last executing test programs: 2m18.579766569s ago: executing program 4 (id=4898): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2f, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 2m17.127460947s ago: executing program 3 (id=4902): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x58}}, 0x0) 2m16.953013074s ago: executing program 3 (id=4904): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xb930, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) io_uring_enter(r0, 0x7277, 0x40006, 0x43, 0x0, 0x0) 2m16.653264699s ago: executing program 0 (id=4907): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x38, 0x4, @tid=r1}, &(0x7f0000000140)) timer_delete(0x0) pread64(r3, 0x0, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m16.553276281s ago: executing program 3 (id=4910): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioprio_get$uid(0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) 2m15.495734977s ago: executing program 2 (id=4911): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002500)="e050", 0x2}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x3, @void}, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) 2m15.467068967s ago: executing program 1 (id=4912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 2m15.37341965s ago: executing program 4 (id=4913): creat(&(0x7f0000000080)='./bus\x00', 0x1d0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)='trans=rdma,') 2m15.315747039s ago: executing program 3 (id=4914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db", 0x9c}], 0x1}}], 0x1, 0x95) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 2m15.312808327s ago: executing program 1 (id=4915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffe2, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x7, 0x9, 0x2, 0x2f, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7fffffff, 0x1ff, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xe, 0x0, 0xfffffffc, 0x3}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x4b52, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x137) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000010000000577faf", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000009c0)="6b1998812f7d0e30c7a680745798ed3b5c982dc0cfb2fddd230e142f8f90e84c249e688f95ab4c71e0db511daa85fb53d21d30655971f38364729cb8ca7023cfc5baf5a4c3fbc16a3ca3b4e6592593537d0306e46ae3def6796a0c7d24fd542b06d4639ed894fb194391444923b604c6e888848dea57ffe7d363d7e45d80e185d2607718eb7146e02de14a4ec75f41ea077f09577b0ff07d673b2aedcae9de4c468a7e55c8e05656a3f0f6f67ef15033107d49fd74095ee1a181d35d1dd4913c9c2078826d689fb591e07e64dffed056ae367b1e7e18", 0xd6}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, 0xed7}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000600)="725bbea4d8944799bf7c5b28ce9c2c4386f66acf5f88ef25dfa2853b07c7e4788a8a6186c4f3baa1b76456bdc55669e597a1f72e94f5e561e337cdcf2439bc553f646ee79e8c816b4979ece25b69868fc3ecedfc2d0005179137d0353bcdbef7a22c8b2683028976b20569a402dd181e52", 0x71}, {&(0x7f0000000240)="82989685800960d5f25eb9a53977825203cf6d1df3f23f01a3ed4a8ac6632899a55b4fc53c464b726be37a467e90ce4806", 0x31}, {&(0x7f0000000b40)="72fad5e29cb8b39a129c3460145d868fb2651cc652d026993dcf5b5832b958978ace290ef5db3836db1c9fdcf3f56b6f094e5b427a7c24e3b7c1d42fd17b9d66afd092e45dd56becac16f4ca9f8c5b838553f509f1572cd3dcf619a4ef4954878606fe6fc76ba37a55cc88aaea60d176a8c3d573174b46f178524b2cc254aba3715d8a456ae5b1faf2e040eecf96e5abc18ed1b0554c9372016e0963648d17cf350b341a765d448f8bfebc928f0d900ba37077398eece9728590f9c367479886460e", 0xc2}, {&(0x7f0000000c40)="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", 0xfd}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="2400000029000000360000002c01000000000000c2040000013e00010000010e01010000"], 0x24}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000007c0)="e8fb7a0b7322ef3abea71262a68c494c6347412ceca64def4233b5f86476e12b5a6e44836c063b8e2bcaa7254e8087c296fbdbaa742618dcd54173f9fd6e412ec81c5395c3894ee73f46d8f0aed831d8c2e371fe2ce27881bcf5a480fe19", 0x5e}, {&(0x7f0000000d40)="ed011feaa24602795f098d0f12f7f0b7a15dc8ff3213f6ebf6099e97babd16682bfb1cd37c8bf2ac2779060c041c20259e59bb49801a1e360551bab37ae2a33f52dd0829db816da5a5f41d785f7e9ab46ef18e77fa81569bc724032aef90fc53a83b07ec9e1968159cdad487c5407b1c83e29e9508238472f48df6f94c4f145d73b0911caba7c2b41c22acf8fbded5b411b4337adb4cb9fd9e90759fe77f757f4c771431a5", 0xa5}, {&(0x7f0000000e00)="0975b5700bb8f0920371d85002aeedf751361ff3b130bac49cd52d165f2bdee8069afc91ebbdf0715b6c26d19e5576a8f14cc25498c6ecc5ddc3ed9cbcd4fb6f389794fb24896c849ad2204599d80e5b156bf9f0824f96be854887872f37af08b45404d0f1a2e3d45b9c10b84b42ea269c251361cc3f4ec984fd648e31f024e74c5df25fbc2204779f36df3243387fc7cd683445f286feed367fb16e6614761d5bb4a42838d55e387bc23acf9c86987065dc44a26e423d5ac4ba8a8fd0b1174adcd84e0edb3bf5a69f551e550fefe8af62504767d9c1d0e0fc932cdd97a04ce2373c99cf4d315f77e978a85ac77c1de556f7", 0xf2}, {&(0x7f0000000f00)="1d686a6d1cc308ba83493d746dfd8149451ebf2f0c4251a3a1efe27e3cb36fe529cc0bc6f500a608ecf8908c780cc644392f530a72905c85c81a3e4153f2690a15893bbe254d80a95b053887ab89803b47620e8e7bf6e326a57a0c9790d317e0827168fea6454335d497b56d7811853acfb2ddffb2342dd41e79e3bdadb87bb21cfd5118df0817f4d96db4cdc17494e88fd549a52e728aa60dc5655b455a60a1eaeb20ca34f968812a78c59fbe170c76ca48e15e34ab93e7e7d06bc1dcb2bdd203", 0xc1}], 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="2c00000029000000040000003302000000000000000100010a00000000000000000000040157c4ee0900000010000000290000003400000005fffff60c0100002900000036000000001e000000000000c2040000100006e76f39b7ddacf7b5d75233f2ef14b2f070b255f1a284dc3422c3d9746f7bfa5bd1d75bfc94be8a101f11617798ed114698c6fb37f8e06a0bb68bbc53c478b0614550ee648b09c98c5eed1e837159155897a2049b8e3b04477d3760ee4bed47e0c99beff29f29cd6259a4c9fd4a70ffb1c6af86a3ad9bda1d9884824c00decfd11574d9d6f647f222cbe8ec8d6cc3b5f4934eb22dc89459b206807db93ea338a38e59be3eb0a76c6b825f0190160d5bd454b30d92cb2e5fa27cfdfdef407ee90e6e86f3eb7a93428f868d3098af9a5b0c89cd2ae6bcdaca96ef85c0c5aca460b5d7d7e84a53f91f01050200090000000000100000002900000043000000aeab00002400000029000000360000002c0100000000000004010e000100000100050200000000001c00000029000000360000003b000000000000000401080000000000"], 0x198}}], 0x5, 0x24000045) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000740)=@assoc_value={0x0, 0xf5}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000000004000"/28], 0x2f) 2m15.252329449s ago: executing program 0 (id=4916): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002500)="e050", 0x2}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x3, @void}, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m15.239101124s ago: executing program 4 (id=4917): socket$inet6(0xa, 0x80002, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svc_xprt_accept\x00', r0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m14.158554591s ago: executing program 2 (id=4918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) readlink(0x0, 0x0, 0x0) 2m13.795036543s ago: executing program 0 (id=4919): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m13.631550763s ago: executing program 1 (id=4920): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000020000000aaa6721d5874f72cf86d73d32f46380feb56a29317215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) 2m13.587868316s ago: executing program 2 (id=4921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2m13.507839794s ago: executing program 4 (id=4922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x5}, 0x8) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) 2m13.488937767s ago: executing program 2 (id=4923): r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x61d9, &(0x7f0000000000)) 2m13.483207281s ago: executing program 0 (id=4924): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2f, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 2m13.339681515s ago: executing program 2 (id=4925): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioprio_get$uid(0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) 2m12.667582444s ago: executing program 1 (id=4926): syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 2m12.509968435s ago: executing program 0 (id=4927): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x38, 0x4, @tid=r1}, &(0x7f0000000140)) timer_delete(0x0) pread64(r3, 0x0, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m12.508605169s ago: executing program 3 (id=4928): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2m12.311548043s ago: executing program 1 (id=4929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db", 0x9c}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x95) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001) 2m10.371149598s ago: executing program 3 (id=4930): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000003c0)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) syz_open_procfs(r1, &(0x7f0000000380)='net/icmp6\x00') execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000240)="0005001ac402", 0x6, r5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 2m10.37032054s ago: executing program 4 (id=4931): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050c3000180ffffffffffff0d004a190006020202020202010182040672fbb1c813d292658e274b38053356fd06040008000602faff72060303"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x2000080) 2m10.311736294s ago: executing program 2 (id=4932): socket$inet6(0xa, 