314.517361][ T5794] usb 3-1: USB disconnect, device number 40 [ 314.571193][ T8404] udevd[8404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.850807][ T8494] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 314.860746][ T8494] SELinux: failed to load policy [ 314.886317][ T30] audit: type=1400 audit(1779742090.789:545): avc: denied { create } for pid=8492 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 315.256652][ T5794] usb 4-1: USB disconnect, device number 47 [ 315.535111][ T30] audit: type=1400 audit(1779742091.439:546): avc: denied { bind } for pid=8502 comm="syz.5.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.632185][ T5731] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 315.797747][ T5731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.847119][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.879294][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.898602][ T5731] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 316.056819][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.089704][ T5731] usb 1-1: config 0 descriptor?? [ 316.202523][ T804] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 316.502082][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 316.509745][ T804] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.519707][ T804] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 316.532852][ T8501] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 316.543621][ T804] usb 6-1: config 0 interface 0 has no altsetting 0 [ 316.546317][ T5731] hid (null): report_id 0 is invalid [ 316.552814][ T804] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 316.568196][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.576853][ T804] usb 6-1: Product: syz [ 316.579891][ T5731] wacom 0003:056A:0010.001C: report_id 0 is invalid [ 316.581031][ T804] usb 6-1: Manufacturer: syz [ 316.595466][ T804] usb 6-1: SerialNumber: syz [ 316.610218][ T804] usb 6-1: config 0 descriptor?? [ 316.616357][ T5731] wacom 0003:056A:0010.001C: item 0 1 1 8 parsing failed [ 316.635419][ T5731] wacom 0003:056A:0010.001C: parse failed [ 316.651607][ T5731] wacom 0003:056A:0010.001C: probe with driver wacom failed with error -22 [ 316.776201][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.782738][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.053507][ T8516] futex_wake_op: syz.2.641 tries to shift op by 144; fix this program [ 317.112773][ T5703] usb 1-1: USB disconnect, device number 37 [ 317.261367][ T8509] syz_tun: entered allmulticast mode [ 317.264200][ T804] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 317.275206][ T804] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 317.292252][ T8509] bond0: entered promiscuous mode [ 317.303609][ T8509] bond_slave_0: entered promiscuous mode [ 317.315464][ T8509] bond_slave_1: entered promiscuous mode [ 317.358590][ T5703] usb 6-1: USB disconnect, device number 17 [ 318.992611][ T5731] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 319.098538][ T8539] fuse: Bad value for 'fd' [ 319.184761][ T5731] usb 3-1: not running at top speed; connect to a high speed hub [ 319.211427][ T5731] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 319.265703][ T5731] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 319.287884][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.436423][ T5731] usb 3-1: Product: syz [ 319.476720][ T5731] usb 3-1: Manufacturer: syz [ 319.521622][ T5731] usb 3-1: SerialNumber: syz [ 319.557491][ T30] audit: type=1400 audit(1779742095.429:547): avc: denied { shutdown } for pid=8533 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.142288][ T5703] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 320.280925][ T8530] tmpfs: Bad value for 'mpol' [ 320.312075][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 320.333971][ T5703] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 320.361042][ T5703] usb 2-1: config 0 has no interface number 0 [ 320.389110][ T5703] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.413049][ T5703] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 320.441891][ T5703] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 320.453443][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.474965][ T5703] usb 2-1: Product: syz [ 320.485893][ T5703] usb 2-1: Manufacturer: syz [ 320.497168][ T5703] usb 2-1: SerialNumber: syz [ 320.517229][ T5703] usb 2-1: config 0 descriptor?? [ 320.529361][ T5703] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 320.730118][ T5703] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 320.743429][ T5703] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 320.965244][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 321.095013][ T9] usb 2-1: USB disconnect, device number 30 [ 323.342162][ T5794] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 323.525717][ T5794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.549990][ T5794] usb 2-1: config 8 has an invalid interface number: 196 but max is 0 [ 323.578410][ T5794] usb 2-1: config 8 has no interface number 0 [ 323.593687][ T5794] usb 2-1: config 8 interface 196 has no altsetting 0 [ 323.608367][ T5794] usb 2-1: language id specifier not provided by device, defaulting to English [ 323.632148][ T5794] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=3c.b5 [ 323.649552][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.668668][ T5794] usb 2-1: Product: Ɫய㫲შ딮ᝌ葛᡿늄➷熦뉒ن᫐ [ 323.831032][ T5731] usb 3-1: USB disconnect, device number 41 [ 324.439163][ T30] audit: type=1400 audit(1779742100.339:548): avc: denied { audit_write } for pid=8608 comm="syz.5.674" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 324.486928][ T30] audit: type=1400 audit(1779742100.359:549): avc: denied { bind } for pid=8608 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 325.002211][ T5703] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 325.194898][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 325.213847][ T5703] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 325.235872][ T5703] usb 6-1: config 0 has no interface number 0 [ 325.258904][ T5703] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.263534][ T8622] tipc: Failed to obtain node identity [ 325.287475][ T5703] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 325.310588][ T5703] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 325.321170][ T8622] tipc: Enabling of bearer rejected, failed to enable media [ 325.339773][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.361453][ T5703] usb 6-1: Product: syz [ 325.374471][ T5703] usb 6-1: Manufacturer: syz [ 325.385932][ T5703] usb 6-1: SerialNumber: syz [ 325.401447][ T5703] usb 6-1: config 0 descriptor?? [ 325.424173][ T5703] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 325.590361][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 325.620387][ T5703] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 325.645347][ T5703] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 325.840125][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.676'. [ 325.882286][ T804] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 325.925866][ T5703] usb 6-1: USB disconnect, device number 18 [ 326.180678][ T804] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 326.219846][ T804] usb 4-1: config 0 has no interface number 0 [ 326.232428][ T804] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.272209][ T804] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 326.274465][ T5794] uvcvideo 2-1:8.196: Found UVC 0.00 device Ɫய㫲შ딮ᝌ葛᡿늄➷熦뉒ن᫐ (05ac:8501) [ 326.286131][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.293107][ T5794] uvcvideo 2-1:8.196: No valid video chain found. [ 326.313669][ T5794] usb 2-1: USB disconnect, device number 31 [ 326.337766][ T804] usb 4-1: Product: syz [ 326.352883][ T804] usb 4-1: Manufacturer: syz [ 326.364795][ T804] usb 4-1: SerialNumber: syz [ 326.383548][ T804] usb 4-1: config 0 descriptor?? [ 326.410006][ T804] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 326.841141][ T8635] SELinux: ebitmap: truncated map [ 327.215159][ T8635] SELinux: failed to load policy [ 327.740426][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.849978][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.960951][ T9] usb 4-1: USB disconnect, device number 48 [ 328.000384][ T9] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 328.603747][ T8651] debugfs: 'netdev@ffff888057600658' already exists in 'ref_tracker' [ 328.752216][ T30] audit: type=1400 audit(1779742104.489:550): avc: denied { write } for pid=8644 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.763558][ T5794] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 328.804976][ T30] audit: type=1400 audit(1779742104.499:551): avc: denied { listen } for pid=8644 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.943181][ T8657] input: syz1 as /devices/virtual/input/input36 [ 328.975648][ T5794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.977350][ T5794] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 328.977375][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.977392][ T5794] usb 1-1: Product: syz [ 328.977405][ T5794] usb 1-1: Manufacturer: syz [ 328.977417][ T5794] usb 1-1: SerialNumber: syz [ 328.987905][ T5794] usb 1-1: config 0 descriptor?? [ 329.191214][ T8667] can0: slcan on ptm0. [ 329.267992][ T30] audit: type=1400 audit(1779742105.169:552): avc: denied { ioctl } for pid=8666 comm="syz.1.692" path="socket:[22880]" dev="sockfs" ino=22880 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 329.295061][ T8670] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8670 comm=syz.1.692 [ 329.334146][ T8670] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8670 comm=syz.1.692 [ 329.363834][ T8667] can0 (unregistered): slcan off ptm0. [ 329.582272][ T804] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 329.613019][ T30] audit: type=1400 audit(1779742105.519:553): avc: denied { write } for pid=8669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.662151][ T5703] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 329.701502][ T30] audit: type=1400 audit(1779742105.599:554): avc: denied { write } for pid=8689 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.754545][ T804] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 329.772567][ T804] usb 6-1: config 1 has no interface number 0 [ 329.780264][ T804] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 329.815737][ T804] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 329.830406][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 329.846246][ T5703] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 329.857079][ T804] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.869728][ T5703] usb 3-1: config 0 has no interface number 0 [ 329.883857][ T5703] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.901613][ T804] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 329.918185][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.926587][ T5703] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.945978][ T804] usb 6-1: Product: syz [ 329.953838][ T5703] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 329.966352][ T804] usb 6-1: Manufacturer: syz [ 329.972753][ T804] usb 6-1: SerialNumber: syz [ 329.978900][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.998640][ T5703] usb 3-1: Product: syz [ 330.003922][ T8673] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 330.027171][ T5703] usb 3-1: Manufacturer: syz [ 330.033950][ T5703] usb 3-1: SerialNumber: syz [ 330.053099][ T5703] usb 3-1: config 0 descriptor?? [ 330.069853][ T5703] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 330.268061][ T5703] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 330.278019][ T8673] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 330.300068][ T5703] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 330.677122][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 330.746594][ T5731] usb 3-1: USB disconnect, device number 42 [ 330.751504][ T804] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:08:07 [ 330.768543][ C1] sierra_net 6-1:1.7 wwan0: : unexpected notification bd! [ 330.775901][ C1] sierra_net 6-1:1.7 wwan0: : unexpected notification 88! [ 330.899110][ T30] audit: type=1400 audit(1779742106.799:555): avc: denied { write } for pid=8694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.086941][ T804] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 331.104897][ T804] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 331.125561][ T804] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 331.125911][ T5794] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.143761][ T804] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 331.174148][ T5794] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 331.199619][ T804] usb 6-1: USB disconnect, device number 19 [ 331.244719][ T804] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 331.254974][ T5794] usb 1-1: USB disconnect, device number 38 [ 331.280568][ T30] audit: type=1400 audit(1779742107.179:556): avc: denied { write } for pid=8714 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.412639][ T804] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 331.482929][ T5609] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 331.663135][ T5731] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 331.764817][ T8729] netlink: 642 bytes leftover after parsing attributes in process `syz.5.704'. [ 331.823883][ T8731] syzkaller0: entered promiscuous mode [ 331.831908][ T5731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.843347][ T8731] syzkaller0: entered allmulticast mode [ 331.850178][ T5731] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 331.865712][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.901864][ T5731] ttusb_dec_send_command: command bulk message failed: error -22 [ 331.913291][ T5731] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -22 [ 332.009231][ T8723] wg1 speed is unknown, defaulting to 1000 [ 332.102548][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.115506][ T8735] netlink: 'syz.1.707': attribute type 1 has an invalid length. [ 332.128653][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.158481][ T30] audit: type=1400 audit(1779742108.059:557): avc: denied { name_bind } for pid=8734 comm="syz.1.707" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 332.182988][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.211156][ T8735] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 332.225900][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.252187][ T5794] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 332.402535][ T804] usb 4-1: USB disconnect, device number 49 [ 332.682718][ T5794] usb 6-1: Using ep0 maxpacket: 32 [ 332.706300][ T5794] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.767842][ T5794] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.810284][ T5794] usb 6-1: config 0 interface 0 has no altsetting 0 [ 332.828634][ T5794] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 332.843932][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.858050][ T5794] usb 6-1: Product: syz [ 332.862527][ T8746] netlink: 52 bytes leftover after parsing attributes in process `syz.2.710'. [ 332.879447][ T5794] usb 6-1: Manufacturer: syz [ 332.893737][ T8746] netlink: 52 bytes leftover after parsing attributes in process `syz.2.710'. [ 332.902819][ T5731] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 332.911645][ T5794] usb 6-1: SerialNumber: syz [ 332.944371][ T5794] usb 6-1: config 0 descriptor?? [ 332.953572][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.710'. [ 332.987893][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 333.052129][ T5731] usb 1-1: device descriptor read/64, error -71 [ 333.382230][ T5731] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 333.421652][ T5794] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 333.534325][ T5731] usb 1-1: device descriptor read/64, error -71 [ 333.975262][ T8760] comedi comedi1: 8255: I/O base address not correctly aligned [ 334.106262][ T5731] usb usb1-port1: attempt power cycle [ 334.162475][ T5794] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 334.574647][ T5731] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 334.588228][ T8757] block nbd0: server does not support multiple connections per device. [ 334.616484][ T8757] block nbd0: shutting down sockets [ 334.650674][ T5731] usb 1-1: device descriptor read/8, error -71 [ 334.826493][ T5794] usb 6-1: USB disconnect, device number 20 [ 334.922096][ T5731] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 334.991483][ T5731] usb 1-1: device descriptor read/8, error -71 [ 335.129600][ T8765] loop9: detected capacity change from 0 to 2640 [ 335.132615][ T5731] usb usb1-port1: unable to enumerate USB device [ 335.168232][ T8765] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.202144][ T804] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 335.211579][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.369906][ T8765] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.392210][ T8767] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 335.442752][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 335.466009][ T804] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 335.509718][ T804] usb 3-1: config 0 has no interface number 0 [ 335.534195][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.556753][ T804] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 335.579884][ T8767] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 335.588658][ T5609] Bluetooth: Wrong link type (-71) [ 335.599037][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.634839][ T804] usb 3-1: Product: syz [ 335.656421][ T804] usb 3-1: Manufacturer: syz [ 335.676368][ T804] usb 3-1: SerialNumber: syz [ 335.693345][ T8765] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.713184][ T8767] I/O error, dev loop9, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 335.713481][ T804] usb 3-1: config 0 descriptor?? [ 335.742506][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.758658][ T30] audit: type=1400 audit(1779742111.659:558): avc: denied { write } for pid=8769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.795766][ T8767] I/O error, dev loop9, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 335.828903][ T804] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 335.868526][ T8767] I/O error, dev loop9, sector 2042 op 0x1:(WRITE) flags 0x8800 phys_seg 75 prio class 2 [ 335.908013][ T30] audit: type=1804 audit(1779742111.809:559): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.718" name="bus" dev="ramfs" ino=23954 res=1 errno=0 [ 335.937126][ T8767] I/O error, dev loop9, sector 2042 op 0x1:(WRITE) flags 0x8800 phys_seg 75 prio class 2 [ 335.949307][ T8765] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.011071][ T30] audit: type=1400 audit(1779742111.839:560): avc: denied { write } for pid=8793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.074360][ T804] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 336.075739][ T30] audit: type=1804 audit(1779742111.889:561): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.718" name="bus" dev="ramfs" ino=23954 res=1 errno=0 [ 336.171978][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.186283][ T804] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 336.241852][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.312367][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.315473][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.713'. [ 336.395168][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.426287][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 336.434948][ T804] usb 3-1: USB disconnect, device number 43 [ 336.449761][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.719'. [ 336.467127][ T804] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 336.484275][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.608102][ T8765] ldm_validate_partition_table(): Disk read failed. [ 336.712624][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.847054][ T8765] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.946143][ T8765] Dev loop9: unable to read RDB block 0 [ 337.323005][ T8765] loop9: unable to read partition table [ 337.474875][ T8765] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 338.348261][ T804] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 338.364853][ T804] quatech2 3-1:0.51: device disconnected [ 338.429701][ T30] audit: type=1400 audit(1779742114.329:562): avc: denied { name_bind 0x1000000 } for pid=8811 comm="syz.2.720" path="socket:[23970]" dev="sockfs" ino=23970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 338.629648][ T8816] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.720'. [ 338.732826][ T30] audit: type=1400 audit(1779742114.439:563): avc: denied { write } for pid=8796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.995297][ T8818] input: syz0 as /devices/virtual/input/input37 [ 339.048692][ T8818] netlink: 140 bytes leftover after parsing attributes in process `syz.5.721'. [ 339.106098][ T30] audit: type=1400 audit(1779742115.009:564): avc: denied { write } for pid=8819 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.177850][ T30] audit: type=1400 audit(1779742115.079:565): avc: denied { bind } for pid=8820 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 339.212217][ T30] audit: type=1400 audit(1779742115.079:566): avc: denied { listen } for pid=8820 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 339.436768][ T30] audit: type=1326 