0x80002, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svc_xprt_accept\x00', r0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m6.808572443s ago: executing program 0 (id=4933): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000a00)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xffffe00000000000, 0x3a, 'nfsd\x00', 0x3a, '\x88\\', 0x3a, './file0'}, 0x2e) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(0x0, 0x14937e, 0x111) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0xfff, 0x101, 0x4, 0x100, r1, 0x81, '\x00', 0x0, r3, 0x2, 0x2, 0x4}, 0x50) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000040)={'wg0\x00'}) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xf, 0x5, 0x1, 0x8, 0x8}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_connect$uac1(0x3, 0x9a, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x3, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x3, 0x5, 0x1, [0x9], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x3, 0x2, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1c, 0x4, 0x7f, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xa, 0x3, {0x7, 0x25, 0x1, 0x80, 0xd, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6c, 0x8, 0xd1, {0x7, 0x25, 0x1, 0x0, 0x10, 0xa}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m4.066323632s ago: executing program 1 (id=4934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m4.065148348s ago: executing program 4 (id=4935): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) 0s ago: executing program 32 (id=4932): socket$inet6(0xa, 0x80002, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svc_xprt_accept\x00', r0}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kernel console output (not intermixed with test programs): 788212][T16975] comedi: valid board names for vmk80xx driver are: [ 924.808607][T16975] vmk80xx [ 924.820532][T16975] comedi: valid board names for usbduxsigma driver are: [ 924.839384][T16975] usbduxsigma [ 924.842811][T16975] comedi: valid board names for usbduxfast driver are: [ 924.854564][T16854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.934136][T16975] usbduxfast [ 924.937663][T16975] comedi: valid board names for usbdux driver are: [ 924.974593][T16975] usbdux [ 924.980963][T16975] comedi: valid board names for ni6501 driver are: [ 924.994166][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.047876][T16854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.144272][T16975] ni6501 [ 925.464162][T16975] comedi: valid board names for dt9812 driver are: [ 925.471634][T16975] dt9812 [ 925.474814][T16975] comedi: valid board names for ni_labpc_cs driver are: [ 925.482688][T16975] ni_labpc_cs [ 925.486260][T16975] comedi: valid board names for ni_daq_700 driver are: [ 925.493995][T16975] ni_daq_700 [ 925.591735][T16854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.602721][T16975] comedi: valid board names for labpc_pci driver are: [ 925.610904][T16975] labpc_pci [ 925.614445][T16975] comedi: valid board names for adl_pci9118 driver are: [ 925.621435][T16854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.621476][T16975] pci9118dg [ 925.649629][T16854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.216078][T16975] pci9118hg [ 926.220005][T16975] pci9118hr [ 926.223252][T16975] comedi: valid board names for 8255_pci driver are: [ 926.239511][T16975] 8255_pci [ 926.243095][T16975] comedi: valid board names for s526 driver are: [ 926.252326][T16975] s526 [ 926.259576][T16975] comedi: valid board names for multiq3 driver are: [ 926.285210][T16975] multiq3 [ 926.291647][T16975] comedi: valid board names for pcmuio driver are: [ 926.298677][T16975] pcmuio48 [ 926.301947][T16975] pcmuio96 [ 926.386583][T16975] comedi: valid board names for pcmmio driver are: [ 926.393140][T16975] pcmmio [ 926.409168][T16975] comedi: valid board names for pcmda12 driver are: [ 926.417796][T16975] pcmda12 [ 926.422514][T16975] comedi: valid board names for pcmad driver are: [ 926.435794][T16975] pcmad12 [ 926.442235][T16975] pcmad16 [ 926.445748][T16975] comedi: valid board names for ni_labpc driver are: [ 926.452411][T16975] lab-pc-1200 [ 926.456795][T16975] lab-pc-1200ai [ 926.460350][T16975] lab-pc+ [ 926.474127][T16975] comedi: valid board names for atmio16 driver are: [ 926.486936][T16854] hsr_slave_0: entered promiscuous mode [ 926.492519][T16975] atmio16 [ 926.496658][T16854] hsr_slave_1: entered promiscuous mode [ 926.504996][T16854] debugfs: 'hsr0' already exists in 'hsr' [ 926.512462][T16975] atmio16d [ 926.525869][T16975] comedi: valid board names for ni_at_ao driver are: [ 926.532598][T16975] at-ao-6 [ 926.539378][T16854] Cannot create hsr debugfs directory [ 926.548866][T16975] at-ao-10 [ 926.552254][T16975] comedi: valid board names for ni_at_a2150 driver are: [ 926.573544][T16975] ni_at_a2150 [ 926.588059][T16975] comedi: valid board names for adq12b driver are: [ 926.597943][T16975] adq12b [ 926.600949][T16975] comedi: valid board names for mpc624 driver are: [ 926.607631][T16975] mpc624 [ 926.610933][T16975] comedi: valid board names for c6xdigio driver are: [ 926.725145][T16975] c6xdigio [ 926.728301][T16975] comedi: valid board names for aio_iiro_16 driver are: [ 926.772536][T16975] aio_iiro_16 [ 926.777898][T16975] comedi: valid board names for aio_aio12_8 driver are: [ 926.785435][T16975] aio_aio12_8 [ 926.788942][T16975] aio_ai12_8 [ 926.792283][T16975] aio_ao12_4 [ 926.796343][T16975] comedi: valid board names for fl512 driver are: [ 926.802931][T16975] fl512 [ 926.806367][T16975] comedi: valid board names for dmm32at driver are: [ 926.813127][T16975] dmm32at [ 926.820312][T16975] comedi: valid board names for dt282x driver are: [ 926.899716][T16975] dt2821 [ 926.902699][T16975] dt2821-f [ 926.906010][T16975] dt2821-g [ 926.909329][T16975] dt2823 [ 926.912430][T16975] dt2824-pgh [ 926.916143][T16975] dt2824-pgl [ 926.919488][T16975] dt2825 [ 926.922466][T14037] hsr_slave_0: left promiscuous mode [ 926.929080][T16975] dt2827 [ 926.936007][T14037] hsr_slave_1: left promiscuous mode [ 926.945367][T16975] dt2828 [ 926.948337][T16975] dt2829 [ 926.951289][T16975] dt21-ez [ 926.955244][T14037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.169826][ T7391] Bluetooth: (null): Invalid header checksum [ 927.453037][T14037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.467117][T16975] dt23-ez [ 927.471376][ T7391] Bluetooth: (null): Invalid header checksum [ 927.477651][T16975] dt24-ez [ 927.480841][T16975] dt24-ez-pgl [ 927.484418][ T7391] Bluetooth: (null): Invalid header checksum [ 927.490564][T16975] comedi: valid board names for dt2817 driver are: [ 927.497294][ T7391] Bluetooth: (null): Invalid header checksum [ 927.503568][T16975] dt2817 [ 927.507035][T16975] comedi: valid board names for dt2815 driver are: [ 927.513899][T16975] dt2815 [ 927.517009][T16975] comedi: valid board names for dt2814 driver are: [ 927.523642][T16975] dt2814 [ 927.523798][ T7391] Bluetooth: (null): Invalid header checksum [ 927.537143][T16975] comedi: valid board names for dt2811 driver are: [ 927.548867][T16975] dt2811-pgh [ 927.562873][T16975] dt2811-pgl [ 927.577893][T16975] comedi: valid board names for dt2801 driver are: [ 927.585864][T16975] dt2801 [ 927.598953][T16975] comedi: valid board names for das6402 driver are: [ 927.613815][T16975] das6402-12 [ 927.617249][T16975] das6402-16 [ 927.620595][T16975] comedi: valid board names for das1800 driver are: [ 927.666923][T16975] das-1701st [ 927.684206][T16975] das-1701st-da [ 927.687798][T16975] das-1702st [ 927.691081][T16975] das-1702st-da [ 927.694766][T16975] das-1702hr [ 927.698053][T16975] das-1702hr-da [ 927.701595][T16975] das-1701ao [ 927.704920][T16975] das-1702ao [ 927.708196][T16975] das-1801st [ 927.711468][T16975] das-1801st-da [ 927.715058][T16975] das-1802st [ 927.718334][T16975] das-1802st-da [ 927.721869][T16975] das-1802hr [ 927.725197][T16975] das-1802hr-da [ 927.728742][T16975] das-1801hc [ 927.732014][T16975] das-1802hc [ 927.735328][T16975] das-1801ao [ 927.738608][T16975] das-1802ao [ 927.741891][T16975] comedi: valid board names for das800 driver are: [ 927.780001][T16975] das-800 [ 927.783073][T16975] cio-das800 [ 927.794663][T16975] das-801 [ 927.797752][T16975] cio-das801 [ 927.801075][T16975] das-802 [ 927.804233][T16975] cio-das802 [ 927.807520][T16975] cio-das802/16 [ 927.811072][T16975] comedi: valid board names for isa-das08 driver are: [ 927.837315][T16975] isa-das08 [ 927.840662][T16975] das08-pgm [ 927.843958][T16975] das08-pgh [ 927.848827][T16975] das08-pgl [ 927.852148][T16975] das08-aoh [ 927.879075][T16975] das08-aol [ 927.882320][T16975] das08-aom [ 927.886214][T16975] das08/jr-ao [ 927.889802][T16975] das08jr-16-ao [ 927.893407][T16975] pc104-das08 [ 927.897387][T16975] das08jr/16 [ 927.900859][T16975] comedi: valid board names for das16m1 driver are: [ 927.908745][T16975] das16m1 [ 927.912027][T16975] comedi: valid board names for dac02 driver are: [ 927.954120][T16975] dac02 [ 927.959722][T16975] comedi: valid board names for rti802 driver are: [ 927.990330][T16975] rti802 [ 928.000719][T16975] comedi: valid board names for rti800 driver are: [ 928.014154][T16975] rti800 [ 928.021605][T16975] rti815 [ 928.025702][T16975] comedi: valid board names for pcm3724 driver are: [ 928.032411][T16975] pcm3724 [ 928.037623][T16975] comedi: valid board names for pcl818 driver are: [ 928.044548][T16975] pcl818l [ 928.047596][T16975] pcl818h [ 928.051856][T16975] pcl818hd [ 928.055059][T16975] pcl818hg [ 928.058182][T16975] pcl818 [ 928.061125][T16975] pcl718 [ 928.064608][T16975] pcm3718 [ 928.067636][T16975] comedi: valid board names for pcl816 driver are: [ 928.074188][T16975] pcl816 [ 928.077122][T16975] pcl814b [ 928.080171][T16975] comedi: valid board names for pcl812 driver are: [ 928.086893][T16975] pcl812 [ 928.089851][T16975] pcl812pg [ 928.093108][T16975] acl8112pg [ 928.096440][T16975] acl8112dg [ 928.099702][T16975] acl8112hg [ 928.102964][T16975] a821pgl [ 928.106495][T16975] a821pglnda [ 928.109883][T16975] a821pgh [ 928.112980][T16975] a822pgl [ 928.116334][T16975] a822pgh [ 928.119778][T16975] a823pgl [ 928.122968][T16975] a823pgh [ 928.126152][T16975] pcl813 [ 928.129373][T16975] pcl813b [ 928.132806][T16975] acl8113 [ 928.195555][T16975] iso813 [ 928.212892][T16975] acl8216 [ 928.243845][T16975] a826pg [ 928.267216][T16975] comedi: valid board names for pcl730 driver are: [ 928.306642][T16975] pcl730 [ 928.322805][T16975] iso730 [ 928.341573][T16975] acl7130 [ 928.374607][T16975] pcm3730 [ 928.398022][T16975] pcl725 [ 928.413899][T16975] p8r8dio [ 928.430099][T16975] acl7225b [ 928.447143][T16975] p16r16dio [ 928.489323][T16975] pcl733 [ 928.498802][T16975] pcl734 [ 928.501773][T16975] opmm-1616-xt [ 928.514117][T16975] pearl-mm-p [ 928.521791][T16975] ir104-pbf [ 928.525230][T16975] comedi: valid board names for pcl726 driver are: [ 928.531991][T16975] pcl726 [ 928.535020][T16975] pcl727 [ 928.537969][T16975] pcl728 [ 928.540973][T16975] acl6126 [ 928.545627][T16975] acl6128 [ 928.548677][T16975] comedi: valid board names for pcl724 driver are: [ 928.555360][T16975] pcl724 [ 928.558431][T16975] pcl722 [ 928.561389][T16975] pcl731 [ 928.566542][T16975] acl7122 [ 928.569697][T16975] acl7124 [ 928.572792][T16975] pet48dio [ 928.596217][T16975] pcmio48 [ 928.599474][T16975] onyx-mm-dio [ 928.618106][T16975] comedi: valid board names for pcl711 driver are: [ 928.624824][T16975] pcl711 [ 928.637558][T16975] pcl711b [ 928.640761][T16975] acl8112hg [ 928.645084][T16975] acl8112dg [ 928.648511][T16975] comedi: valid board names for amplc_pc263 driver are: [ 928.670007][T16975] pc263 [ 928.673037][T16975] comedi: valid board names for amplc_pc236 driver are: [ 928.689590][T16975] pc36at [ 928.697992][T16975] comedi: valid board names for amplc_dio200 driver are: [ 928.706533][T16975] pc212e [ 928.709500][T16975] pc214e [ 928.712430][T16975] pc215e [ 928.715464][T16975] pc218e [ 928.718412][T16975] pc272e [ 928.721347][T16975] comedi: valid board names for comedi_parport driver are: [ 928.728943][T16975] comedi_parport [ 928.732596][T16975] comedi: valid board names for comedi_test driver are: [ 928.739774][T16975] comedi_test [ 928.743147][T16975] comedi: valid board names for comedi_bond driver are: [ 928.750828][T16975] comedi_bond [ 929.559183][ T976] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 929.641512][T14037] team0 (unregistering): Port device team_slave_1 removed [ 929.732291][T14037] team0 (unregistering): Port device team_slave_0 removed [ 929.744125][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 929.757702][ T976] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 929.772742][ T976] usb 4-1: config 0 has no interface number 0 [ 929.780009][ T976] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.793205][ T976] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 929.818410][ T976] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 929.827937][ T976] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 929.836298][ T976] usb 4-1: Product: syz [ 929.854226][ T976] usb 4-1: SerialNumber: syz [ 929.895120][ T976] usb 4-1: config 0 descriptor?? [ 929.907892][ T976] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 929.918682][ T976] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input37 [ 930.119623][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 930.126924][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 930.134152][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 930.135781][ T1538] usb 4-1: USB disconnect, device number 12 [ 930.141159][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 930.176130][ T1538] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 931.784492][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.816231][T17068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 932.822795][T17068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 932.841369][T17068] vhci_hcd vhci_hcd.0: Device attached [ 933.507881][T17080] vhci_hcd: connection closed [ 933.508181][ T5917] vhci_hcd: stop threads [ 933.521224][ T5917] vhci_hcd: release socket [ 933.526986][ T5917] vhci_hcd: disconnect device [ 933.574257][ T5884] usb 40-1: enqueue for inactive port 0 [ 934.076863][ T5884] usb usb40-port1: attempt power cycle [ 934.157969][T17085] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 934.290227][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3199'. [ 934.353183][ T30] audit: type=1400 audit(1760652868.546:1059): avc: denied { setopt } for pid=17084 comm="syz.3.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 934.685717][ T5884] usb usb40-port1: unable to enumerate USB device [ 935.506187][T17086] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 935.525114][T17087] bond1: entered promiscuous mode [ 935.569229][T17087] bond1: entered allmulticast mode [ 935.585503][T17087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 935.620636][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 937.257034][T17115] lo speed is unknown, defaulting to 1000 [ 937.334286][T16815] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 937.792712][T17134] usb usb8: usbfs: process 17134 (syz.2.3208) did not claim interface 0 before use [ 937.942344][T16815] usb 4-1: config 0 has no interfaces? [ 937.976487][T16815] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 937.999722][T16815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.019951][T16815] usb 4-1: Product: syz [ 938.044429][T16815] usb 4-1: Manufacturer: syz [ 938.060026][T16815] usb 4-1: SerialNumber: syz [ 938.089748][T16815] usb 4-1: config 0 descriptor?? [ 938.270192][T16854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 938.332228][T16854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 938.351450][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 938.534768][T16854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 940.022132][ T5821] usb 4-1: USB disconnect, device number 13 [ 941.046944][T17175] usb usb8: usbfs: process 17175 (syz.4.3219) did not claim interface 0 before use [ 942.478568][T17183] comedi comedi0: Minor 7 could not be opened [ 944.425492][T16854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 945.897129][T17212] lo speed is unknown, defaulting to 1000 [ 945.950389][T16854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.021584][T16854] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.284899][ T5864] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 946.537936][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.545235][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.918881][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.926080][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.967170][ T5864] usb 3-1: config 0 has no interfaces? [ 947.009224][ T5864] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 947.034933][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.043122][ T5864] usb 3-1: Product: syz [ 947.052323][ T5864] usb 3-1: Manufacturer: syz [ 947.065393][ T5864] usb 3-1: SerialNumber: syz [ 947.073824][ T5864] usb 3-1: config 0 descriptor?? [ 947.325856][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 948.644193][ T5871] usb 3-1: USB disconnect, device number 21 [ 953.302514][T16854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.434065][ T30] audit: type=1400 audit(1760652887.616:1060): avc: denied { ioctl } for pid=17303 comm="syz.2.3245" path="socket:[58229]" dev="sockfs" ino=58229 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 953.531691][T16854] veth0_vlan: entered promiscuous mode [ 953.567382][T16854] veth1_vlan: entered promiscuous mode [ 953.615930][ T5821] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 953.973665][ T5821] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 954.012937][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.023925][T16854] veth0_macvtap: entered promiscuous mode [ 954.055388][ T5821] usb 1-1: Product: syz [ 954.075529][T16854] veth1_macvtap: entered promiscuous mode [ 954.086274][ T5821] usb 1-1: Manufacturer: syz [ 954.090920][ T5821] usb 1-1: SerialNumber: syz [ 954.151551][T16854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.195812][T16854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.299085][ T7391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.416593][ T7391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.456667][ T7391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.503341][ T7391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.731656][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.759690][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.972011][T14039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.108872][T14039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.124192][ T5821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 955.147156][ T5821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 