audit(1779742115.339:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8825 comm="syz.5.723" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbae9d9ce59 code=0x7ffc0000 [ 339.694852][ T6345] syz_tun (unregistering): left allmulticast mode [ 341.029089][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.105700][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 341.158640][ T5609] Bluetooth: Wrong link type (-71) [ 341.352108][ T5703] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 341.439225][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.451341][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.461476][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.469328][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.476856][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.534980][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 341.662385][ T5703] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 341.757086][ T5703] usb 2-1: config 0 has no interface number 0 [ 341.895006][ T5703] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 341.955045][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.008468][ T5703] usb 2-1: Product: syz [ 342.032667][ T5703] usb 2-1: Manufacturer: syz [ 342.053385][ T5703] usb 2-1: SerialNumber: syz [ 342.133573][ T5703] usb 2-1: config 0 descriptor?? [ 342.138964][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.176000][ T5703] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.415901][ T5703] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 342.460554][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.487996][ T5703] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 342.507844][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 342.507863][ T30] audit: type=1326 audit(1779742118.389:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.2.734" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa871b9ce59 code=0xffff0000 [ 342.665216][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 342.737675][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 342.737988][ T5794] usb 2-1: USB disconnect, device number 32 [ 342.786141][ T5794] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 342.827786][ T5794] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 342.848913][ T5794] quatech2 2-1:0.51: device disconnected [ 342.897862][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.943325][ T5703] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 343.081773][ T30] audit: type=1400 audit(1779742118.979:576): avc: denied { create } for pid=8863 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 343.120577][ T8865] syz_tun: entered allmulticast mode [ 343.142520][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 343.228987][ T30] audit: type=1400 audit(1779742118.979:577): avc: denied { write } for pid=8863 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 343.573319][ T5609] Bluetooth: hci0: command tx timeout [ 343.818007][ T8863] syz_tun: left allmulticast mode [ 343.844722][ T5703] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 343.856082][ T5703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.866590][ T5703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.876716][ T5703] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.890020][ T5703] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.899700][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.740822][ T5703] usb 4-1: GET_CAPABILITIES returned 0 [ 344.746908][ T5703] usbtmc 4-1:16.0: can't read capabilities [ 345.033913][ T5703] usb 4-1: USB disconnect, device number 50 [ 345.116971][ T36] bridge_slave_1: left allmulticast mode [ 345.144314][ T36] bridge_slave_1: left promiscuous mode [ 345.162982][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.215566][ T36] bridge_slave_0: left allmulticast mode [ 345.234848][ T36] bridge_slave_0: left promiscuous mode [ 345.248865][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.498747][ T8882] netlink: 666 bytes leftover after parsing attributes in process `syz.0.741'. [ 345.652262][ T5609] Bluetooth: hci0: command tx timeout [ 345.766639][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.807469][ T36] bond_slave_0: left promiscuous mode [ 345.856782][ T30] audit: type=1400 audit(1779742121.759:578): avc: denied { write } for pid=8878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.861264][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.993011][ T36] bond_slave_1: left promiscuous mode [ 346.013472][ T36] bond0 (unregistering): Released all slaves [ 346.062979][ T8843] wg1 speed is unknown, defaulting to 1000 [ 346.097250][ T30] audit: type=1800 audit(1779742121.989:579): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.744" name="bus" dev="tmpfs" ino=703 res=0 errno=0 [ 346.156217][ T10] libceph: connect (1)[c::]:6789 error -101 [ 346.166913][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 346.181592][ T10] libceph: connect (1)[c::]:6789 error -101 [ 346.187721][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 346.241901][ T30] audit: type=1400 audit(1779742122.139:580): avc: denied { write } for pid=8895 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.329576][ T36] IPVS: stopping backup sync thread 8255 ... [ 346.429589][ T8893] ceph: No mds server is up or the cluster is laggy [ 346.454945][ T5731] libceph: connect (1)[c::]:6789 error -101 [ 346.461144][ T5731] libceph: mon0 (1)[c::]:6789 connect error [ 346.488780][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 346.512740][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 346.707177][ T30] audit: type=1400 audit(1779742122.609:581): avc: denied { read } for pid=8892 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.728029][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 346.744948][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 346.757853][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 346.782216][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 346.796998][ T30] audit: type=1400 audit(1779742122.609:582): avc: denied { open } for pid=8892 comm="syz.3.744" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 346.812187][ T8893] netlink: 'syz.3.744': attribute type 14 has an invalid length. [ 346.888314][ T10] usb 3-1: config 0 has no interface number 0 [ 346.987543][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.001921][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.029968][ T30] audit: type=1400 audit(1779742122.759:583): avc: denied { ioctl } for pid=8892 comm="syz.3.744" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 347.056360][ T10] usb 3-1: Product: syz [ 347.185906][ T10] usb 3-1: Manufacturer: syz [ 347.204825][ T10] usb 3-1: SerialNumber: syz [ 347.269347][ T10] usb 3-1: config 0 descriptor?? [ 347.299745][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.312094][ T5703] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 347.499896][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 347.525541][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.555502][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 347.565775][ T5703] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.634470][ T30] audit: type=1400 audit(1779742123.519:584): avc: denied { write } for pid=8912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.637292][ T5703] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 347.698870][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 347.708589][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.716873][ T5703] usb 1-1: Product: syz [ 347.721062][ T5703] usb 1-1: Manufacturer: syz [ 347.725875][ T5703] usb 1-1: SerialNumber: syz [ 347.728520][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 347.732703][ T5609] Bluetooth: hci0: command tx timeout [ 347.780000][ T5703] snd-ua101 1-1:1.1: invalid bNumEndpoints [ 347.792514][ T5703] snd-ua101 1-1:1.0: invalid num_altsetting [ 347.865321][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 347.873786][ T5704] usb 3-1: USB disconnect, device number 44 [ 347.954116][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 348.012862][ T10] usb 1-1: USB disconnect, device number 43 [ 348.020919][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 348.079198][ T30] audit: type=1400 audit(1779742123.979:585): avc: denied { write } for pid=8941 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.123312][ T5704] quatech2 3-1:0.51: device disconnected [ 348.166562][ T36] hsr_slave_0: left promiscuous mode [ 348.195707][ T36] hsr_slave_1: left promiscuous mode [ 348.222557][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.245354][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.269749][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.294426][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.397060][ T36] veth1_macvtap: left promiscuous mode [ 348.421921][ T36] veth0_macvtap: left promiscuous mode [ 348.444826][ T36] veth1_vlan: left promiscuous mode [ 348.469599][ T36] veth0_vlan: left promiscuous mode [ 348.595401][ T8948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.770098][ T36] team0 (unregistering): Port device team_slave_1 removed [ 349.783051][ T30] audit: type=1400 audit(1779742125.642:586): avc: denied { ioctl } for pid=8976 comm="syz.1.761" path="socket:[24683]" dev="sockfs" ino=24683 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 349.913534][ T5609] Bluetooth: hci0: command tx timeout [ 349.937570][ T36] team0 (unregistering): Port device team_slave_0 removed [ 350.019199][ T10] IPVS: starting estimator thread 0... [ 350.198565][ T8979] IPVS: using max 40 ests per chain, 96000 per kthread [ 350.904842][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 351.087358][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 351.094327][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.103353][ T10] usb 3-1: config 0 has no interface number 0 [ 351.130181][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 351.148713][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.201086][ T10] usb 3-1: Product: syz [ 351.218837][ T10] usb 3-1: Manufacturer: syz [ 351.235798][ T10] usb 3-1: SerialNumber: syz [ 351.266323][ T10] usb 3-1: config 0 descriptor?? [ 351.279507][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 351.303192][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.311978][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.330124][ T8843] bridge_slave_0: entered allmulticast mode [ 351.341136][ T8843] bridge_slave_0: entered promiscuous mode [ 351.363786][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 351.391970][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.414890][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.441081][ T8843] bridge_slave_1: entered allmulticast mode [ 351.455978][ T8843] bridge_slave_1: entered promiscuous mode [ 351.491050][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 351.548820][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.586990][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.612229][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 351.691315][ T8843] team0: Port device team_slave_0 added [ 351.707425][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'. [ 351.730326][ T8843] team0: Port device team_slave_1 added [ 351.757079][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 351.757498][ T5703] usb 3-1: USB disconnect, device number 45 [ 351.825704][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.842348][ T5703] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 351.858855][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.894085][ T5703] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 351.907210][ T5703] quatech2 3-1:0.51: device disconnected [ 351.913492][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.940648][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.955943][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.020912][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.347903][ T8843] hsr_slave_0: entered promiscuous mode [ 352.430541][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 352.430853][ T8843] hsr_slave_1: entered promiscuous mode [ 352.531930][ T8843] debugfs: 'hsr0' already exists in 'hsr' [ 352.555397][ T8843] Cannot create hsr debugfs directory [ 352.560868][ T30] audit: type=1400 audit(1779742128.442:587): avc: denied { write } for pid=8988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.610738][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 352.643492][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 352.678193][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 352.719823][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 352.750261][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.773325][ T10] usb 2-1: Product: syz [ 352.828419][ T10] usb 2-1: Manufacturer: syz [ 352.838855][ T10] usb 2-1: SerialNumber: syz [ 352.857737][ T10] usb 2-1: config 0 descriptor?? [ 352.896452][ T30] audit: type=1400 audit(1779742128.780:588): avc: denied { write } for pid=9008 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.223630][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 353.877878][ T5703] usb 2-1: USB disconnect, device number 33 [ 354.633247][ T8843] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.668307][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.721243][ T8843] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.810255][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.844581][ T8843] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.927290][ T804] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 355.135714][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 355.222788][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.242925][ T30] audit: type=1400 audit(1779742131.063:589): avc: denied { write } for pid=9024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.276836][ T804] usb 4-1: device descriptor read/64, error -71 [ 355.289161][ T8843] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.337168][ T5609] Bluetooth: hci3: unexpected event for opcode 0x007f [ 355.352417][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.366814][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 355.980444][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 355.990251][ T10] usb 1-1: config 0 has no interface number 0 [ 356.010753][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 356.038798][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.072672][ T10] usb 1-1: Product: syz [ 356.089399][ T10] usb 1-1: Manufacturer: syz [ 356.106117][ T10] usb 1-1: SerialNumber: syz [ 356.120581][ T804] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 356.130119][ T10] usb 1-1: config 0 descriptor?? [ 356.154245][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 356.228445][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.235395][ T30] audit: type=1400 audit(1779742131.996:590): avc: denied { write } for pid=9058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.309782][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.331700][ T804] usb 4-1: device descriptor read/64, error -71 [ 356.382335][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 356.384574][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.398898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.447079][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 356.476502][ T804] usb usb4-port1: attempt power cycle [ 356.496425][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 356.518941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.526135][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.609675][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.775'. [ 356.617947][ T9071] FAULT_INJECTION: forcing a failure. [ 356.617947][ T9071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.677363][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.1.780 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.677394][ T9071] Tainted: [L]=SOFTLOCKUP [ 356.677399][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.677409][ T9071] Call Trace: [ 356.677415][ T9071] [ 356.677422][ T9071] dump_stack_lvl+0x100/0x190 [ 356.677448][ T9071] should_fail_ex.cold+0x5/0xa [ 356.677473][ T9071] _copy_from_user+0x2e/0xd0 [ 356.677502][ T9071] io_submit_one+0xbd/0x1fb0 [ 356.677522][ T9071] ? __lock_acquire+0x4a5/0x2630 [ 356.677544][ T9071] ? irqentry_exit+0x24d/0x7e0 [ 356.677569][ T9071] ? lockdep_hardirqs_on+0x78/0x100 [ 356.677596][ T9071] ? __pfx_io_submit_one+0x10/0x10 [ 356.677620][ T9071] ? __might_fault+0xc5/0x140 [ 356.677652][ T9071] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 356.677668][ T9071] __x64_sys_io_submit+0x1b1/0x3a0 [ 356.677687][ T9071] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 356.677703][ T9071] ? fput+0x79/0x100 [ 356.677739][ T9071] ? rcu_is_watching+0x12/0xc0 [ 356.677767][ T9071] do_syscall_64+0x10b/0x860 [ 356.677792][ T9071] ? clear_bhb_loop+0x40/0x90 [ 356.677813][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.677831][ T9071] RIP: 0033:0x7f3ac4b9ce59 [ 356.677844][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.677860][ T9071] RSP: 002b:00007f3ac5a21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 356.677876][ T9071] RAX: ffffffffffffffda RBX: 00007f3ac4e15fa0 RCX: 00007f3ac4b9ce59 [ 356.677887][ T9071] RDX: 0000200000001440 RSI: 000000000000027f RDI: 00007f3ac59fc000 [ 356.677898][ T9071] RBP: 00007f3ac5a21090 R08: 0000000000000000 R09: 0000000000000000 [ 356.677907][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.677917][ T9071] R13: 00007f3ac4e16038 R14: 00007f3ac4e15fa0 R15: 00007fff42e235d8 [ 356.677940][ T9071] [ 356.945383][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 356.945637][ T5703] usb 1-1: USB disconnect, device number 44 [ 356.959533][ T804] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 356.972033][ T5703] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 357.082863][ T5703] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 357.157398][ T5703] quatech2 1-1:0.51: device disconnected [ 357.787771][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'. [ 358.008374][ T5609] Bluetooth: Wrong link type (-71) [ 359.541264][ T804] usb 4-1: device descriptor read/8, error -71 [ 359.663272][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.994675][ T30] audit: type=1400 audit(1779742135.528:591): avc: denied { ioctl } for pid=9117 comm="syz.0.789" path="/newroot/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 360.021027][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.789'. [ 360.293989][ T9125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.788'. [ 360.304545][ T9125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.788'. [ 360.317618][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.788'. [ 360.328741][ T5703] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 360.355752][ T8843] veth0_vlan: entered promiscuous mode [ 360.382041][ T8843] veth1_vlan: entered promiscuous mode [ 360.425147][ T8843] veth0_macvtap: entered promiscuous mode [ 360.441081][ T8843] veth1_macvtap: entered promiscuous mode [ 360.472114][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.493022][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.499078][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 360.525523][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.529669][ T812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.557021][ T5703] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.571253][ T5704] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 360.593270][ T5703] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 360.602822][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.611184][ T5703] usb 2-1: Product: syz [ 360.626615][ T5703] usb 2-1: Manufacturer: syz [ 360.631531][ T5703] usb 2-1: SerialNumber: syz [ 360.657343][ T5703] snd-ua101 2-1:1.1: invalid bNumEndpoints [ 360.663740][ T812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.671837][ T5703] snd-ua101 2-1:1.0: invalid num_altsetting [ 360.696836][ T812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.742720][ T812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.749157][ T5704] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 360.777534][ T5704] usb 1-1: config 1 has no interface number 0 [ 360.798553][ T5704] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 360.837921][ T812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.853187][ T812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.910564][ T10] usb 2-1: USB disconnect, device number 34 [ 360.925472][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.943666][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.950685][ T5704] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 360.968383][ T5704] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.985628][ T9135] ubi16: attaching mtd0 [ 360.994822][ T5704] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 360.998454][ T30] audit: type=1400 audit(1779742136.469:592): avc: denied { mounton } for pid=8843 comm="syz-executor" path="/root/syzkaller.4L96oE/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 361.005868][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.046911][ T5703] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 361.078784][ T5704] usb 1-1: Product: syz [ 361.087911][ T30] audit: type=1400 audit(1779742136.506:593): avc: denied { mounton } for pid=8843 comm="syz-executor" path="/root/syzkaller.4L96oE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 361.087926][ T5704] usb 1-1: Manufacturer: syz [ 361.087944][ T5704] usb 1-1: SerialNumber: syz [ 361.168974][ T9127] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 361.180992][ T30] audit: type=1400 audit(1779742136.525:594): avc: denied { mounton } for pid=8843 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 361.229611][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 361.257456][ T5703] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 361.381783][ T5703] usb 4-1: config 0 has no interface number 0 [ 361.398611][ T5703] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 361.408080][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.419668][ T5703] usb 4-1: Product: syz [ 361.494458][ T9140] netlink: 'syz.6.728': attribute type 4 has an invalid length. [ 361.948066][ T9127] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 361.982417][ T5703] usb 4-1: Manufacturer: syz [ 361.992357][ T5703] usb 4-1: SerialNumber: syz [ 362.027391][ T5703] usb 4-1: config 0 descriptor?? [ 362.057987][ T5703] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 362.070697][ T9135] ubi16: scanning is finished [ 362.075526][ T9135] ubi16: empty MTD device detected [ 362.375098][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.796'. [ 362.453025][ T812] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.704312][ T5703] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 362.735122][ T5704] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:09:07 [ 362.756373][ T812] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.866708][ T9151] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 362.873936][ T5703] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 362.890181][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.793'. [ 362.901869][ T76] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.910778][ T76] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.920886][ T5609] Bluetooth: Wrong link type (-71) [ 362.940321][ T5704] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 362.958047][ T5704] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 362.969855][ T5704] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 362.993536][ T5704] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 363.026419][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 363.050931][ T5703] usb 4-1: USB disconnect, device number 55 [ 363.110552][ T5704] usb 1-1: USB disconnect, device number 45 [ 363.143098][ T5704] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 363.154605][ T5703] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 363.231723][ T5703] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 363.270550][ T5703] quatech2 4-1:0.51: device disconnected [ 363.284583][ T30] audit: type=1400 audit(1779742138.586:595): avc: denied { ioctl } for pid=9157 comm="syz.1.798" path="socket:[25584]" dev="sockfs" ino=25584 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 363.309527][ T5704] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 363.367327][ T30] audit: type=1400 audit(1779742138.586:596): avc: denied { connect } for pid=9157 comm="syz.1.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 365.626717][ T9135] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 366.052234][ T9176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.802'. [ 366.680760][ T9187] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 366.713893][ T9187] input: syz0 as /devices/virtual/input/input39 [ 367.555028][ T5704] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 368.097027][ T5704] usb 1-1: Using ep0 maxpacket: 8 [ 368.329545][ T5704] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 368.471945][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.511481][ T5704] usb 1-1: Product: syz [ 368.528696][ T5704] usb 1-1: Manufacturer: syz [ 368.543257][ T5704] usb 1-1: SerialNumber: syz [ 368.566556][ T5704] usb 1-1: config 0 descriptor?? [ 368.600844][ T5704] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 368.768367][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 368.812739][ T30] audit: type=1400 audit(1779742143.712:597): avc: denied { write } for pid=9195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.953285][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.966122][ T30] audit: type=1400 audit(1779742143.832:598): avc: denied { write } for pid=9208 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.996141][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.017080][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.041868][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 369.042981][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.080515][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 369.086637][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 369.106335][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 369.123104][ T9197] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.143832][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.151249][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 369.349648][ T9214] 9pnet_fd: Insufficient options for proto=fd [ 369.365171][ T5704] gspca_sonixj: reg_r err -110 [ 369.389664][ T5704] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 369.424811][ T30] audit: type=1400 audit(1779742144.266:599): avc: denied { name_bind } for pid=9196 comm="syz.2.809" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 369.482699][ T9197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.809'. [ 369.518274][ T30] audit: type=1400 audit(1779742144.303:600): avc: denied { append } for pid=9193 comm="syz.0.808" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 369.585708][ T9197] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 369.593711][ T9197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.809'. [ 369.621852][ T5703] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 369.649644][ T24] usb 3-1: USB disconnect, device number 46 [ 369.664644][ T9] usb 1-1: USB disconnect, device number 46 [ 369.773733][ T5704] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 369.798204][ T5703] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 369.798524][ T9230] syzkaller0: entered promiscuous mode [ 369.814734][ T5703] usb 2-1: config 1 has no interface number 0 [ 369.820176][ T9230] syzkaller0: entered allmulticast mode [ 369.823986][ T5703] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 369.837951][ T5703] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 369.857327][ T30] audit: type=1400 audit(1779742144.673:601): avc: denied { write } for pid=9213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.880412][ T5703] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.882641][ T5703] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 369.901300][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.910503][ T5703] usb 2-1: Product: syz [ 369.915447][ T5703] usb 2-1: Manufacturer: syz [ 369.920156][ T5703] usb 2-1: SerialNumber: syz [ 369.936899][ T9216] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 369.969297][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 369.982338][ T5704] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 370.004969][ T5704] usb 4-1: config 0 has no interface number 0 [ 370.006778][ T30] audit: type=1400 audit(1779742144.811:602): avc: denied { write } for pid=9234 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.018905][ T5704] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 370.058409][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.069107][ T5704] usb 4-1: Product: syz [ 370.073333][ T5704] usb 4-1: Manufacturer: syz [ 370.079784][ T5704] usb 4-1: SerialNumber: syz [ 370.102807][ T5704] usb 4-1: config 0 descriptor?? [ 370.118037][ T5704] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 370.171478][ T9216] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 370.346283][ T30] audit: type=1400 audit(1779742145.116:603): avc: denied { write } for pid=9239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.497216][ T5703] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0a:07 [ 370.520207][ T5704] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 370.538487][ T5704] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 370.563019][ T30] audit: type=1400 audit(1779742145.319:604): avc: denied { write } for pid=9253 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.001091][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'. [ 371.158158][ T9216] netlink: 14 bytes leftover after parsing attributes in process `syz.1.810'. [ 371.169916][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 371.170291][ T5794] usb 4-1: USB disconnect, device number 56 [ 371.209481][ T5794] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 371.390465][ T5703] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 371.426735][ T5794] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 371.431679][ T5703] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 371.463277][ T5794] quatech2 4-1:0.51: device disconnected [ 371.550269][ T5703] usb 2-1: USB disconnect, device number 35 [ 371.573885][ T5703] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 371.594152][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 371.597369][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 371.642894][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 371.759147][ T5703] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 371.873495][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 372.021670][ T30] audit: type=1400 audit(1779742146.668:605): avc: denied { write } for pid=9263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.047392][ T5794] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 372.069473][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.088840][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 372.126125][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.159815][ T9] usb 3-1: config 0 descriptor?? [ 372.187350][ T5704] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 372.981637][ T5794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.231589][ T5794] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 373.263280][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.288047][ T5794] usb 1-1: config 0 descriptor?? [ 373.304794][ T9293] fuse: Unknown parameter 'ro ' [ 373.355360][ T30] audit: type=1400 audit(1779742147.896:606): avc: denied { write } for pid=9292 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.371320][ T5704] usb 7-1: Using ep0 maxpacket: 32 [ 373.397863][ T5704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.429431][ T5704] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.469837][ T9] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 373.487095][ T5704] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 373.508198][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001D/input/input40 [ 373.516380][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.569009][ T5704] usb 7-1: Product: syz [ 373.582114][ T5704] usb 7-1: Manufacturer: syz [ 373.596275][ T5704] usb 7-1: SerialNumber: syz [ 373.637959][ T5704] snd-ua101 7-1:1.1: invalid bNumEndpoints [ 373.655563][ T5704] snd-ua101 7-1:1.0: invalid num_altsetting [ 373.779671][ T9] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 373.795840][ T5794] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 373.878559][ T5794] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001E/input/input41 [ 373.931563][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 373.940159][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 373.972617][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 374.045032][ T5794] keytouch 0003:0926:3333.001E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 374.656036][ T5794] usb 7-1: USB disconnect, device number 2 [ 375.064674][ T805] usb 3-1: USB disconnect, device number 47 [ 376.270828][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 376.279523][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 376.289773][ T24] usb 1-1: USB disconnect, device number 47 [ 376.294632][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 376.395625][ T5704] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 376.551879][ T5704] usb 4-1: device descriptor read/64, error -71 [ 376.613776][ T30] audit: type=1400 audit(1779742150.906:607): avc: denied { append } for pid=9314 comm="syz.2.827" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 376.642049][ T30] audit: type=1400 audit(1779742150.906:608): avc: denied { write } for pid=9314 comm="syz.2.827" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 377.244777][ T5704] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 377.385538][ T5704] usb 4-1: device descriptor read/64, error -71 [ 377.508833][ T5704] usb usb4-port1: attempt power cycle [ 377.720732][ T30] audit: type=1400 audit(1779742151.931:609): avc: denied { listen } for pid=9325 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 377.779018][ T9330] netlink: 'syz.0.829': attribute type 2 has an invalid length. [ 377.791431][ T30] audit: type=1400 audit(1779742151.931:610): avc: denied { accept } for pid=9325 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 377.824821][ T30] audit: type=1400 audit(1779742152.033:611): avc: denied { connect } for pid=9325 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 377.872948][ T30] audit: type=1400 audit(1779742152.070:612): avc: denied { create } for pid=9335 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 377.959556][ T805] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 378.113789][ T5794] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 378.143701][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 378.157152][ T805] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 378.165875][ T805] usb 2-1: config 2 has no interface number 0 [ 378.188243][ T805] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 378.213474][ T805] usb 2-1: config 2 interface 88 has no altsetting 0 [ 378.263435][ T805] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 378.276929][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.295348][ T5794] usb 7-1: Using ep0 maxpacket: 32 [ 378.309059][ T805] usb 2-1: Product: syz [ 378.322321][ T5794] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 378.331289][ T805] usb 2-1: Manufacturer: syz [ 378.339931][ T805] usb 2-1: SerialNumber: syz [ 378.344682][ T5794] usb 7-1: config 0 has no interface number 0 [ 378.366305][ T5794] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 378.390057][ T9329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.399037][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.674631][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.678605][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 378.712319][ T9329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.728654][ T5794] usb 7-1: Product: syz [ 378.744541][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 378.758359][ T5794] usb 7-1: Manufacturer: syz [ 378.785687][ T5794] usb 7-1: SerialNumber: syz [ 378.857450][ T5794] usb 7-1: config 0 descriptor?? [ 378.891369][ T5794] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 378.937730][ T30] audit: type=1400 audit(1779742153.058:613): avc: denied { write } for pid=9339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.122861][ T5794] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 379.145473][ T9359] input: syz0 as /devices/virtual/input/input42 [ 379.159689][ T30] audit: type=1400 audit(1779742153.261:614): avc: denied { write } for pid=9358 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.184603][ T9359] netlink: 140 bytes leftover after parsing attributes in process `syz.3.834'. [ 379.197248][ T5794] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 380.369549][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.377585][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.516212][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.830'. [ 380.727872][ T9377] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 380.740939][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 380.742901][ T5704] usb 7-1: USB disconnect, device number 3 [ 380.762709][ T9380] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 380.791390][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 380.835802][ T805] asix 2-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 380.856457][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 380.915741][ T5704] quatech2 7-1:0.51: device disconnected [ 381.064706][ T805] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 381.092565][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 381.101687][ T805] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 381.125731][ T9392] bond_slave_1: entered promiscuous mode [ 381.136369][ T30] audit: type=1400 audit(1779742155.089:615): avc: denied { write } for pid=9367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.142434][ T805] asix 2-1:2.88: probe with driver asix failed with error -71 [ 381.168891][ T9392] bond_slave_1: left promiscuous mode [ 381.238573][ T805] usb 2-1: USB disconnect, device number 36 [ 381.244795][ T9374] wg1 speed is unknown, defaulting to 1000 [ 381.392206][ T30] audit: type=1400 audit(1779742155.320:616): avc: denied { write } for pid=9395 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.261998][ T9409] EXT4-fs: Conflicting test_dummy_encryption options [ 382.467447][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 382.939601][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 383.028898][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 383.147813][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 383.162308][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 383.177708][ T10] usb 2-1: config 0 has no interface number 0 [ 383.192246][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 383.201696][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.204919][ T9] usb 7-1: device descriptor read/64, error -71 [ 383.219496][ T10] usb 2-1: Product: syz [ 383.223883][ T10] usb 2-1: Manufacturer: syz [ 383.228720][ T10] usb 2-1: SerialNumber: syz [ 383.280308][ T10] usb 2-1: config 0 descriptor?? [ 383.314842][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 384.483850][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 384.518268][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 384.539364][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 385.286286][ T9435] FAULT_FLAG_ALLOW_RETRY missing 801 [ 385.293053][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.0.