955.158680][ T5821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 955.181483][ T5821] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 955.235384][ T5821] usb 1-1: USB disconnect, device number 19 [ 956.862943][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 959.454199][ T5871] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 959.657700][ T5871] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 959.687586][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.750057][ T5871] usb 4-1: Product: syz [ 959.767184][ T5871] usb 4-1: Manufacturer: syz [ 959.797966][ T5871] usb 4-1: SerialNumber: syz [ 959.927209][T13372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 959.937999][T13372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 959.947308][T13372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 959.961047][T13372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 959.968776][T13372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.041452][T17411] lo speed is unknown, defaulting to 1000 [ 960.607240][ T5917] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.718481][ T5871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 960.745819][ T5871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 960.768722][ T5871] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 960.786983][ T5871] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 960.800097][ T5917] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.816140][T17423] capability: warning: `syz.1.3269' uses deprecated v2 capabilities in a way that may be insecure [ 960.823693][ T5871] usb 4-1: USB disconnect, device number 14 [ 960.849654][T17423] tipc: Started in network mode [ 960.860488][T17423] tipc: Node identity ac141441, cluster identity 4711 [ 960.875850][T17423] tipc: Enabling of bearer rejected, failed to enable media [ 960.996223][ T5917] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.288354][ T5917] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.543223][T17411] chnl_net:caif_netlink_parms(): no params data found [ 961.625406][ T30] audit: type=1400 audit(1760652895.816:1061): avc: denied { create } for pid=17438 comm="syz.0.3276" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 961.703192][ T30] audit: type=1400 audit(1760652895.826:1062): avc: denied { mounton } for pid=17438 comm="syz.0.3276" path="/34/file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 962.068091][ T5830] Bluetooth: hci0: command tx timeout [ 962.322849][ T30] audit: type=1400 audit(1760652896.506:1063): avc: denied { unlink } for pid=16461 comm="syz-executor" name="file0" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 962.683790][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.715194][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.755955][T17411] bridge_slave_0: entered allmulticast mode [ 962.898617][T17411] bridge_slave_0: entered promiscuous mode [ 962.920881][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.937121][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.958412][T17411] bridge_slave_1: entered allmulticast mode [ 962.989857][T17411] bridge_slave_1: entered promiscuous mode [ 963.391296][T17479] usb usb8: usbfs: process 17479 (syz.4.3284) did not claim interface 0 before use [ 963.838579][T17411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.852976][T17411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.204150][ T5830] Bluetooth: hci0: command tx timeout [ 964.475422][T17497] comedi comedi0: Minor 7 could not be opened [ 966.224153][ T5830] Bluetooth: hci0: command tx timeout [ 966.407068][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.427934][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.552131][ T5917] bond0 (unregistering): Released all slaves [ 966.610183][T17411] team0: Port device team_slave_0 added [ 966.646777][T17411] team0: Port device team_slave_1 added [ 966.695649][ T5917] tipc: Disabling bearer [ 966.701642][ T5917] tipc: Left network mode [ 966.795375][T17411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.941101][T17531] usb usb8: usbfs: process 17531 (syz.4.3296) did not claim interface 0 before use [ 967.426645][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.453010][T17411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.572593][T17533] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 968.262566][T17411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.270134][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.296002][ C0] vkms_vblank_simulate: vblank timer overrun [ 968.313277][ T5830] Bluetooth: hci0: command tx timeout [ 968.313310][T17411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.695199][T17411] hsr_slave_0: entered promiscuous mode [ 968.710221][T17411] hsr_slave_1: entered promiscuous mode [ 969.236294][T17411] debugfs: 'hsr0' already exists in 'hsr' [ 969.248123][T17411] Cannot create hsr debugfs directory [ 970.632508][ T7391] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.661493][ T7391] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.736422][ T7391] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.757427][ T7391] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.965972][T17579] usb usb8: usbfs: process 17579 (syz.3.3308) did not claim interface 0 before use [ 972.075750][ T5917] hsr_slave_0: left promiscuous mode [ 972.095187][ T5917] hsr_slave_1: left promiscuous mode [ 972.101235][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.109521][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.117865][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.134227][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.296007][ T5917] veth1_macvtap: left promiscuous mode [ 972.336995][ T5917] veth0_macvtap: left promiscuous mode [ 972.362884][ T5917] veth1_vlan: left promiscuous mode [ 972.390868][ T5917] veth0_vlan: left promiscuous mode [ 972.589759][T17598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3311'. [ 972.749377][T17593] input: syz0 as /devices/virtual/input/input38 [ 973.451994][ T5917] team_slave_1 (unregistering): left promiscuous mode [ 973.475025][ T5917] team0 (unregistering): Port device team_slave_1 removed [ 975.014128][T13372] Bluetooth: hci3: command 0x0406 tx timeout [ 975.517746][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 976.724469][T17618] bridge_slave_1: left allmulticast mode [ 976.730132][T17618] bridge_slave_1: left promiscuous mode [ 976.758852][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.779078][T17618] bridge_slave_0: left allmulticast mode [ 976.790836][T17618] bridge_slave_0: left promiscuous mode [ 976.798804][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.335822][T17653] 9pnet_virtio: no channels available for device syz [ 978.360840][T17653] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 979.869463][T17661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3327'. [ 980.000239][T17411] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 980.080472][T17411] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 981.056450][T17411] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 981.097249][T17411] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 981.190230][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 981.648411][T17693] 9pnet_virtio: no channels available for device syz [ 981.848088][T17701] syzkaller1: entered promiscuous mode [ 981.853647][T17701] syzkaller1: entered allmulticast mode [ 982.676708][T17411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.694115][T17411] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.780292][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.787527][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.833531][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.840782][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.951450][T17411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 984.091067][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'. [ 984.100263][ T30] audit: type=1400 audit(1760652918.286:1064): avc: denied { bind } for pid=17737 comm="syz.1.