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.293086][ T9435] Tainted: [L]=SOFTLOCKUP [ 385.293093][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.293104][ T9435] Call Trace: [ 385.293111][ T9435] [ 385.293118][ T9435] dump_stack_lvl+0x100/0x190 [ 385.293149][ T9435] handle_userfault.cold+0x56/0x69 [ 385.293176][ T9435] ? do_raw_spin_unlock+0x145/0x1e0 [ 385.293208][ T9435] ? _raw_spin_unlock+0x28/0x50 [ 385.293235][ T9435] ? __free_frozen_pages+0x59e/0x1040 [ 385.293261][ T9435] ? __pfx_handle_userfault+0x10/0x10 [ 385.293300][ T9435] ? rcu_read_unlock+0x2d/0xb0 [ 385.293329][ T9435] ? rcu_read_unlock+0x2d/0xb0 [ 385.293362][ T9435] do_anonymous_page+0x1a83/0x2050 [ 385.293401][ T9435] __handle_mm_fault+0x1d2c/0x2a00 [ 385.293431][ T9435] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 385.293463][ T9435] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.293490][ T9435] ? pte_offset_map_lock+0x174/0x320 [ 385.293510][ T9435] ? find_held_lock+0x2b/0x80 [ 385.293537][ T9435] ? follow_page_pte+0x4d0/0x13f0 [ 385.293565][ T9435] handle_mm_fault+0x36d/0xa20 [ 385.293598][ T9435] __get_user_pages+0x1178/0x32a0 [ 385.293631][ T9435] ? __pfx___get_user_pages+0x10/0x10 [ 385.293660][ T9435] populate_vma_page_range+0x267/0x3f0 [ 385.293687][ T9435] ? __pfx_populate_vma_page_range+0x10/0x10 [ 385.293715][ T9435] ? vma_set_page_prot+0xb1/0x120 [ 385.293740][ T9435] mprotect_fixup+0x955/0xe30 [ 385.293774][ T9435] ? __pfx_mprotect_fixup+0x10/0x10 [ 385.293814][ T9435] ? selinux_file_mprotect+0x18c/0x610 [ 385.293848][ T9435] do_mprotect_pkey+0xa4b/0xef0 [ 385.293884][ T9435] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 385.293943][ T9435] ? kasan_quarantine_put+0x104/0x240 [ 385.293974][ T9435] ? lockdep_hardirqs_on+0x78/0x100 [ 385.294026][ T9435] __x64_sys_mprotect+0x78/0xc0 [ 385.294054][ T9435] ? lockdep_hardirqs_on+0x78/0x100 [ 385.294082][ T9435] do_syscall_64+0x10b/0x860 [ 385.294110][ T9435] ? clear_bhb_loop+0x40/0x90 [ 385.294134][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.294154][ T9435] RIP: 0033:0x7f049979ce59 [ 385.294171][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.294189][ T9435] RSP: 002b:00007f049a644028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 385.294209][ T9435] RAX: ffffffffffffffda RBX: 00007f0499a16180 RCX: 00007f049979ce59 [ 385.294221][ T9435] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 385.294231][ T9435] RBP: 00007f0499832d6f R08: 0000000000000000 R09: 0000000000000000 [ 385.294242][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.294253][ T9435] R13: 00007f0499a16218 R14: 00007f0499a16180 R15: 00007ffe1efa4658 [ 385.294280][ T9435] [ 385.876164][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 385.885120][ T805] usb 2-1: USB disconnect, device number 37 [ 385.989223][ T805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 386.076882][ T805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 386.337632][ T9444] wg1 speed is unknown, defaulting to 1000 [ 386.358109][ T805] quatech2 2-1:0.51: device disconnected [ 386.483518][ T5731] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 386.654259][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 386.668045][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 386.681580][ T5731] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.696786][ T5731] usb 4-1: config 0 has no interface number 0 [ 386.713051][ T9454] input: syz0 as /devices/virtual/input/input43 [ 386.731466][ T5731] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.813925][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.822238][ T5731] usb 4-1: Product: syz [ 386.826441][ T5731] usb 4-1: Manufacturer: syz [ 386.830489][ T9454] netlink: 140 bytes leftover after parsing attributes in process `syz.2.847'. [ 386.831377][ T5731] usb 4-1: SerialNumber: syz [ 386.861465][ T5731] usb 4-1: config 0 descriptor?? [ 386.883625][ T9] usb usb7-port1: attempt power cycle [ 386.897131][ T5731] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 387.067548][ T5704] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 387.114409][ T5731] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 387.130110][ T5731] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 387.252071][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.314749][ T5704] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 387.380308][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.423596][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.851'. [ 387.446397][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 387.446875][ T24] usb 4-1: USB disconnect, device number 60 [ 387.471341][ T5704] usb 2-1: config 0 descriptor?? [ 387.560253][ T5704] pwc: Askey VC010 type 2 USB webcam detected. [ 387.609489][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 387.615227][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 387.652889][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 387.667577][ T24] quatech2 4-1:0.51: device disconnected [ 387.674161][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.691495][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 387.702178][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.714744][ T9] usb 7-1: config 0 descriptor?? [ 387.736705][ T5704] pwc: recv_control_msg error -32 req 02 val 2b00 [ 387.998365][ T5704] pwc: recv_control_msg error -71 req 02 val 2700 [ 388.030732][ T5704] pwc: recv_control_msg error -71 req 02 val 2c00 [ 388.109212][ T5704] pwc: recv_control_msg error -71 req 04 val 1000 [ 388.124601][ T5704] pwc: recv_control_msg error -71 req 04 val 1300 [ 388.142665][ T5704] pwc: recv_control_msg error -71 req 04 val 1400 [ 388.178179][ T9] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 388.178897][ T5704] pwc: recv_control_msg error -71 req 02 val 2000 [ 388.252783][ T5704] pwc: recv_control_msg error -71 req 02 val 2100 [ 388.262897][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001F/input/input44 [ 388.298892][ T5704] pwc: recv_control_msg error -71 req 04 val 1500 [ 388.336704][ T5704] pwc: recv_control_msg error -71 req 02 val 2500 [ 388.373534][ T5704] pwc: recv_control_msg error -71 req 02 val 2400 [ 388.487025][ T5704] pwc: recv_control_msg error -71 req 02 val 2600 [ 388.526108][ T5704] pwc: recv_control_msg error -71 req 02 val 2900 [ 388.542888][ T5704] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.568391][ T5704] pwc: recv_control_msg error -71 req 04 val 1100 [ 388.589796][ T5704] pwc: recv_control_msg error -71 req 04 val 1200 [ 388.628663][ T5704] pwc: Registered as video103. [ 388.661729][ T5704] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 389.134761][ T9] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 389.173925][ T5704] usb 2-1: USB disconnect, device number 38 [ 389.279711][ T9] usb 7-1: USB disconnect, device number 6 [ 389.438825][ T9493] fido_id[9493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 389.568223][ T9496] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 389.652982][ T9496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.732430][ T9497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9497 comm=syz.3.865 [ 389.826899][ T9500] bond2: (slave gretap0): making interface the new active one [ 389.851298][ T5704] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 389.869676][ T9500] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 389.924528][ T5703] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 390.040863][ T5704] usb 2-1: device descriptor read/64, error -71 [ 390.079785][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 390.104658][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 390.124599][ T5703] usb 3-1: config 0 has no interfaces? [ 390.138390][ T5703] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 390.148062][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.158515][ T5703] usb 3-1: Product: syz [ 390.163873][ T5703] usb 3-1: Manufacturer: syz [ 390.172100][ T5703] usb 3-1: SerialNumber: syz [ 390.185029][ T5703] usb 3-1: config 0 descriptor?? [ 390.368990][ T5704] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 390.528689][ T5704] usb 2-1: device descriptor read/64, error -71 [ 390.588513][ T5731] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 390.678786][ T5704] usb usb2-port1: attempt power cycle [ 390.817576][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.853846][ T5731] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 390.890158][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.936478][ T5731] usb 4-1: config 0 descriptor?? [ 391.081834][ T5704] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 391.135771][ T5704] usb 2-1: device descriptor read/8, error -71 [ 391.350201][ T5703] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 391.393328][ T5703] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 391.410754][ T5703] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 391.418576][ T5731] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 391.441739][ T5704] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 391.470593][ T5731] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0021/input/input46 [ 391.490163][ T5703] hid-generic 0003:0004:0000.0020: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 391.656976][ T5704] usb 2-1: device descriptor read/8, error -71 [ 391.722885][ T5731] keytouch 0003:0926:3333.0021: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 391.819434][ T5704] usb usb2-port1: unable to enumerate USB device [ 391.963637][ T9521] program syz.6.871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.404174][ T805] usb 4-1: USB disconnect, device number 61 [ 393.157156][ T5703] usb 3-1: USB disconnect, device number 48 [ 393.384647][ T805] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 393.448478][ T30] audit: type=1400 audit(1779742166.917:617): avc: denied { firmware_load } for pid=9543 comm="syz.0.880" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 393.570909][ T30] audit: type=1400 audit(1779742167.038:618): avc: denied { append } for pid=9554 comm="syz.6.881" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 393.595805][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 393.630944][ T805] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 393.802442][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.881'. [ 393.832002][ T805] usb 2-1: config 0 has no interface number 0 [ 393.842964][ T805] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 393.853319][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.861681][ T805] usb 2-1: Product: syz [ 393.866196][ T805] usb 2-1: Manufacturer: syz [ 393.871001][ T805] usb 2-1: SerialNumber: syz [ 393.879272][ T805] usb 2-1: config 0 descriptor?? [ 393.894679][ T805] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 394.172981][ T805] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 394.188720][ T805] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 394.305915][ T9551] syz.0.880 (9551) used greatest stack depth: 19720 bytes left [ 394.718907][ T9537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 394.771847][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 394.772191][ T5703] usb 2-1: USB disconnect, device number 43 [ 394.798013][ T5703] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 394.866453][ T5703] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 394.880034][ T5703] quatech2 2-1:0.51: device disconnected [ 394.994232][ T5704] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 395.168637][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 395.197123][ T5704] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 395.217439][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.267060][ T5704] usb 3-1: config 0 descriptor?? [ 395.371038][ T9575] input: syz1 as /devices/virtual/input/input47 [ 395.414506][ T9575] FAULT_INJECTION: forcing a failure. [ 395.414506][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.432499][ T9575] CPU: 0 UID: 0 PID: 9575 Comm: syz.6.886 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.432527][ T9575] Tainted: [L]=SOFTLOCKUP [ 395.432532][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.432542][ T9575] Call Trace: [ 395.432548][ T9575] [ 395.432554][ T9575] dump_stack_lvl+0x100/0x190 [ 395.432580][ T9575] should_fail_ex.cold+0x5/0xa [ 395.432603][ T9575] _copy_from_user+0x2e/0xd0 [ 395.432628][ T9575] input_event_from_user+0x123/0x310 [ 395.432641][ T9575] ? __pfx_input_event_from_user+0x10/0x10 [ 395.432652][ T9575] ? rcu_is_watching+0x12/0xc0 [ 395.432672][ T9575] uinput_write+0xac8/0x10e0 [ 395.432693][ T9575] ? __pfx_uinput_write+0x10/0x10 [ 395.432716][ T9575] ? __pfx_uinput_write+0x10/0x10 [ 395.432744][ T9575] vfs_write+0x2aa/0x1070 [ 395.432763][ T9575] ? __pfx_uinput_write+0x10/0x10 [ 395.432779][ T9575] ? __pfx_vfs_write+0x10/0x10 [ 395.432790][ T9575] ? find_held_lock+0x2b/0x80 [ 395.432800][ T9575] ? __fget_files+0x215/0x3d0 [ 395.432825][ T9575] ? __fget_files+0x215/0x3d0 [ 395.432853][ T9575] ? __fget_files+0x21f/0x3d0 [ 395.432881][ T9575] ksys_write+0x1f8/0x250 [ 395.432899][ T9575] ? __pfx_ksys_write+0x10/0x10 [ 395.432918][ T9575] ? rcu_is_watching+0x12/0xc0 [ 395.432936][ T9575] do_syscall_64+0x10b/0x860 [ 395.432951][ T9575] ? clear_bhb_loop+0x40/0x90 [ 395.432964][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.432975][ T9575] RIP: 0033:0x7fb97c99ce59 [ 395.432989][ T9575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.433005][ T9575] RSP: 002b:00007fb97d8de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.433021][ T9575] RAX: ffffffffffffffda RBX: 00007fb97cc16090 RCX: 00007fb97c99ce59 [ 395.433032][ T9575] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 0000000000000005 [ 395.433041][ T9575] RBP: 00007fb97d8de090 R08: 0000000000000000 R09: 0000000000000000 [ 395.433051][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.433060][ T9575] R13: 00007fb97cc16128 R14: 00007fb97cc16090 R15: 00007ffc7fb4e3a8 [ 395.433078][ T9575] [ 395.750895][ T5704] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 395.830854][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.894823][ T5704] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 397.964878][ T5704] usb 3-1: media controller created [ 399.388442][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.548413][ T5704] az6027: usb out operation failed. (-71) [ 399.582931][ T5704] az6027: usb out operation failed. (-71) [ 399.591917][ T5704] stb0899_attach: Driver disabled by Kconfig [ 399.598257][ T5704] az6027: no front-end attached [ 399.598257][ T5704] [ 399.608861][ T5704] az6027: usb out operation failed. (-71) [ 399.711725][ T5704] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 399.737521][ T5704] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 400.172884][ T5704] dvb-usb: schedule remote query interval to 400 msecs. [ 400.187574][ T5704] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 400.209586][ T5704] usb 3-1: USB disconnect, device number 49 [ 400.345269][ T5704] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 400.383724][ T9608] Set syz1 is full, maxelem 65536 reached [ 400.617960][ T9613] input: syz0 as /devices/virtual/input/input49 [ 400.646050][ T9613] netlink: 140 bytes leftover after parsing attributes in process `syz.2.898'. [ 400.869210][ T805] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 401.042179][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 401.054269][ T805] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.073455][ T805] usb 2-1: config 0 has no interface number 0 [ 401.092610][ T805] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.096170][ T5704] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 401.117898][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.127618][ T805] usb 2-1: Product: syz [ 401.136985][ T805] usb 2-1: Manufacturer: syz [ 401.142459][ T805] usb 2-1: SerialNumber: syz [ 401.153268][ T805] usb 2-1: config 0 descriptor?? [ 401.163490][ T805] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 401.236878][ T5731] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 401.285072][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.334278][ T5718] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 401.431795][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 401.456069][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.484385][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.525755][ T805] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 401.546097][ T5731] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 401.576350][ T5731] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 401.601122][ T5731] usb 1-1: Manufacturer: syz [ 401.612368][ T805] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 401.671859][ T5731] usb 1-1: config 0 descriptor?? [ 401.699995][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 401.946998][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 401.975000][ T9] usb 2-1: USB disconnect, device number 44 [ 401.986377][ T9630] SELinux: ebitmap: truncated map [ 402.349311][ T9630] SELinux: failed to load policy [ 402.734016][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 402.837140][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.917319][ T5731] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0022/input/input50 [ 402.935916][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 402.936817][ T9] quatech2 2-1:0.51: device disconnected [ 403.102201][ T5704] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 403.111447][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.120971][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.131928][ T5718] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.132426][ T5731] creative-sb0540 0003:041E:3100.0022: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 403.147113][ T5718] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 403.166574][ T5704] usb 3-1: config 0 descriptor?? [ 403.171778][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.199795][ T5718] usb 4-1: Product: syz [ 403.206617][ T5718] usb 4-1: Manufacturer: syz [ 403.211378][ T5718] usb 4-1: SerialNumber: syz [ 403.492267][ T5731] usb 1-1: USB disconnect, device number 48 [ 403.526513][ T5718] snd-ua101 4-1:1.1: invalid bNumEndpoints [ 403.539547][ T5718] snd-ua101 4-1:1.0: invalid num_altsetting [ 403.752804][ T5718] usb 4-1: USB disconnect, device number 62 [ 403.827021][ T5704] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 403.845074][ T9636] fido_id[9636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 403.880607][ T5704] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input51 [ 404.196755][ T5704] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 404.283046][ T9643] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 404.293851][ T9643] SELinux: failed to load policy [ 405.394678][ T805] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 405.568127][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 405.575523][ T805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.591070][ T805] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 405.599198][ T5704] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 405.600585][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.616700][ T805] usb 1-1: Product: syz [ 405.622453][ T805] usb 1-1: Manufacturer: syz [ 405.628072][ T805] usb 1-1: SerialNumber: syz [ 405.645710][ T805] usb 1-1: config 0 descriptor?? [ 405.655630][ T805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.712205][ T5718] usb 3-1: USB disconnect, device number 50 [ 405.773813][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 405.798089][ T5704] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 405.826235][ T5704] usb 2-1: config 0 has no interface number 0 [ 405.834947][ T5704] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 405.848007][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.853600][ T805] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 405.856181][ T5704] usb 2-1: Product: syz [ 405.869276][ T5704] usb 2-1: Manufacturer: syz [ 405.884882][ T5704] usb 2-1: SerialNumber: syz [ 405.920276][ T5704] usb 2-1: config 0 descriptor?? [ 405.937427][ T5704] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 406.115644][ T8238] udevd[8238]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.437017][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 406.453222][ T5704] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 406.481872][ T5704] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 406.491240][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 406.547099][ T5704] usb 2-1: USB disconnect, device number 45 [ 406.577416][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 406.688833][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 406.712074][ T5704] quatech2 2-1:0.51: device disconnected [ 406.722512][ T9679] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 406.841705][ T9679] input: syz0 as /devices/virtual/input/input52 [ 407.097739][ T9682] netlink: 52 bytes leftover after parsing attributes in process `syz.3.919'. [ 407.130313][ T30] audit: type=1326 audit(1779742179.586:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 407.147807][ T9682] netlink: 52 bytes leftover after parsing attributes in process `syz.3.919'. [ 407.170152][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 407.208949][ T30] audit: type=1326 audit(1779742179.586:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 407.270616][ T30] audit: type=1326 audit(1779742179.586:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 407.436606][ T30] audit: type=1326 audit(1779742179.586:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.023399][ T30] audit: type=1326 audit(1779742179.586:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.077577][ T30] audit: type=1326 audit(1779742179.586:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.174338][ T30] audit: type=1326 audit(1779742179.586:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.224897][ T30] audit: type=1326 audit(1779742179.586:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.251356][ T30] audit: type=1326 audit(1779742179.586:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.279844][ T30] audit: type=1326 audit(1779742179.586:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.6.920" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97c99ce59 code=0x7ffc0000 [ 408.404747][ T5718] usb 1-1: USB disconnect, device number 49 [ 408.426497][ T805] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 408.469137][ T5704] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 408.606122][ T805] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 408.626499][ T805] usb 4-1: config 1 has no interface number 0 [ 408.651397][ T805] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 408.697896][ T805] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 408.727075][ T805] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.773426][ T805] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 408.783037][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.810400][ T805] usb 4-1: Product: syz [ 408.824047][ T805] usb 4-1: Manufacturer: syz [ 408.838364][ T805] usb 4-1: SerialNumber: syz [ 408.895890][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.896025][ T9693] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.157888][ T9701] SELinux: ebitmap: truncated map [ 409.532093][ T9701] SELinux: failed to load policy [ 409.547918][ T9693] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 410.160002][ T5704] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 410.179590][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.192957][ T805] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0b:07 [ 410.213291][ T5704] usb 3-1: config 0 descriptor?? [ 410.435746][ T805] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 410.442481][ T805] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 410.492689][ T805] usb 4-1: USB disconnect, device number 63 [ 410.540134][ T805] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 410.689965][ T805] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 410.702280][ T5704] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 410.731355][ T5704] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input53 [ 410.861616][ T5704] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 411.112228][ T5718] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 411.179085][ T9725] 0{X: left allmulticast mode [ 411.305389][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 411.358587][ T5718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.358671][ T5718] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.402185][ T24] [ 411.402196][ T24] ====================================================== [ 411.402203][ T24] WARNING: possible circular locking dependency detected [ 411.402217][ T24] syzkaller #0 Tainted: G L [ 411.402228][ T24] ------------------------------------------------------ [ 411.402234][ T24] kworker/1:0/24 is trying to acquire lock: [ 411.402244][ T24] ffff88813feba0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 411.402294][ T24] [ 411.402294][ T24] but task is already holding lock: [ 411.402299][ T24] ffffffff8e7d1ba0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 411.402336][ T24] [ 411.402336][ T24] which lock already depends on the new lock. [ 411.402336][ T24] [ 411.402342][ T24] [ 411.402342][ T24] the existing dependency chain (in reverse order) is: [ 411.402348][ T24] [ 411.402348][ T24] -> #2 (console_lock){+.+.}-{0:0}: [ 411.402372][ T24] console_lock+0x7a/0xa0 [ 411.402395][ T24] con_flush_chars+0x63/0x90 [ 411.402415][ T24] n_tty_write+0xc74/0x11c0 [ 411.402431][ T24] file_tty_write.isra.0+0x4d2/0x890 [ 411.402454][ T24] vfs_write+0x6ac/0x1070 [ 411.402472][ T24] ksys_write+0x12a/0x250 [ 411.402489][ T24] do_syscall_64+0x10b/0x860 [ 411.402514][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.402532][ T24] [ 411.402532][ T24] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 411.402555][ T24] down_write+0x8b/0x1f0 [ 411.402571][ T24] n_tty_flush_buffer+0x23/0x1d0 [ 411.402587][ T24] tty_buffer_flush+0x239/0x310 [ 411.402609][ T24] tty_ldisc_flush+0x68/0xf0 [ 411.402628][ T24] tty_port_close_start+0x323/0x510 [ 411.402653][ T24] tty_port_close+0x26/0x180 [ 411.402678][ T24] uart_close+0x7d/0x250 [ 411.402697][ T24] tty_release+0x40e/0x1300 [ 411.402718][ T24] __fput+0x3ff/0xb50 [ 411.402740][ T24] task_work_run+0x150/0x240 [ 411.402761][ T24] do_exit+0x951/0x2af0 [ 411.402778][ T24] do_group_exit+0xd5/0x2a0 [ 411.402795][ T24] get_signal+0x20ff/0x2210 [ 411.402818][ T24] arch_do_signal_or_restart+0x91/0x7e0 [ 411.402851][ T24] exit_to_user_mode_loop+0x8b/0x4f0 [ 411.402873][ T24] do_syscall_64+0x706/0x860 [ 411.402897][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.402913][ T24] [ 411.402913][ T24] -> #0 (&buf->lock){+.+.}-{4:4}: [ 411.402936][ T24] __lock_acquire+0x14b8/0x2630 [ 411.402958][ T24] lock_acquire+0x1b1/0x370 [ 411.402977][ T24] __mutex_lock+0x1a4/0x1b10 [ 411.402991][ T24] tty_buffer_flush+0x72/0x310 [ 411.403013][ T24] tty_ldisc_flush+0x68/0xf0 [ 411.403032][ T24] __do_SAK+0x38f/0x4d0 [ 411.403055][ T24] vc_SAK+0x7f/0x320 [ 411.403070][ T24] process_one_work+0xa0e/0x1980 [ 411.403092][ T24] worker_thread+0x5ef/0xe50 [ 411.403123][ T24] kthread+0x370/0x450 [ 411.403141][ T24] ret_from_fork+0x72b/0xd50 [ 411.403161][ T24] ret_from_fork_asm+0x1a/0x30 [ 411.403186][ T24] [ 411.403186][ T24] other info that might help us debug this: [ 411.403186][ T24] [ 411.403191][ T24] Chain exists of: [ 411.403191][ T24] &buf->lock --> &tty->termios_rwsem --> console_lock [ 411.403191][ T24] [ 411.403220][ T24] Possible unsafe locking scenario: [ 411.403220][ T24] [ 411.403225][ T24] CPU0 CPU1 [ 411.403230][ T24] ---- ---- [ 411.403235][ T24] lock(console_lock); [ 411.403247][ T24] lock(&tty->termios_rwsem); [ 411.403260][ T24] lock(console_lock); [ 411.403272][ T24] lock(&buf->lock); [ 411.403284][ T24] [ 411.403284][ T24] *** DEADLOCK *** [ 411.403284][ T24] [ 411.403288][ T24] 4 locks held by kworker/1:0/24: [ 411.403298][ T24] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 411.403345][ T24] #1: ffffc900001e7d08 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 411.403391][ T24] #2: ffffffff8e7d1ba0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320 [ 411.403432][ T24] #3: ffff888074e7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xf0 [ 411.403477][ T24] [ 411.403477][ T24] stack backtrace: [ 411.403488][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.403513][ T24] Tainted: [L]=SOFTLOCKUP [ 411.403519][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.403531][ T24] Workqueue: events vc_SAK [ 411.403548][ T24] Call Trace: [ 411.403554][ T24] [ 411.403561][ T24] dump_stack_lvl+0x100/0x190 [ 411.403580][ T24] print_circular_bug.cold+0x178/0x1c7 [ 411.403607][ T24] check_noncircular+0x146/0x160 [ 411.403630][ T24] __lock_acquire+0x14b8/0x2630 [ 411.403656][ T24] lock_acquire+0x1b1/0x370 [ 411.403677][ T24] ? tty_buffer_flush+0x72/0x310 [ 411.403701][ T24] ? __pfx___might_resched+0x10/0x10 [ 411.403727][ T24] ? rcu_is_watching+0x12/0xc0 [ 411.403756][ T24] __mutex_lock+0x1a4/0x1b10 [ 411.403770][ T24] ? tty_buffer_flush+0x72/0x310 [ 411.403793][ T24] ? tty_buffer_flush+0x72/0x310 [ 411.403817][ T24] ? __pfx___mutex_lock+0x10/0x10 [ 411.403843][ T24] ? ldsem_down_read_trylock+0x115/0x190 [ 411.403862][ T24] ? tty_buffer_flush+0x72/0x310 [ 411.403884][ T24] tty_buffer_flush+0x72/0x310 [ 411.403909][ T24] tty_ldisc_flush+0x68/0xf0 [ 411.403930][ T24] __do_SAK+0x38f/0x4d0 [ 411.403954][ T24] ? mark_held_locks+0x40/0x70 [ 411.403979][ T24] vc_SAK+0x7f/0x320 [ 411.403996][ T24] process_one_work+0xa0e/0x1980 [ 411.404022][ T24] ? __pfx_process_one_work+0x10/0x10 [ 411.404048][ T24] ? __pfx_vc_SAK+0x10/0x10 [ 411.404066][ T24] worker_thread+0x5ef/0xe50 [ 411.404092][ T24] ? kthread+0x13a/0x450 [ 411.404111][ T24] ? __pfx_worker_thread+0x10/0x10 [ 411.404132][ T24] kthread+0x370/0x450 [ 411.404151][ T24] ? __pfx_kthread+0x10/0x10 [ 411.404172][ T24] ret_from_fork+0x72b/0xd50 [ 411.404193][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 411.404216][ T24] ? __switch_to+0x800/0x1100 [ 411.404241][ T24] ? __pfx_kthread+0x10/0x10 [ 411.404261][ T24] ret_from_fork_asm+0x1a/0x30 [ 411.404291][ T24] [ 411.529478][ T9725] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 411.533949][ T5718] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 411.533977][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.533994][ T5718] usb 1-1: Product: syz [ 411.534008][ T5718] usb 1-1: Manufacturer: syz [ 411.534045][ T5718] usb 1-1: SerialNumber: syz [ 411.566249][ T5718] snd-ua101 1-1:1.1: invalid bNumEndpoints [ 411.566314][ T5718] snd-ua101 1-1:1.0: invalid num_altsetting [ 411.675413][ T9728] SELinux: ebitmap: truncated map [ 411.779066][ T804] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 411.904668][ T805] usb 1-1: USB disconnect, device number 50 [ 411.927159][ T9728] SELinux: failed to load policy [ 411.935519][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 411.944414][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.953988][ T804] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 411.954053][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.954076][ T804] usb 4-1: Product: syz [ 411.954095][ T804] usb 4-1: Manufacturer: syz [ 411.954126][ T804] usb 4-1: SerialNumber: syz [ 411.983155][ T804] usb 4-1: config 0 descriptor?? [ 411.994192][ T8238] udevd[8238]: setting owner of /dev/bus/usb/001/050 to uid=0, gid=0 failed: No such file or directory [ 412.011639][ T804] cdc_ether 4-1:0.0: skipping garbage [ 412.011731][ T804] cdc_ether 4-1:0.0: bad CDC descriptors [ 412.019907][ T804] usb 4-1: unsupported MDLM descriptors [ 412.020712][ T804] cdc_acm 4-1:0.0: skipping garbage [ 412.759316][ T9725] netlink: 64 bytes leftover after parsing attributes in process `syz.3.935'. [ 412.795322][ T9725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.935'. [ 412.817343][ T804] usb 3-1: USB disconnect, device number 51 [ 413.035847][ T805] usb 4-1: USB disconnect, device number 64 [ 413.119501][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 413.119517][ T30] audit: type=1400 audit(1779742185.115:642): avc: denied { bind } for pid=9741 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 413.175936][ T9744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.340579][ T9748] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 413.343344][ T9748] input: syz0 as /devices/virtual/input/input54 [ 413.594043][ T9750] input: syz0 as /devices/virtual/input/input55 [ 413.600964][ T9750] netlink: 140 bytes leftover after parsing attributes in process `syz.0.942'. [ 413.625283][ T30] audit: type=1400 audit(1779742185.586:643): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 413.764478][ T30] audit: type=1400 audit(1779742185.706:644): avc: denied { setopt } for pid=9760 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.765045][ T9762] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 413.823496][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 414.004274][ T804] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 414.170475][ T804] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 414.170527][ T804] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.170555][ T804] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 414.170595][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.175340][ T804] hub 2-1:4.0: USB hub found [ 414.396203][ T804] hub 2-1:4.0: 2 ports detected [ 414.396243][ T804] usb 2-1: selecting invalid altsetting 1 [ 414.396259][ T804] hub 2-1:4.0: Using single TT (err -22) [ 414.698716][ T9770] syzkaller0: entered promiscuous mode [ 414.698731][ T9770] syzkaller0: entered allmulticast mode [ 414.831958][ T9757] netlink: 128 bytes leftover after parsing attributes in process `syz.1.945'. [ 414.832001][ T9757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.838668][ T804] usb 2-1: USB disconnect, device number 46 [ 415.533481][ T9773] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 415.562190][ T9773] input: syz0 as /devices/virtual/input/input56 [ 415.799525][ T9775] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 415.799759][ T5703] wg1 speed is unknown, defaulting to 1000 [ 417.026174][ T30] audit: type=1400 audit(1779742188.716:645): avc: denied { write } for pid=9777 comm="syz.3.951" path="socket:[28581]" dev="sockfs" ino=28581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.026577][ T30] audit: type=1400 audit(1779742188.725:646): avc: denied { accept } for pid=9777 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.027260][ T9778] netlink: 'syz.3.951': attribute type 21 has an invalid length. [ 417.027271][ T9778] netlink: 128 bytes leftover after parsing attributes in process `syz.3.951'. [ 417.027301][ T9778] netlink: 3 bytes leftover after parsing attributes in process `syz.3.951'. [ 418.041268][ T9786] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 418.048404][ T9786] input: syz0 as /devices/virtual/input/input57 [ 418.510288][ T5703] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 418.672812][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 418.674291][ T5703] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 418.674306][ T5703] usb 4-1: config 2 has no interface number 0 [ 418.674326][ T5703] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 418.674340][ T5703] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.674352][ T5703] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 418.674365][ T5703] usb 4-1: config 2 interface 88 has no altsetting 0 [ 418.675841][ T5703] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 418.675856][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.675866][ T5703] usb 4-1: Product: syz [ 418.675875][ T5703] usb 4-1: Manufacturer: syz [ 418.675883][ T5703] usb 4-1: SerialNumber: syz [ 418.677331][ T9788] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.678614][ T5703] asix 4-1:2.88: probe with driver asix failed with error -22 [ 421.509266][ T5718] usb 4-1: USB disconnect, device number 65 [ 421.868223][ T5718] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 422.030666][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 422.032051][ T5718] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 422.032075][ T5718] usb 4-1: config 0 has no interface number 0 [ 422.033541][ T5718] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 422.033564][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.033581][ T5718] usb 4-1: Product: syz [ 422.033594][ T5718] usb 4-1: Manufacturer: syz [ 422.033606][ T5718] usb 4-1: SerialNumber: syz [ 422.034303][ T5718] usb 4-1: config 0 descriptor?? [ 422.037088][ T5718] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 422.258751][ T5718] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 422.259896][ T5718] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 422.489223][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 422.489356][ T805] usb 4-1: USB disconnect, device number 66 [ 422.490296][ T805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 422.492913][ T805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 422.493211][ T805] quatech2 4-1:0.51: device disconnected [ 423.785403][ T5731] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 423.926239][ T5731] usb 4-1: device descriptor read/64, error -71 [ 424.186764][ T5731] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 424.327016][ T5731] usb 4-1: device descriptor read/64, error -71 [ 424.446690][ T5731] usb usb4-port1: attempt power cycle [ 424.814481][ T5731] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 424.836469][ T5731] usb 4-1: device descriptor read/8, error -71 [ 425.096065][ T5731] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 425.118120][ T5731] usb 4-1: device descriptor read/8, error -71 [ 425.237348][ T5731] usb usb4-port1: unable to enumerate USB device [ 426.696903][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 427.556842][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.557185][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.557377][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.558697][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.558861][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.563770][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.565305][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.565473][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.571304][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.574658][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.768441][ T9816] wg1 speed is unknown, defaulting to 1000 [ 427.834489][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.834543][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.834589][ T9816] bridge_slave_0: entered allmulticast mode [ 427.834936][ T9816] bridge_slave_0: entered promiscuous mode [ 427.835751][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.835808][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.835855][ T9816] bridge_slave_1: entered allmulticast mode [ 427.836270][ T9816] bridge_slave_1: entered promiscuous mode [ 427.845431][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.846406][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.852819][ T9816] team0: Port device team_slave_0 added [ 427.853829][ T9816] team0: Port device team_slave_1 added [ 427.860012][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.860025][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.860040][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.860530][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.860541][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.860561][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.870473][ T9816] hsr_slave_0: entered promiscuous mode [ 427.870842][ T9816] hsr_slave_1: entered promiscuous mode [ 427.871018][ T9816] debugfs: 'hsr0' already exists in 'hsr' [ 427.871032][ T9816] Cannot create hsr debugfs directory [ 427.912050][ T9816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 427.913617][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.914034][ T9816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 427.914999][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.915391][ T9816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 427.916407][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.916814][ T9816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 427.917817][ T9816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.926431][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.926465][ T9816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.926556][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.926583][ T9816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.943368][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.947675][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.947967][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.950797][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.953225][ T812] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.953267][ T812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.955472][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.955524][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.999424][ T5703] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 428.098388][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.164479][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.164519][ T5703] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.164538][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.165415][ T5703] usb 4-1: config 0 descriptor?? [ 428.183879][ T9816] veth0_vlan: entered promiscuous mode [ 428.187138][ T9816] veth1_vlan: entered promiscuous mode [ 428.197665][ T9816] veth0_macvtap: entered promiscuous mode [ 428.199277][ T9816] veth1_macvtap: entered promiscuous mode [ 428.204629][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.208838][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.211298][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.211392][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.211426][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.211452][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.222787][ T9816] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 428.233437][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.233456][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.235016][ T9816] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 428.245861][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.245880][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.529827][ T7541] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 428.606776][ T5703] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 428.607756][ T5703] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input58 [ 428.681667][ T5703] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 428.694010][ T7541] usb 8-1: Using ep0 maxpacket: 8 [ 428.695272][ T7541] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 428.695311][ T7541] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.695355][ T7541] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.695379][ T7541] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 428.695403][ T7541] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 428.695425][ T7541] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.695456][ T7541] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.695498][ T7541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.917168][ T7541] usb 8-1: usb_control_msg returned -32 [ 428.917201][ T7541] usbtmc 8-1:16.0: can't read capabilities [ 429.677637][ T30] audit: type=1400 audit(1779742200.394:647): avc: denied { write } for pid=9861 comm="syz.7.963" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 429.677844][ T30] audit: type=1400 audit(1779742200.394:648): avc: denied { open } for pid=9861 comm="syz.7.963" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 429.677864][ T9866] random: crng reseeded on system resumption [ 429.682132][ T9866] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 429.682149][ T9866] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 429.682166][ T9866] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 429.682202][ T9866] PM: hibernation: Basic memory bitmaps created [ 429.744288][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.744500][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.748702][ T9867] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 429.797283][ T5609] Bluetooth: hci5: command tx timeout [ 430.258817][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.259024][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.259185][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.259661][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.259989][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.277990][ T30] audit: type=1400 audit(1779742200.958:649): avc: denied { sys_module } for pid=9869 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 430.419581][ T9869] wg1 speed is unknown, defaulting to 1000 [ 430.507449][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.507501][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.507549][ T9869] bridge_slave_0: entered allmulticast mode [ 430.508066][ T9869] bridge_slave_0: entered promiscuous mode [ 430.509214][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.509275][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.509378][ T9869] bridge_slave_1: entered allmulticast mode [ 430.509844][ T9869] bridge_slave_1: entered promiscuous mode [ 430.519275][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.520545][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.529925][ T9869] team0: Port device team_slave_0 added [ 430.530952][ T9869] team0: Port device team_slave_1 added [ 430.538759][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.538772][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.538791][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.539405][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.539414][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.539432][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.554741][ T9869] hsr_slave_0: entered promiscuous mode [ 430.555176][ T9869] hsr_slave_1: entered promiscuous mode [ 430.555499][ T9869] debugfs: 'hsr0' already exists in 'hsr' [ 430.555513][ T9869] Cannot create hsr debugfs directory [ 430.614175][ T9869] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 430.615657][ T9869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.616119][ T9869] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 430.617388][ T9869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.617849][ T9869] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 430.619187][ T9869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.619628][ T9869] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 430.621123][ T9869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.629710][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.629750][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.629872][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.629900][ T9869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.653912][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.658446][ T812] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.658694][ T812] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.661593][ T9869] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.668380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.668451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.671040][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.671088][ T812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.847135][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.959424][ T9869] veth0_vlan: entered promiscuous mode [ 430.962040][ T9869] veth1_vlan: entered promiscuous mode [ 430.972243][ T9869] veth0_macvtap: entered promiscuous mode [ 430.973997][ T9869] veth1_macvtap: entered promiscuous mode [ 430.983206][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.986354][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.990501][ T812] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.990544][ T812] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.990615][ T812] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.990640][ T812] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.004834][ T9869] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 431.015748][ T804] usb 4-1: USB disconnect, device number 71 [ 431.017490][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.017508][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.022529][ T9869] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 431.049661][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.049680][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.146585][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 431.146834][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 431.147211][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 431.147719][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 431.147983][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 431.149095][ T30] audit: type=1400 audit(1779742201.761:650): avc: denied { getopt } for pid=9914 comm="syz.8.