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 984.105414][T17411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.428465][T17411] veth0_vlan: entered promiscuous mode [ 984.462929][T17411] veth1_vlan: entered promiscuous mode [ 984.629248][T17411] veth0_macvtap: entered promiscuous mode [ 984.680598][T17411] veth1_macvtap: entered promiscuous mode [ 984.732109][T17411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.778881][T17411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.977501][T14041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.004680][T14041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.117304][T14041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.155251][T14041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.392889][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.420000][ T30] audit: type=1400 audit(1760652920.516:1065): avc: denied { mounton } for pid=17748 comm="syz.3.3346" path="/63/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 986.469317][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.532707][T17758] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 986.541117][T17758] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 986.601853][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.781111][ T8151] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 986.789255][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.974906][T17769] syzkaller1: entered promiscuous mode [ 986.988238][ T8151] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 987.005074][T17769] syzkaller1: entered allmulticast mode [ 987.006649][ T8151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.136542][ T8151] usb 2-1: Product: syz [ 987.145065][ T8151] usb 2-1: Manufacturer: syz [ 987.154552][ T8151] usb 2-1: SerialNumber: syz [ 987.687209][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'. [ 987.917467][T17800] comedi comedi0: Minor 7 could not be opened [ 987.979856][ T8151] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 988.028481][ T8151] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 988.077366][ T8151] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 988.127799][ T8151] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 988.255915][ T8151] usb 2-1: USB disconnect, device number 23 [ 988.849826][T17821] syzkaller1: entered promiscuous mode [ 988.880006][T17821] syzkaller1: entered allmulticast mode [ 989.178226][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'. [ 989.472837][T17836] netlink: 'syz.4.3363': attribute type 1 has an invalid length. [ 989.771818][T17844] 9pnet_virtio: no channels available for device syz [ 992.432575][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 992.947888][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.102330][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 993.117225][T17877] bridge_slave_1: left allmulticast mode [ 993.122916][T17877] bridge_slave_1: left promiscuous mode [ 993.190253][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.425659][T17877] bridge_slave_0: left allmulticast mode [ 993.494292][T17886] 9pnet_virtio: no channels available for device syz [ 994.474151][T17877] bridge_slave_0: left promiscuous mode [ 994.480161][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.058476][T13372] Bluetooth: hci4: command 0x0406 tx timeout [ 995.364660][ T1538] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 995.791114][ T1538] usb 4-1: Using ep0 maxpacket: 32 [ 995.854787][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.914327][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.926217][ T1538] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 995.946401][ T1538] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 995.955046][ T1538] usb 4-1: Manufacturer: syz [ 995.966157][ T1538] usb 4-1: config 0 descriptor?? [ 997.149780][ T30] audit: type=1400 audit(1760652931.346:1066): avc: denied { append } for pid=17920 comm="syz.2.3387" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 997.331781][ T1538] usbhid 4-1:0.0: can't add hid device: -32 [ 997.340753][ T1538] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 997.525615][T17928] input: syz0 as /devices/virtual/input/input39 [ 997.824084][T17933] 9pnet_virtio: no channels available for device syz [ 998.920555][ T976] usb 4-1: USB disconnect, device number 15 [ 999.130532][ T30] audit: type=1326 audit(1760652933.316:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 999.211735][ T30] audit: type=1326 audit(1760652933.316:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 999.282431][T17942] syzkaller1: entered promiscuous mode [ 999.294592][ T30] audit: type=1326 audit(1760652933.326:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 999.394972][ T30] audit: type=1326 audit(1760652933.326:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 999.418619][ T30] audit: type=1326 audit(1760652933.326:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 999.466714][T17942] syzkaller1: entered allmulticast mode [ 999.490086][ T30] audit: type=1326 audit(1760652933.326:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 999.998398][ T30] audit: type=1326 audit(1760652933.326:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 1000.022050][ T30] audit: type=1326 audit(1760652933.326:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 1000.058158][ T30] audit: type=1326 audit(1760652933.366:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17935 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5fc4b8eec9 code=0x7ffc0000 [ 1001.703131][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1002.834167][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1003.684186][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 1003.771072][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.797535][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.844442][ T5871] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1003.861939][ T5871] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1004.515128][ T5871] usb 5-1: Manufacturer: syz [ 1004.543840][ T5871] usb 5-1: config 0 descriptor?? [ 1005.279177][ T5871] usbhid 5-1:0.0: can't add hid device: -32 [ 1005.285820][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1006.682060][ T8151] usb 5-1: USB disconnect, device number 14 [ 1007.197703][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'. [ 1007.208464][T18019] bridge_slave_1: left allmulticast mode [ 1007.214854][T18019] bridge_slave_1: left promiscuous mode [ 1007.223956][T18019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.261482][T18019] bridge_slave_0: left allmulticast mode [ 1007.302839][T18019] bridge_slave_0: left promiscuous mode [ 1007.394049][T18019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.015308][T18058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3429'. [ 1010.384172][T13372] Bluetooth: hci5: command 0x0406 tx timeout [ 1012.383641][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1013.275152][T18102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1013.910097][T18111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3444'. [ 1014.749982][T18116] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3441'. [ 1015.025169][T18123] usb usb8: usbfs: process 18123 (syz.1.3447) did not claim interface 0 before use [ 1016.727259][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3454'. [ 1017.962477][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'. [ 1018.755306][T18180] usb usb8: usbfs: process 18180 (syz.2.3464) did not claim interface 0 before use [ 1019.397209][T18186] mkiss: ax0: crc mode is auto. [ 1019.614376][T18192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3468'. [ 1020.542994][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1020.543008][ T30] audit: type=1400 audit(1760652954.726:1119): avc: denied { ioctl } for pid=18196 comm="syz.2.3470" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1022.053132][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1023.257437][T18230] usb usb8: usbfs: process 18230 (syz.4.3478) did not claim interface 0 before use [ 1023.858177][T18231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1024.722902][T18245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1025.733152][T18265] usb usb8: usbfs: process 18265 (syz.1.3489) did not claim interface 0 before use [ 1026.217979][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 1026.844164][ T8151] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1027.070743][ T8151] usb 3-1: Using ep0 maxpacket: 32 [ 1027.081396][ T8151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.093518][ T8151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.112098][T18282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3495'. [ 1027.134569][ T8151] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1027.144035][ T8151] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1027.187798][ T8151] usb 3-1: Manufacturer: syz [ 1027.324162][ T8151] usb 3-1: config 0 descriptor?? [ 1028.172464][ T8151] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 1028.827489][ T8151] ft260 0003:0403:6030.000B: failed to retrieve chip version [ 1028.837113][ T8151] ft260 0003:0403:6030.000B: probe with driver ft260 failed with error -32 [ 1029.990755][ T5821] usb 3-1: USB disconnect, device number 22 [ 1030.077507][ T30] audit: type=1400 audit(1760652964.276:1120): avc: denied { ioctl } for pid=18302 comm="syz.3.3502" path="socket:[63840]" dev="sockfs" ino=63840 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1030.172965][T18307] random: crng reseeded on system resumption [ 1032.110372][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1032.815194][T18339] usb usb8: usbfs: process 18339 (syz.3.3511) did not claim interface 0 before use [ 1033.923501][T18353] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1034.415332][ T36] Bluetooth: (null): Invalid header checksum [ 1034.442979][T18362] input: syz0 as /devices/virtual/input/input40 [ 1034.469351][ T36] Bluetooth: (null): Invalid header checksum [ 1034.525172][ T36] Bluetooth: (null): Invalid header checksum [ 1034.642141][ T12] Bluetooth: (null): Invalid header checksum [ 1034.779883][ T5917] Bluetooth: (null): Invalid header checksum [ 1034.856284][ T5917] Bluetooth: (null): Invalid header checksum [ 1034.965435][ T5917] Bluetooth: (null): Invalid header checksum [ 1035.550882][T18386] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1037.696546][T18397] Process accounting resumed [ 1039.050989][T18418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3537'. [ 1041.110878][T13372] Bluetooth: hci1: command 0x0406 tx timeout [ 1042.688034][T18453] Process accounting resumed [ 1043.029666][T18460] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1047.206524][T18502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3564'. [ 1049.107753][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1049.145590][T18528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1049.812221][T18528] vlan2: entered allmulticast mode [ 1049.841893][T18528] hsr0: entered allmulticast mode [ 1049.866792][T18528] hsr_slave_0: entered allmulticast mode [ 1049.873277][T18528] hsr_slave_1: entered allmulticast mode [ 1050.171212][ T30] audit: type=1400 audit(1760652984.366:1121): avc: denied { read } for pid=18533 comm="syz.2.