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 431.549723][ T9922] netlink: 'syz.3.970': attribute type 2 has an invalid length. [ 431.816648][ T9916] wg1 speed is unknown, defaulting to 1000 [ 432.053312][ T5609] Bluetooth: hci5: command tx timeout [ 432.484252][ T5609] Bluetooth: hci6: command tx timeout [ 432.942338][ T9943] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 433.044120][ T9943] input: syz0 as /devices/virtual/input/input59 [ 433.304175][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.304239][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.304342][ T9916] bridge_slave_0: entered allmulticast mode [ 433.304731][ T9916] bridge_slave_0: entered promiscuous mode [ 433.305685][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.305726][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.305779][ T9916] bridge_slave_1: entered allmulticast mode [ 433.306134][ T9916] bridge_slave_1: entered promiscuous mode [ 433.441901][ T9951] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 433.480107][ T5609] Bluetooth: hci7: command tx timeout [ 433.587844][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.603117][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.616636][ T9916] team0: Port device team_slave_0 added [ 433.618107][ T9916] team0: Port device team_slave_1 added [ 433.641168][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.641185][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.641204][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.641724][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.641735][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.641749][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.652659][ T9916] hsr_slave_0: entered promiscuous mode [ 433.652982][ T9916] hsr_slave_1: entered promiscuous mode [ 433.653739][ T9916] debugfs: 'hsr0' already exists in 'hsr' [ 433.653751][ T9916] Cannot create hsr debugfs directory [ 433.700754][ T9916] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 433.702268][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.702706][ T9916] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 433.703743][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.704141][ T9916] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 433.705247][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.705682][ T9916] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 433.706870][ T9916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.734073][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.738958][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.741672][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.741702][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.744186][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.744226][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.888599][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.902473][ T5794] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 433.978504][ T9916] veth0_vlan: entered promiscuous mode [ 433.980801][ T9916] veth1_vlan: entered promiscuous mode [ 433.989785][ T9916] veth0_macvtap: entered promiscuous mode [ 433.991196][ T9916] veth1_macvtap: entered promiscuous mode [ 433.995979][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.998239][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.002295][ T171] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.002329][ T171] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.002355][ T171] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.002380][ T171] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.064928][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 434.067889][ T5794] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 434.067908][ T5794] usb 4-1: config 2 has no interface number 0 [ 434.067925][ T5794] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 434.067938][ T5794] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.067950][ T5794] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 434.067962][ T5794] usb 4-1: config 2 interface 88 has no altsetting 0 [ 434.069445][ T5794] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 434.069471][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.069489][ T5794] usb 4-1: Product: syz [ 434.069502][ T5794] usb 4-1: Manufacturer: syz [ 434.069515][ T5794] usb 4-1: SerialNumber: syz [ 434.071268][ T9953] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.072850][ T5794] asix 4-1:2.88: probe with driver asix failed with error -22 [ 434.259377][ T9980] netlink: 36 bytes leftover after parsing attributes in process `syz.8.976'. [ 434.303384][ T5609] Bluetooth: hci5: command tx timeout [ 434.376351][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 434.376452][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 434.431044][ T9982] ceph: No mds server is up or the cluster is laggy [ 434.747340][ T5609] Bluetooth: hci6: command tx timeout [ 435.517029][ T5731] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 435.517051][ T5731] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 435.700540][ T5609] Bluetooth: hci7: command tx timeout [ 437.000339][ T5609] Bluetooth: hci6: command tx timeout [ 437.769699][ T5731] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 437.769725][ T5731] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 437.942951][ T5609] Bluetooth: hci7: command tx timeout [ 440.022931][ T5731] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 440.022955][ T5731] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 440.029683][ T5614] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 440.030729][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 440.031486][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 440.031928][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 440.032208][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 440.038882][ T5609] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 440.039272][ T5609] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 440.039505][ T5609] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 440.039925][ T5609] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 440.040198][ T5609] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 440.047856][ T9916] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 440.084095][ T5731] usb 4-1: USB disconnect, device number 72 [ 440.135796][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.135825][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.138340][ T9916] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 440.169023][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.169043][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.714320][ T9944] wg1 speed is unknown, defaulting to 1000 [ 440.969770][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.969829][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.970272][ T9944] bridge_slave_0: entered allmulticast mode [ 440.971122][ T9944] bridge_slave_0: entered promiscuous mode [ 440.973938][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.974708][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.974818][ T9944] bridge_slave_1: entered allmulticast mode [ 440.975298][ T9944] bridge_slave_1: entered promiscuous mode [ 441.005146][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.008812][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.023289][ T9944] team0: Port device team_slave_0 added [ 441.024680][ T9944] team0: Port device team_slave_1 added [ 441.036993][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.037005][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.037042][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.037583][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.037615][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.037649][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.061172][ T9944] hsr_slave_0: entered promiscuous mode [ 441.061626][ T9944] hsr_slave_1: entered promiscuous mode [ 441.062142][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 441.062181][ T9944] Cannot create hsr debugfs directory [ 441.384837][ T30] audit: type=1400 audit(1779742211.205:651): avc: denied { write } for pid=10031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.409794][ T9944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.415663][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.416296][ T9944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.418455][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.419121][ T9944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.421806][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.422780][ T9944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.425212][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.487548][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.494321][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.499908][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.499961][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.505462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.505494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.525599][ T30] audit: type=1400 audit(1779742211.334:652): avc: denied { write } for pid=10048 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.794068][T10062] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 441.811479][T10062] input: syz0 as /devices/virtual/input/input60 [ 442.050735][ T30] audit: type=1400 audit(1779742211.833:653): avc: denied { write } for pid=10051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.151494][ T30] audit: type=1400 audit(1779742211.916:654): avc: denied { write } for pid=10074 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.245502][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.275590][ T5614] Bluetooth: hci8: command tx timeout [ 442.392334][ T30] audit: type=1400 audit(1779742212.137:655): avc: denied { write } for pid=10083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.398654][ T5718] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 442.405464][ T5794] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 442.466160][ T9944] veth0_vlan: entered promiscuous mode [ 442.473263][ T9944] veth1_vlan: entered promiscuous mode [ 442.487152][ T30] audit: type=1400 audit(1779742212.230:656): avc: denied { write } for pid=10107 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.494762][ T9944] veth0_macvtap: entered promiscuous mode [ 442.504170][ T9944] veth1_macvtap: entered promiscuous mode [ 442.508423][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.511570][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.518673][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.518707][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.518955][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.518982][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.557205][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 442.559867][ T5718] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 442.559883][ T5718] usb 4-1: config 2 has no interface number 0 [ 442.559898][ T5718] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 442.559911][ T5718] usb 4-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.559924][ T5718] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 442.559941][ T5718] usb 4-1: config 2 interface 88 has no altsetting 0 [ 442.561563][ T5718] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 442.561586][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.561604][ T5718] usb 4-1: Product: syz [ 442.561616][ T5718] usb 4-1: Manufacturer: syz [ 442.561629][ T5718] usb 4-1: SerialNumber: syz [ 442.564422][T10079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.565431][ T5718] asix 4-1:2.88: probe with driver asix failed with error -22 [ 442.572050][ T5794] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.572069][ T5794] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.572097][ T5794] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 442.572120][ T5794] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 442.572151][ T5794] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 442.572171][ T5794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.573738][T10078] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 442.574580][ T5794] hub 9-1:1.0: bad descriptor, ignoring hub [ 442.574598][ T5794] hub 9-1:1.0: probe with driver hub failed with error -5 [ 442.574851][ T5794] cdc_wdm 9-1:1.0: skipping garbage [ 442.574863][ T5794] cdc_wdm 9-1:1.0: skipping garbage [ 442.574900][ T5794] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 442.632427][ T30] audit: type=1400 audit(1779742212.359:657): avc: denied { write } for pid=10111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.663477][ T30] audit: type=1400 audit(1779742212.387:658): avc: denied { write } for pid=10122 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.730392][ T5731] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 442.771785][ T30] audit: type=1400 audit(1779742212.488:659): avc: denied { write } for pid=10124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.805110][ T30] audit: type=1400 audit(1779742212.516:660): avc: denied { write } for pid=10135 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.871549][ T5731] usb 10-1: device descriptor read/64, error -71 [ 443.132803][ T5731] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 443.273319][ T5731] usb 10-1: device descriptor read/64, error -71 [ 443.391813][ T5731] usb usb10-port1: attempt power cycle [ 443.496574][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.8.989'. [ 443.586215][ T7541] usb 9-1: USB disconnect, device number 2 [ 444.021315][ T5731] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 444.041706][ T5731] usb 10-1: device descriptor read/8, error -71 [ 444.182061][ T9] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 444.182084][ T9] Bluetooth: hci8: Error when powering off device on rfkill (-110) [ 444.220018][ T9944] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 444.241331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.241351][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.245135][ T9944] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 444.260852][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.260870][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.301003][ T5731] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 444.323069][ T5731] usb 10-1: device descriptor read/8, error -71 [ 444.442033][ T5731] usb usb10-port1: unable to enumerate USB device [ 444.783274][ T5609] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 444.783449][ T5609] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 444.783671][ T5609] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 444.784091][ T5609] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 444.784350][ T5609] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 444.924933][T10257] wg1 speed is unknown, defaulting to 1000 [ 445.009624][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.009669][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.009769][T10257] bridge_slave_0: entered allmulticast mode [ 445.010142][T10257] bridge_slave_0: entered promiscuous mode [ 445.011093][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.011148][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.011201][T10257] bridge_slave_1: entered allmulticast mode [ 445.011591][T10257] bridge_slave_1: entered promiscuous mode [ 445.022649][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.023834][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.031497][T10257] team0: Port device team_slave_0 added [ 445.032500][T10257] team0: Port device team_slave_1 added [ 445.039977][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.039991][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.040011][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.040559][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.040570][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.040589][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.052708][T10257] hsr_slave_0: entered promiscuous mode [ 445.053041][T10257] hsr_slave_1: entered promiscuous mode [ 445.053278][T10257] debugfs: 'hsr0' already exists in 'hsr' [ 445.053292][T10257] Cannot create hsr debugfs directory [ 445.326526][T10257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 445.341708][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.342235][T10257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 445.344110][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.344692][T10257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 445.346508][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.347086][T10257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 445.348806][T10257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.365092][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.365147][T10257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.365225][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.365266][T10257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.397951][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.404265][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.406159][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.414197][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.418325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.418385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.421102][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.421143][ T3311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.470124][ T5731] usb 4-1: USB disconnect, device number 73 [ 445.664852][T10328] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 445.737895][T10336] gprs0: attached [ 445.826836][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.053660][T10257] veth0_vlan: entered promiscuous mode [ 446.062170][T10257] veth1_vlan: entered promiscuous mode [ 446.083830][T10257] veth0_macvtap: entered promiscuous mode [ 446.090254][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.090292][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.094530][T10257] veth1_macvtap: entered promiscuous mode [ 446.112685][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.118777][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.124485][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.124528][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.124597][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.124622][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.145814][T10257] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 446.164268][ T5731] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 446.175627][T10181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.175645][T10181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.177928][T10257] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 446.213347][T10181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.213365][T10181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.517833][ T5731] usb 10-1: Using ep0 maxpacket: 32 [ 446.683530][ T5731] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 446.683559][ T5731] usb 10-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 446.831391][ T5731] usb 10-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 446.831422][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.831439][ T5731] usb 10-1: Product: syz [ 446.831452][ T5731] usb 10-1: Manufacturer: syz [ 446.831465][ T5731] usb 10-1: SerialNumber: syz [ 446.957055][ T5609] Bluetooth: hci9: command tx timeout [ 447.017628][T10328] gprs0: detached [ 447.319935][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 447.319952][ T30] audit: type=1400 audit(1779742216.680:684): avc: denied { write } for pid=10360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.423559][ T30] audit: type=1400 audit(1779742216.790:685): avc: denied { write } for pid=10384 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.713113][ T804] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 447.784031][T10374] SELinux: ebitmap: truncated map [ 447.804191][T10374] SELinux: failed to load policy [ 447.932620][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 447.935301][ T804] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 447.935328][ T804] usb 5-1: config 2 has no interface number 0 [ 447.935356][ T804] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 447.935379][ T804] usb 5-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.935399][ T804] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 447.935421][ T804] usb 5-1: config 2 interface 88 has no altsetting 0 [ 447.939146][ T804] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 447.939165][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.939175][ T804] usb 5-1: Product: syz [ 447.939183][ T804] usb 5-1: Manufacturer: syz [ 447.939191][ T804] usb 5-1: SerialNumber: syz [ 447.941410][T10387] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 447.942548][ T804] asix 5-1:2.88: probe with driver asix failed with error -22 [ 447.990737][ T30] audit: type=1400 audit(1779742217.307:686): avc: denied { write } for pid=10391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.029852][ T30] audit: type=1400 audit(1779742217.344:687): avc: denied { write } for pid=10402 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.140925][ T30] audit: type=1400 audit(1779742217.446:688): avc: denied { write } for pid=10404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.169748][ T30] audit: type=1400 audit(1779742217.483:689): avc: denied { write } for pid=10416 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.349900][T10424] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1003'. [ 448.473689][ T30] audit: type=1400 audit(1779742217.658:690): avc: denied { unmount } for pid=10421 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 449.466155][ T5609] Bluetooth: hci9: command tx timeout [ 449.507262][ T5731] usb 10-1: USB disconnect, device number 6 [ 449.808746][ T5794] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 450.003515][ T30] audit: type=1400 audit(1779742219.172:691): avc: denied { write } for pid=10418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.007636][ T5794] usb 4-1: Using ep0 maxpacket: 8 [ 450.008976][ T5794] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 450.009007][ T5794] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 450.009037][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 450.009061][ T5794] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.009083][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 450.009106][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.009129][ T5794] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 450.009151][ T5794] usb 4-1: config 168 interface 0 has no altsetting 0 [ 450.010101][ T5794] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 450.010126][ T5794] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 450.010155][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 450.010180][ T5794] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.010202][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 450.010227][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.010252][ T5794] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 450.010274][ T5794] usb 4-1: config 168 interface 0 has no altsetting 0 [ 450.011026][ T5794] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 450.011051][ T5794] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 450.011077][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 450.011100][ T5794] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.011122][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 450.011146][ T5794] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 450.011170][ T5794] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 450.011195][ T5794] usb 4-1: config 168 interface 0 has no altsetting 0 [ 450.013376][ T5794] usb 4-1: string descriptor 0 read error: -22 [ 450.013441][ T5794] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 450.013463][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.021747][ T5794] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 450.046992][ T30] audit: type=1400 audit(1779742219.209:692): avc: denied { write } for pid=10443 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.330209][ T30] audit: type=1400 audit(1779742219.403:693): avc: denied { wake_alarm } for pid=10436 comm="syz.5.1006" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 450.330260][ T5703] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 450.491227][ T5703] usb 10-1: unable to get BOS descriptor or descriptor too short [ 450.493604][ T5703] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.493692][ T5703] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 450.493763][ T5703] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8A is Bulk; changing to Interrupt [ 450.493823][ T5703] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 450.504502][ T5703] usb 10-1: string descriptor 0 read error: -22 [ 450.504859][ T5703] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 450.504913][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.558059][ T5703] usb 10-1: selecting invalid altsetting 1 [ 451.296748][ T8949] udevd[8949]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 451.296793][ T8949] udevd[8949]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 451.304338][ T5703] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.305410][ T8238] udevd[8238]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.356568][ T5703] usb 10-1: USB disconnect, device number 7 [ 451.357806][ T804] usb 4-1: USB disconnect, device number 74 [ 451.647924][ T5609] Bluetooth: hci9: command tx timeout [ 452.359922][ T7541] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 452.533275][ T7541] usb 10-1: Using ep0 maxpacket: 16 [ 452.535531][ T7541] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 452.537293][ T7541] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 452.537318][ T7541] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.537335][ T7541] usb 10-1: Product: syz [ 452.537348][ T7541] usb 10-1: Manufacturer: syz [ 452.537361][ T7541] usb 10-1: SerialNumber: syz [ 452.538284][ T7541] usb 10-1: config 0 descriptor?? [ 452.732294][ T7541] usb 5-1: USB disconnect, device number 10 [ 452.759194][T10527] raw_sendmsg: syz.9.1011 forgot to set AF_INET. Fix it! [ 452.760386][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 452.760400][ T30] audit: type=1400 audit(1779742221.711:707): avc: denied { ioctl } for pid=10526 comm="syz.9.1011" path="socket:[33767]" dev="sockfs" ino=33767 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 452.765224][ T5703] usb 10-1: USB disconnect, device number 8 [ 452.813488][T10544] syzkaller0: entered promiscuous mode [ 452.813502][T10544] syzkaller0: entered allmulticast mode [ 453.225910][ T30] audit: type=1326 audit(1779742222.099:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10436 comm="syz.5.1006" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2749b9ce59 code=0x7fc00000 [ 453.896700][ T5609] Bluetooth: hci9: command tx timeout [ 454.514178][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 456.601198][ T30] audit: type=1400 audit(1779742225.256:709): avc: denied { set_context_mgr } for pid=10565 comm="syz.5.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 457.071952][ T5703] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 457.250992][ T5703] usb 10-1: unable to get BOS descriptor or descriptor too short [ 457.251373][ T5703] usb 10-1: not running at top speed; connect to a high speed hub [ 457.252119][ T5703] usb 10-1: config 6 has an invalid interface number: 197 but max is 0 [ 457.252141][ T5703] usb 10-1: config 6 has no interface number 0 [ 457.252160][ T5703] usb 10-1: config 6 interface 197 has no altsetting 0 [ 457.253644][ T5703] usb 10-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=5e.8e [ 457.253668][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.253684][ T5703] usb 10-1: Product: syz [ 457.253698][ T5703] usb 10-1: Manufacturer: syz [ 457.253711][ T5703] usb 10-1: SerialNumber: syz [ 457.487243][ T5703] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 457.522364][ T5703] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 457.522394][ T5703] dib0700: firmware download failed at 7 with -22 [ 457.528709][ T5703] usb 10-1: USB disconnect, device number 9 [ 457.541145][ T30] audit: type=1400 audit(1779742226.133:710): avc: denied { accept } for pid=10571 comm="syz.5.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.678709][T10576] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1021'. [ 457.711353][T10576] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 458.317013][T10580] netlink: 'syz.9.1022': attribute type 4 has an invalid length. [ 458.837400][ T5703] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 459.012599][ T5703] usb 6-1: config 255 has an invalid interface number: 97 but max is 0 [ 459.012625][ T5703] usb 6-1: config 255 has no interface number 0 [ 459.012644][ T5703] usb 6-1: config 255 interface 97 has no altsetting 0 [ 459.014216][ T5703] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 459.014239][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.014253][ T5703] usb 6-1: Product: syz [ 459.014262][ T5703] usb 6-1: Manufacturer: syz [ 459.014274][ T5703] usb 6-1: SerialNumber: syz [ 459.240929][ T5703] rndis_host 6-1:255.97: ACM capabilities 01, not really RNDIS? [ 459.244707][ T5703] usb 6-1: USB disconnect, device number 21 [ 460.548824][ T5703] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 460.734006][ T5703] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 460.734026][ T5703] usb 10-1: config 0 interface 0 has no altsetting 0 [ 460.735381][ T5703] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.735404][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 460.735422][ T5703] usb 10-1: Product: syz [ 460.735431][ T5703] usb 10-1: Manufacturer: syz [ 460.735440][ T5703] usb 10-1: SerialNumber: syz [ 460.736198][ T5703] usb 10-1: config 0 descriptor?? [ 460.738469][T10592] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 460.740514][ T5703] usb 10-1: selecting invalid altsetting 0 [ 460.850357][T10594] netlink: 'syz.5.1027': attribute type 1 has an invalid length. [ 460.850372][T10594] netlink: 'syz.5.1027': attribute type 4 has an invalid length. [ 460.850379][T10594] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1027'. [ 460.963263][T10591] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 460.963734][ T9] usb 10-1: USB disconnect, device number 10 [ 461.166282][ T5731] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 461.329826][ T5731] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 461.329852][ T5731] usb 6-1: config 1 has no interface number 0 [ 461.329876][ T5731] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 461.329908][ T5731] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 461.329922][ T5731] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.331350][ T5731] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 461.331374][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.331391][ T5731] usb 6-1: Product: syz [ 461.331405][ T5731] usb 6-1: Manufacturer: syz [ 461.331418][ T5731] usb 6-1: SerialNumber: syz [ 461.334313][T10596] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 461.554641][T10596] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 461.724770][T10600] netlink: 'syz.9.1029': attribute type 4 has an invalid length. [ 461.900941][ T5731] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0c:07 [ 462.211823][ T5731] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 462.211851][ T5731] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 462.213472][ T5731] usb 6-1: USB disconnect, device number 22 [ 462.214764][ T5731] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 462.260737][ T5731] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 463.444637][ T5609] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 463.444824][ T5609] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 463.444999][ T5609] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 463.445408][ T5609] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 463.445700][ T5609] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 463.597456][T10614] wg1 speed is unknown, defaulting to 1000 [ 463.674554][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.674630][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.674688][T10614] bridge_slave_0: entered allmulticast mode [ 463.675098][T10614] bridge_slave_0: entered promiscuous mode [ 463.675919][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.675960][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.676014][T10614] bridge_slave_1: entered allmulticast mode [ 463.676428][T10614] bridge_slave_1: entered promiscuous mode [ 463.685293][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.686440][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.693715][T10614] team0: Port device team_slave_0 added [ 463.694684][T10614] team0: Port device team_slave_1 added [ 463.701242][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.701257][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.701277][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.702252][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.702263][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.702280][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.713727][T10614] hsr_slave_0: entered promiscuous mode [ 463.714090][T10614] hsr_slave_1: entered promiscuous mode [ 463.714305][T10614] debugfs: 'hsr0' already exists in 'hsr' [ 463.714318][T10614] Cannot create hsr debugfs directory [ 463.750371][T10614] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.750401][T10614] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.790568][T10614] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.790589][T10614] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.834207][T10614] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.834229][T10614] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.924124][T10614] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.924157][T10614] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.970760][T10614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.972649][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.972974][T10614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.975118][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.975533][T10614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.976539][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.976938][T10614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.978533][T10614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.986701][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.986748][T10614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.986813][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.986838][T10614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.010590][T10614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.014319][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.014596][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.019445][T10614] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.021832][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.021862][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.024025][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.024063][ T5755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.172259][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.188943][ T805] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 464.260948][T10614] veth0_vlan: entered promiscuous mode [ 464.263350][T10614] veth1_vlan: entered promiscuous mode [ 464.273073][T10614] veth0_macvtap: entered promiscuous mode [ 464.274882][T10614] veth1_macvtap: entered promiscuous mode [ 464.280974][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.283837][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.287696][ T5755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.287731][ T5755] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.287944][ T5755] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.287972][ T5755] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.299026][T10614] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 464.310408][ T5755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.310427][ T5755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.312323][T10614] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 464.321905][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.321922][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.355638][ T805] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 464.355660][ T805] usb 6-1: config 0 interface 0 has no altsetting 0 [ 464.357006][ T805] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 464.357021][ T805] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 464.357034][ T805] usb 6-1: Product: syz [ 464.357042][ T805] usb 6-1: Manufacturer: syz [ 464.357050][ T805] usb 6-1: SerialNumber: syz [ 464.357924][ T805] usb 6-1: config 0 descriptor?? [ 464.358463][T10634] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.360613][ T805] usb 6-1: selecting invalid altsetting 0 [ 464.696621][ T804] usb 6-1: USB disconnect, device number 23 [ 464.839018][ T5794] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 465.000800][ T5794] usb 10-1: Using ep0 maxpacket: 32 [ 465.002009][ T5794] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.002031][ T5794] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.003481][ T5794] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 465.003504][ T5794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.003520][ T5794] usb 10-1: Product: syz [ 465.003527][ T5794] usb 10-1: Manufacturer: syz [ 465.003536][ T5794] usb 10-1: SerialNumber: syz [ 465.006779][ T5794] snd-ua101 10-1:1.1: invalid bNumEndpoints [ 465.006795][ T5794] snd-ua101 10-1:1.0: invalid num_altsetting [ 465.033219][ T804] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 465.208011][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 465.208357][ T804] usb 6-1: not running at top speed; connect to a high speed hub [ 465.209041][ T804] usb 6-1: config 4 interface 0 has no altsetting 0 [ 465.211050][ T804] usb 6-1: string descriptor 0 read error: -22 [ 465.211077][ T804] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 465.211090][ T804] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 465.214524][ T804] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 465.216301][ T804] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 465.255825][ T805] usb 10-1: USB disconnect, device number 11 [ 465.683816][ T5614] Bluetooth: hci10: command tx timeout [ 466.134384][ T805] usb 6-1: USB disconnect, device number 24 [ 467.188823][ T5731] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 467.569003][ T5731] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 467.569032][ T5731] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 467.570387][ T5731] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 467.570403][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.570414][ T5731] usb 10-1: Product: syz [ 467.570423][ T5731] usb 10-1: Manufacturer: syz [ 467.570431][ T5731] usb 10-1: SerialNumber: syz [ 467.571310][ T5731] usb 10-1: config 0 descriptor?? [ 467.571720][T10686] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 467.571758][T10686] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 467.814696][T10679] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 467.814754][T10679] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 468.172445][T10694] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 468.177264][ T30] audit: type=1400 audit(1779742235.947:711): avc: denied { getopt } for pid=10693 comm="syz.5.