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1051.363133][T18553] usb usb8: usbfs: process 18553 (syz.4.3579) did not claim interface 0 before use [ 1053.182214][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'. [ 1053.250788][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1053.310986][ T30] audit: type=1400 audit(1760652987.506:1122): avc: denied { listen } for pid=18573 comm="syz.0.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1053.563662][T18584] netlink: 'syz.1.3589': attribute type 27 has an invalid length. [ 1054.388045][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.743251][T18577] orangefs_mount: mount request failed with -4 [ 1054.947620][T18600] block nbd0: shutting down sockets [ 1057.509403][T18610] usb usb8: usbfs: process 18610 (syz.0.3596) did not claim interface 0 before use [ 1058.598743][ T5871] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1058.850735][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1058.878444][ T5871] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1058.888067][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.535361][ T5871] usb 3-1: config 0 descriptor?? [ 1061.574576][T18642] orangefs_mount: mount request failed with -4 [ 1061.696694][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.734568][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.524531][ T976] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1065.459076][ T30] audit: type=1400 audit(1760652999.656:1123): avc: denied { mount } for pid=18651 comm="syz.0.3610" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1065.489985][T18679] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1065.505544][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 1065.540959][ T976] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1065.698883][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.718406][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.743098][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.774114][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.794404][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1065.803650][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.836989][T18683] ubi31: attaching mtd0 [ 1065.866858][T18683] ubi31: scanning is finished [ 1065.871742][T18683] ubi31: empty MTD device detected [ 1066.640232][ T976] usb 4-1: GET_CAPABILITIES returned 0 [ 1066.725477][ T976] usbtmc 4-1:16.0: can't read capabilities [ 1066.891830][ T5871] usbhid 3-1:0.0: can't add hid device: -32 [ 1066.897922][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1067.005589][ T976] usb 4-1: USB disconnect, device number 16 [ 1067.017588][ T30] audit: type=1400 audit(1760653001.156:1124): avc: denied { append } for pid=18678 comm="syz.4.3618" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1067.520916][ T30] audit: type=1400 audit(1760653001.716:1125): avc: denied { shutdown } for pid=18667 comm="syz.3.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1067.615843][ T8151] usb 3-1: USB disconnect, device number 23 [ 1068.131377][T18683] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.184389][T18683] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.202041][T18683] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.223360][T18683] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.241788][T18683] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.257559][T18683] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.276895][T18683] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 434837574 [ 1068.309787][T18683] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.342531][T18699] ubi31: background thread "ubi_bgt31d" started, PID 18699 [ 1069.184083][ T30] audit: type=1400 audit(1760653003.366:1126): avc: denied { unmount } for pid=16461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1069.340835][ T30] audit: type=1400 audit(1760653003.536:1127): avc: denied { accept } for pid=18712 comm="syz.3.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1069.517921][T18730] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1069.961217][T18714] infiniband syz0: set active [ 1069.967673][T18714] infiniband syz0: added veth1_vlan [ 1070.070143][T18714] RDS/IB: syz0: added [ 1070.075195][T18714] smc: adding ib device syz0 with port count 1 [ 1070.083639][T18714] smc: ib device syz0 port 1 has no pnetid [ 1070.497588][T18747] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1072.207551][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033162c00: rx timeout, send abort [ 1072.607244][T18771] random: crng reseeded on system resumption [ 1072.707717][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033161400: rx timeout, send abort [ 1072.716439][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033162c00: abort rx timeout. Force session deactivation [ 1073.215988][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033161400: abort rx timeout. Force session deactivation [ 1073.446195][T18781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3647'. [ 1074.018413][T18789] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3651'. [ 1075.526273][ T5830] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 1075.614080][T18814] usb usb8: usbfs: process 18814 (syz.1.3656) did not claim interface 0 before use [ 1075.708680][T18816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1076.444263][T18827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1078.014472][ T7391] Bluetooth: (null): Invalid header checksum [ 1078.020556][ T7391] Bluetooth: (null): Invalid header checksum [ 1078.082671][T18864] usb usb8: usbfs: process 18864 (syz.1.3673) did not claim interface 0 before use [ 1078.124464][T18434] Bluetooth: (null): Invalid header checksum [ 1078.309440][ T12] Bluetooth: (null): Invalid header checksum [ 1078.346050][T14041] Bluetooth: (null): Invalid header checksum [ 1078.454940][ T7391] Bluetooth: (null): Invalid header checksum [ 1078.566038][ T12] Bluetooth: (null): Invalid header checksum [ 1080.349398][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1080.706617][T18913] usb usb8: usbfs: process 18913 (syz.0.3689) did not claim interface 0 before use [ 1081.330223][T18926] 9pnet_virtio: no channels available for device syz [ 1081.542570][T18935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1082.939007][T18952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'. [ 1084.189079][T18973] usb usb8: usbfs: process 18973 (syz.1.3707) did not claim interface 0 before use [ 1084.738643][T18968] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 1085.021653][T18980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1085.223006][T18982] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1087.375383][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1088.464864][T18434] Bluetooth: (null): Invalid header checksum [ 1088.512352][T18434] Bluetooth: (null): Invalid header checksum [ 1089.417746][T19023] orangefs_mount: mount request failed with -4 [ 1090.644168][T19055] overlayfs: failed to resolve './file1': -2 [ 1090.796907][T17203] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1091.504322][T17203] usb 5-1: Using ep0 maxpacket: 32 [ 1091.527107][T17203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.597417][T17203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.615431][T17203] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1091.628456][T17203] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1091.636898][T17203] usb 5-1: Manufacturer: syz [ 1091.649452][T17203] usb 5-1: config 0 descriptor?? [ 1091.802363][ T30] audit: type=1400 audit(1760653025.886:1128): avc: denied { setattr } for pid=19068 comm="syz.2.3740" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1092.810813][T17203] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 1092.934716][T19086] overlayfs: failed to resolve './file1': -2 [ 1093.186386][T17203] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 1093.194193][T17203] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -5 [ 1093.469329][T19090] 9pnet_virtio: no channels available for device syz [ 1094.416561][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ddf800: rx timeout, send abort [ 1094.834126][T17203] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1094.916683][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ddfc00: rx timeout, send abort [ 1094.925054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ddf800: abort rx timeout. Force session deactivation [ 1094.992198][T17203] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1095.010087][T17203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.018650][T17203] usb 3-1: Product: syz [ 1095.023154][T17203] usb 3-1: Manufacturer: syz [ 1095.028510][T17203] usb 3-1: SerialNumber: syz [ 1095.050482][T19125] overlayfs: failed to