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 468.250134][ T5731] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 468.437801][ T30] audit: type=1400 audit(1779742236.187:712): avc: denied { write } for pid=10702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.468468][ T30] audit: type=1400 audit(1779742236.215:713): avc: denied { write } for pid=10726 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.618687][ T5794] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 468.619108][ T5614] Bluetooth: hci10: command tx timeout [ 468.621871][ T30] audit: type=1400 audit(1779742236.362:714): avc: denied { write } for pid=10729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.650738][ T30] audit: type=1400 audit(1779742236.381:715): avc: denied { write } for pid=10740 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.662186][ T5718] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 468.782204][ T5794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.782242][ T5794] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 468.782289][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.783301][ T5794] usb 6-1: config 0 descriptor?? [ 468.825629][ T5718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.825654][ T5718] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 468.825670][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.826706][ T5718] usb 7-1: config 0 descriptor?? [ 468.905364][T10679] netlink: 'syz.9.1043': attribute type 3 has an invalid length. [ 468.905469][T10679] netlink: 'syz.9.1043': attribute type 3 has an invalid length. [ 468.925285][ T5731] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 468.928560][ T5731] dm9601 10-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.9-1, Davicom DM96xx USB 10/100 Ethernet, 46:2d:a6:fb:b5:f5 [ 468.930254][ T5731] usb 10-1: USB disconnect, device number 12 [ 468.930927][ T5731] dm9601 10-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.9-1, Davicom DM96xx USB 10/100 Ethernet [ 469.224219][ T5794] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 469.227338][ T5794] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0026/input/input61 [ 469.263842][ T5718] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 469.266778][ T5718] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0027/input/input62 [ 469.303752][ T5794] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 469.390596][ T5718] keytouch 0003:0926:3333.0027: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 469.396714][ T5609] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 469.396917][ T5609] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 469.397529][ T5609] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 469.398029][ T5609] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 469.398357][ T5609] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 469.749076][T10747] wg1 speed is unknown, defaulting to 1000 [ 469.908400][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.908467][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.908708][T10747] bridge_slave_0: entered allmulticast mode [ 469.909429][T10747] bridge_slave_0: entered promiscuous mode [ 469.910797][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.910861][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.910944][T10747] bridge_slave_1: entered allmulticast mode [ 469.911520][T10747] bridge_slave_1: entered promiscuous mode [ 469.923703][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.925498][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.937589][T10747] team0: Port device team_slave_0 added [ 469.938937][T10747] team0: Port device team_slave_1 added [ 469.949542][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.949574][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.949595][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.950351][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.950362][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.950381][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.968484][T10747] hsr_slave_0: entered promiscuous mode [ 469.968995][T10747] hsr_slave_1: entered promiscuous mode [ 469.969319][T10747] debugfs: 'hsr0' already exists in 'hsr' [ 469.969332][T10747] Cannot create hsr debugfs directory [ 470.017952][T10747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.017978][T10747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.064136][T10747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.064158][T10747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.094922][ T5718] usb 7-1: USB disconnect, device number 7 [ 470.112123][T10747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.112144][T10747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.152007][T10747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.152030][T10747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.156754][ T5794] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 470.210550][ T5731] usb 6-1: USB disconnect, device number 25 [ 470.242513][T10747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.246430][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.246904][T10747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.247983][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.248438][T10747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.249773][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.250235][T10747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.251248][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.274908][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.280337][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.282371][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.282410][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.285548][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.285590][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.321203][ T5794] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.321247][ T5794] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 470.321268][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.322426][ T5794] usb 10-1: config 0 descriptor?? [ 470.462110][T10747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.482425][T10747] veth0_vlan: entered promiscuous mode [ 470.485376][T10747] veth1_vlan: entered promiscuous mode [ 470.495867][T10747] veth0_macvtap: entered promiscuous mode [ 470.497659][T10747] veth1_macvtap: entered promiscuous mode [ 470.502699][T10747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.506849][T10747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.510377][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.510413][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.510438][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.510481][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.522561][T10747] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 470.538163][T10747] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 470.539346][ T3311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.539362][ T3311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.552292][ T3311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.552312][ T3311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.587487][T10790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1054'. [ 470.644255][ T5614] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 470.644409][ T5614] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 470.644547][ T5614] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 470.644972][ T5614] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 470.645239][ T5614] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 471.144292][ T5609] Bluetooth: hci10: command tx timeout [ 471.152663][ T5794] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 471.158050][ T5794] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0028/input/input63 [ 471.395007][ T5794] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 471.792388][ T5609] Bluetooth: hci11: command tx timeout [ 471.861053][ T5731] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 472.367252][T10791] wg1 speed is unknown, defaulting to 1000 [ 472.427870][ T5731] usb 7-1: device descriptor read/64, error -71 [ 472.439998][ T5718] usb 10-1: USB disconnect, device number 13 [ 472.681012][ T5731] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 472.775568][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.775622][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.775679][T10791] bridge_slave_0: entered allmulticast mode [ 472.776047][T10791] bridge_slave_0: entered promiscuous mode [ 472.776819][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.776843][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.776895][T10791] bridge_slave_1: entered allmulticast mode [ 472.777321][T10791] bridge_slave_1: entered promiscuous mode [ 472.785767][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.786870][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.802319][T10791] team0: Port device team_slave_0 added [ 472.803251][T10791] team0: Port device team_slave_1 added [ 472.813153][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.813170][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.813187][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.813747][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.813758][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.813777][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.816305][T10825] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1061'. [ 472.827030][T10791] hsr_slave_0: entered promiscuous mode [ 472.827383][T10791] hsr_slave_1: entered promiscuous mode [ 472.827597][T10791] debugfs: 'hsr0' already exists in 'hsr' [ 472.827611][T10791] Cannot create hsr debugfs directory [ 472.843027][ T5731] usb 7-1: device descriptor read/64, error -71 [ 472.843082][ T5794] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 472.863220][T10791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.875911][ T5609] Bluetooth: hci12: command tx timeout [ 472.890120][T10791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.933023][T10791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.962509][ T5731] usb usb7-port1: attempt power cycle [ 472.983883][ T5794] usb 1-1: device descriptor read/64, error -71 [ 472.986888][T10791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.049077][T10791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 473.054836][T10791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.055777][T10791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.061151][T10791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.061654][T10791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.065937][T10791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.067030][T10791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.079887][T10791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.149248][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.149281][T10791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.149375][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.149403][T10791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.166863][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.171596][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.171932][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.175138][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.177760][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.177791][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.183842][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.183873][ T5755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.243927][ T5794] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 473.256779][T10836] netlink: 'syz.9.1062': attribute type 4 has an invalid length. [ 473.450067][ T5731] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 473.472124][ T5731] usb 7-1: device descriptor read/8, error -71 [ 473.591121][ T5794] usb 1-1: device descriptor read/64, error -71 [ 473.595550][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.609719][T10791] veth0_vlan: entered promiscuous mode [ 473.613315][T10791] veth1_vlan: entered promiscuous mode [ 473.622717][T10791] veth0_macvtap: entered promiscuous mode [ 473.625145][T10791] veth1_macvtap: entered promiscuous mode [ 473.630640][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.633555][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.637854][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.637889][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.637915][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.637941][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.649734][T10791] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 473.660400][ T3311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.660419][ T3311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.661885][T10791] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 473.672912][ T3311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.672931][ T3311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.756742][ T5731] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 473.758096][ T5794] usb usb1-port1: attempt power cycle [ 474.105187][ T5609] Bluetooth: hci11: command tx timeout [ 474.394349][ T5731] usb 7-1: device descriptor read/8, error -71 [ 474.409578][T10853] netlink: 532 bytes leftover after parsing attributes in process `syz.9.1063'. [ 474.409592][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1063'. [ 474.447157][ T5794] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 474.504735][ T5794] usb 1-1: device descriptor read/8, error -71 [ 474.512238][ T5731] usb usb7-port1: unable to enumerate USB device [ 474.761086][ T5794] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 474.818726][T10859] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 474.828353][T10859] input: syz0 as /devices/virtual/input/input64 [ 475.039386][ T5794] usb 1-1: device descriptor read/8, error -71 [ 475.107128][ T9954] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 475.118002][ T5609] Bluetooth: hci12: command tx timeout [ 475.142799][T10864] 9p: Bad value for 'rfdno' [ 475.150359][ T5794] usb usb1-port1: unable to enumerate USB device [ 475.251196][ T30] audit: type=1400 audit(1779742242.483:716): avc: denied { create } for pid=10865 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.251945][ T30] audit: type=1400 audit(1779742242.483:717): avc: denied { read } for pid=10865 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.268576][T10868] FAULT_INJECTION: forcing a failure. [ 475.268576][T10868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.268599][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.0.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.268614][T10868] Tainted: [L]=SOFTLOCKUP [ 475.268618][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.268625][T10868] Call Trace: [ 475.268628][T10868] [ 475.268633][T10868] dump_stack_lvl+0x100/0x190 [ 475.268649][T10868] should_fail_ex.cold+0x5/0xa [ 475.268663][T10868] _copy_from_iter+0x1f4/0x1690 [ 475.268680][T10868] ? __asan_memset+0x23/0x50 [ 475.268696][T10868] ? __pfx__copy_from_iter+0x10/0x10 [ 475.268713][T10868] ? __pfx___alloc_skb+0x10/0x10 [ 475.268723][T10868] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 475.268741][T10868] netlink_sendmsg+0x808/0xda0 [ 475.268757][T10868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.268774][T10868] ____sys_sendmsg+0x9e1/0xb70 [ 475.268788][T10868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.268804][T10868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.268818][T10868] ? __pfx_kstrtouint+0x10/0x10 [ 475.268832][T10868] ___sys_sendmsg+0x190/0x1e0 [ 475.268847][T10868] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.268864][T10868] ? rcu_is_watching+0x12/0xc0 [ 475.268884][T10868] __sys_sendmsg+0x170/0x220 [ 475.268895][T10868] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.268908][T10868] ? rcu_is_watching+0x12/0xc0 [ 475.268925][T10868] do_syscall_64+0x10b/0x860 [ 475.268946][T10868] ? clear_bhb_loop+0x40/0x90 [ 475.268964][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.268980][T10868] RIP: 0033:0x7facacb9ce59 [ 475.268993][T10868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.269009][T10868] RSP: 002b:00007facadb16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.269025][T10868] RAX: ffffffffffffffda RBX: 00007facace15fa0 RCX: 00007facacb9ce59 [ 475.269036][T10868] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 475.269047][T10868] RBP: 00007facadb16090 R08: 0000000000000000 R09: 0000000000000000 [ 475.269057][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.269064][T10868] R13: 00007facace16038 R14: 00007facace15fa0 R15: 00007ffd23e06078 [ 475.269073][T10868] [ 475.269708][ T9954] usb 3-1: Using ep0 maxpacket: 32 [ 475.273101][ T9954] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 475.273124][ T9954] usb 3-1: config 0 has no interface number 0 [ 475.275168][ T9954] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 475.275193][ T9954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.275211][ T9954] usb 3-1: Product: syz [ 475.275225][ T9954] usb 3-1: Manufacturer: syz [ 475.275239][ T9954] usb 3-1: SerialNumber: syz [ 475.276365][ T9954] usb 3-1: config 0 descriptor?? [ 475.278404][ T9954] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 475.399321][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 475.497818][ T9954] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 475.499056][ T9954] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 475.565126][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.565153][ T9] usb 7-1: config 0 has no interface number 0 [ 475.565198][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 475.565214][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 475.565246][ T9] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.565266][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 475.565284][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.566165][ T9] usb 7-1: config 0 descriptor?? [ 475.594355][ T5794] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 475.716655][T10870] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 475.718978][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 475.719130][ T5703] usb 3-1: USB disconnect, device number 52 [ 475.720399][ T5703] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 475.723173][ T5703] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 475.725908][ T5703] quatech2 3-1:0.51: device disconnected [ 475.758239][ T5794] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.758272][ T5794] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.758291][ T5794] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 475.758304][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.760939][ T5794] hub 1-1:4.0: USB hub found [ 475.791181][ T9] usbhid 7-1:0.1: can't add hid device: -71 [ 475.791278][ T9] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 475.793534][ T9] usb 7-1: USB disconnect, device number 12 [ 475.979632][ T5794] hub 1-1:4.0: 2 ports detected [ 475.979851][ T5794] usb 1-1: selecting invalid altsetting 1 [ 475.979876][ T5794] hub 1-1:4.0: Using single TT (err -22) [ 476.077603][T10873] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 476.353843][ T5609] Bluetooth: hci11: command tx timeout [ 476.403010][ T30] audit: type=1400 audit(1779742243.536:718): avc: denied { write } for pid=10877 comm="syz.6.1071" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 476.677125][ T5794] usb 1-1: USB disconnect, device number 55 [ 476.752914][ T30] audit: type=1400 audit(1779742243.859:719): avc: denied { getopt } for pid=10880 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.197552][ T5609] Bluetooth: hci9: command 0x0c1a tx timeout [ 477.197669][ T5731] Bluetooth: hci9: Opcode 0x0c1a failed: -110 [ 477.197684][ T5731] Bluetooth: hci9: Error when powering off device on rfkill (-110) [ 477.316661][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 477.371066][ T5609] Bluetooth: hci12: command tx timeout [ 477.503740][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 477.506457][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.506586][ T29] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.511964][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 477.512038][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.512185][ T29] usb 7-1: Product: syz [ 477.512255][ T29] usb 7-1: Manufacturer: syz [ 477.512364][ T29] usb 7-1: SerialNumber: syz [ 477.553711][ T29] snd-ua101 7-1:1.1: invalid bNumEndpoints [ 477.553731][ T29] snd-ua101 7-1:1.0: invalid num_altsetting [ 477.803682][ T29] usb 7-1: USB disconnect, device number 13 [ 478.769787][ T5609] Bluetooth: hci11: command tx timeout [ 479.067273][ T30] audit: type=1400 audit(1779742246.000:720): avc: denied { mount } for pid=10909 comm="syz.9.1081" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 479.110718][T10912] loop7: detected capacity change from 0 to 7 [ 479.129501][T10912] Dev loop7: unable to read RDB block 7 [ 479.129525][T10912] loop7: unable to read partition table [ 479.129593][T10912] loop7: partition table beyond EOD, truncated [ 479.129610][T10912] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 479.277537][ T29] usb 3-1: new high-speed USB device number 53 using dummy_hcd