resolve './file1': -2 [ 1095.342176][T19119] orangefs_mount: mount request failed with -4 [ 1095.425332][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ddfc00: abort rx timeout. Force session deactivation [ 1095.485069][ T5821] usb 5-1: USB disconnect, device number 15 [ 1095.511594][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3764'. [ 1095.966397][T17203] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1096.009363][T17203] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1096.179974][T17203] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1096.825553][T17203] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1096.933742][T17203] usb 3-1: USB disconnect, device number 24 [ 1098.151505][T19173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1098.326760][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1099.200828][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3782'. [ 1099.600365][T19188] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3780'. [ 1099.635162][T19187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1100.138126][ T5830] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1100.383781][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1100.396924][T19202] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1100.410710][T19204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1100.588274][ T30] audit: type=1400 audit(1760653034.786:1129): avc: denied { getopt } for pid=19209 comm="syz.1.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1100.715237][ T8151] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1100.926004][ T8151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1101.136262][ T8151] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1101.289832][ T8151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.927705][ T8151] usb 5-1: config 0 descriptor?? [ 1102.339516][T19233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.353534][T19233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.324401][T19216] dns_resolver: Unsupported content type (5) [ 1104.165715][ T5830] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1104.177838][ T5830] Bluetooth: hci3: Injecting HCI hardware error event [ 1104.188499][ T5830] Bluetooth: hci3: hardware error 0x00 [ 1104.405911][ T8151] usbhid 5-1:0.0: can't add hid device: -71 [ 1104.411907][ T8151] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1104.434512][T19243] Bluetooth: MGMT ver 1.23 [ 1104.543566][ T8151] usb 5-1: USB disconnect, device number 16 [ 1106.304087][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1107.341237][T19268] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1109.325810][T19317] 9pnet_virtio: no channels available for device syz [ 1109.974062][T19318] ubi: mtd0 is already attached to ubi31 [ 1111.174147][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1111.666353][T14033] Bluetooth: (null): Invalid header checksum [ 1111.674137][T14033] Bluetooth: (null): Invalid header checksum [ 1111.718833][T14033] Bluetooth: (null): Invalid header checksum [ 1111.725780][T14033] Bluetooth: (null): Invalid header checksum [ 1111.770312][T19338] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3831'. [ 1111.839784][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1111.863401][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.905924][ T9] usb 3-1: Product: syz [ 1111.922167][ T9] usb 3-1: Manufacturer: syz [ 1111.941328][ T9] usb 3-1: SerialNumber: syz [ 1112.323138][T19355] 9pnet_virtio: no channels available for device syz [ 1112.373857][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559d8400: rx timeout, send abort [ 1112.874031][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559d8000: rx timeout, send abort [ 1112.883235][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559d8400: abort rx timeout. Force session deactivation [ 1113.382263][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559d8000: abort rx timeout. Force session deactivation [ 1113.597831][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1113.632065][ T5830] Bluetooth: to_multiplier 0 < 10 [ 1113.657123][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1113.688214][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1113.731059][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1113.754447][ T9] usb 3-1: USB disconnect, device number 25 [ 1115.205482][T19395] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1115.896264][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 1115.902780][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.313768][ T8151] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1119.661692][ T8151] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1120.239519][ T8151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.263911][T19455] input: syz0 as /devices/virtual/input/input41 [ 1120.270469][ T8151] usb 1-1: Product: syz [ 1120.278179][ T8151] usb 1-1: Manufacturer: syz [ 1120.828815][ T8151] usb 1-1: SerialNumber: syz [ 1122.048400][ T8151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1122.091421][ T8151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1122.151628][ T8151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1122.188758][ T8151] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1122.213950][ T8151] usb 1-1: USB disconnect, device number 20 [ 1122.321302][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'. [ 1124.411583][ T5830] Bluetooth: to_multiplier 0 < 10 [ 1126.762621][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 1126.947997][T19561] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1128.324559][T19584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3911'. [ 1128.779253][T19593] usb usb8: usbfs: process 19593 (syz.0.3912) did not claim interface 0 before use [ 1134.164002][T19654] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3929'. [ 1134.253663][T19660] comedi comedi0: Minor 7 could not be opened [ 1134.666649][T19664] lo speed is unknown, defaulting to 1000 [ 1136.115527][T19677] tipc: Enabled bearer , priority 0 [ 1136.128471][T19677] syzkaller0: entered promiscuous mode [ 1136.131080][T19680] binder_alloc: 19678: binder_alloc_buf, no vma [ 1136.138300][T19677] syzkaller0: entered allmulticast mode [ 1136.174112][T16815] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1136.199869][T19677] tipc: Resetting bearer [ 1136.210420][T19676] tipc: Resetting bearer [ 1136.236419][T19676] tipc: Disabling bearer [ 1136.355803][T16815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1136.374423][T16815] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1136.383720][T16815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.505634][T16815] usb 5-1: config 0 descriptor?? [ 1136.568011][T19687] random: crng reseeded on system resumption [ 1136.853312][T19692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.868370][T19692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.939976][T19665] infiniband syz1: set active [ 1136.945539][T19665] infiniband syz1: added syz_tun [ 1136.952560][T19665] syz1: rxe_create_cq: returned err = -12 [ 1136.958849][T19665] infiniband syz1: Couldn't create ib_mad CQ [ 1137.018201][T19665] infiniband syz1: Couldn't open port 1 [ 1137.474725][T19665] RDS/IB: syz1: added [ 1137.495663][T19665] smc: adding ib device syz1 with port count 1 [ 1137.517944][T19665] smc: ib device syz1 port 1 has no pnetid [ 1137.895775][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 1137.936469][T19702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3946'. [ 1138.018053][T19702] vlan2: entered allmulticast mode [ 1138.178200][T19702] hsr0: entered allmulticast mode [ 1138.188609][T19702] hsr_slave_0: entered allmulticast mode [ 1138.210088][T19702] hsr_slave_1: entered allmulticast mode [ 1138.513550][T16815] usbhid 5-1:0.0: can't add hid device: -71 [ 1138.542001][T16815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1138.598714][T16815] usb 5-1: USB disconnect, device number 17 [ 1139.618020][T19723] netlink: 'syz.3.3951': attribute type 1 has an invalid length. [ 1139.674381][T19723] netlink: 'syz.3.3951': attribute type 2 has an invalid length. [ 1141.834352][ T5871] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1142.564866][T19747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1142.616732][ T5871] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1142.626640][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.650747][ T5871] usb 2-1: Product: syz [ 1142.663350][ T5871] usb 2-1: Manufacturer: syz [ 1142.675392][ T5871] usb 2-1: SerialNumber: syz [ 1144.037499][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1144.119046][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1144.187871][ T5871] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1144.254501][ T5871] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1144.311636][ T5871] usb 2-1: USB disconnect, device number 24 [ 1145.022392][T19758] orangefs_mount: mount request failed with -4 [ 1146.041581][T19778] comedi comedi0: Minor 7 could not be opened [ 1146.261366][T19780] netlink: 620 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1147.024289][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1147.767854][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1147.784321][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.812536][ T9] usb 4-1: Product: syz [ 1147.834917][ T9] usb 4-1: Manufacturer: syz [ 1147.839585][ T9] usb 4-1: SerialNumber: syz [ 1148.584077][T19821] netlink: 620 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1148.745604][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1148.794354][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1148.812300][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1148.905337][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1149.213722][T19831] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 1149.421109][ T9] usb 4-1: USB disconnect, device number 17 [ 1149.501631][T19831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1149.535033][T19834] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1149.656562][T19828] bond1: (slave veth0_to_bond): making interface the new active one [ 1149.695542][T19828] veth0_to_bond: entered promiscuous mode [ 1149.702753][T19828] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1149.738501][T19836] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c0045627, magic 56 != 6b] [ 1149.831257][T19831] vlan2: entered allmulticast mode [ 1149.918614][T19831] veth0_to_bond: entered allmulticast mode [ 1149.967267][T19831] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1151.037212][T19849] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1151.126923][ T30] audit: type=1400 audit(1760653085.326:1130): avc: denied { wake_alarm } for pid=19856 comm="syz.4.3997" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1151.155297][T19857] netlink: 620 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1151.170070][T19769] Set syz1 is full, maxelem 65536 reached [ 1152.145136][T19864] orangefs_mount: mount request failed with -4 [ 1152.514102][ T5830] Bluetooth: to_multiplier 0 < 10 [ 1153.654046][T19898] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1153.939305][T19900] netlink: 620 bytes leftover after parsing attributes in process `syz.0.4010'. [ 1154.554411][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 1160.832553][T19962] comedi comedi0: Minor 7 could not be opened [ 1160.894757][T19962] autofs: Bad value for 'fd' [ 1161.284714][T19965] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1161.291282][T19965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1161.303057][T19965] vhci_hcd vhci_hcd.0: Device attached [ 1161.574090][ T5864] usb 42-1: SetAddress Request (2) to port 0 [ 1161.580174][ T5864] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1161.929136][T19966] vhci_hcd: connection reset by peer [ 1161.989938][ T5943] vhci_hcd: stop threads [ 1162.003928][ T5943] vhci_hcd: release socket [ 1162.014464][ T5943] vhci_hcd: disconnect device [ 1162.640486][T19988] fuse: Bad value for 'group_id' [ 1162.649019][T19988] fuse: Bad value for 'group_id' [ 1162.820495][ T30] audit: type=1400 audit(1760653352.859:1131): avc: denied { append } for pid=19987 comm="syz.1.4036" name="file0" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1162.884400][ T30] audit: type=1400 audit(1760653352.859:1132): avc: denied { open } for pid=19987 comm="syz.1.4036" path="/195/file0" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1163.190685][T19997] netlink: 620 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1163.382557][T20007] comedi comedi0: Minor 7 could not be opened [ 1163.392934][T20007] autofs: Bad value for 'fd' [ 1163.568973][T20011] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1163.984449][T18433] veth0_to_bond: left promiscuous mode [ 1165.336055][T20031] fuse: Bad value for 'group_id' [ 1165.475064][T20031] fuse: Bad value for 'group_id' [ 1166.478777][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 1166.624124][ T5864] usb 42-1: device descriptor read/8, error -110 [ 1166.729379][T20050] usb usb8: usbfs: process 20050 (syz.4.4055) did not claim interface 0 before use [ 1167.393465][ T5864] usb usb42-port1: attempt power cycle [ 1167.434182][T20060] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1167.455904][T20058] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4059'. [ 1167.555131][T20065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1168.065129][ T5864] usb usb42-port1: unable to enumerate USB device [ 1170.223890][T20107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1170.304547][T17203] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1170.484184][T17203] usb 2-1: Using ep0 maxpacket: 8 [ 1170.492049][T17203] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1170.511387][T17203] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.531984][T17203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1170.555933][T17203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1170.584217][T17203] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.619957][T17203] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1170.716123][T17203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.278713][T17203] usb 2-1: GET_CAPABILITIES returned 0 [ 1171.323532][T17203] usbtmc 2-1:16.0: can't read capabilities [ 1172.227439][T17203] usb 2-1: USB disconnect, device number 25 [ 1172.333388][T20134] lo speed is unknown, defaulting to 1000 [ 1173.172375][ T1538] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1173.540907][ T1538] usb 5-1: config 0 has no interfaces? [ 1173.844092][ T1538] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1173.863479][ T1538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.991232][ T1538] usb 5-1: Product: syz [ 1174.004727][ T1538] usb 5-1: Manufacturer: syz [ 1174.009364][ T1538] usb 5-1: SerialNumber: syz [ 1174.081724][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1174.526398][ T1538] usb 5-1: config 0 descriptor?? [ 1174.574554][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1174.805554][T20138] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1174.973041][T20162] comedi comedi0: Minor 7 could not be opened [ 1174.998889][T20162] autofs: Unknown parameter '00000000000000000000' [ 1175.024233][ T5871] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1175.144576][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4092'. [ 1175.313716][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1175.365412][ T5871] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1175.412065][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.464129][ T5871] usb 2-1: config 0 descriptor?? [ 1176.654821][ T976] usb 5-1: USB disconnect, device number 18 [ 1176.680938][T20176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.716426][T20176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.914138][T20183] input: syz0 as /devices/virtual/input/input42 [ 1177.273458][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.192210][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 1178.198288][ T5871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1178.239459][ T5871] usb 2-1: USB disconnect, device number 26 [ 1178.529035][T20203] fuse: Unknown parameter 'use00000000000000000000' [ 1180.986808][T20228] : renamed from veth0_macvtap (while UP) [ 1181.104167][T20231] usb usb8: usbfs: process 20231 (syz.1.4113) did not claim interface 0 before use [ 1183.104332][ T5871] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1183.669002][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1184.044076][ T5871] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1184.053660][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.176015][ T5871] usb 3-1: config 0 descriptor?? [ 1184.563019][T20265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.576465][T20265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.695429][T20286] usb usb8: usbfs: process 20286 (syz.1.4125) did not claim interface 0 before use [ 1186.893406][T20299] dns_resolver: Unsupported content type (5) [ 1187.362898][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 1187.403525][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1187.475621][ T5871] usb 3-1: USB disconnect, device number 26 [ 1189.769910][T20337] usb usb8: usbfs: process 20337 (syz.1.4141) did not claim interface 0 before use [ 1192.691009][T20374] 9pnet_virtio: no channels available for device syz [ 1193.113799][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1193.284041][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1193.304468][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1193.323692][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.343860][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1193.364247][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1193.384081][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.455860][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1193.474224][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.730564][ T30] audit: type=1400 audit(1760653383.929:1133): avc: denied { execute } for pid=20381 comm="syz.3.4156" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1193.759616][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 1193.765325][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1193.821191][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1194.708024][ T30] audit: type=1400 audit(1760653384.019:1134): avc: denied { connect } for pid=20381 comm="syz.3.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1194.745282][T17203] usb 1-1: USB disconnect, device number 21 [ 1195.648769][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4159'. [ 1196.454255][T18433] Bluetooth: (null): Invalid header checksum [ 1196.466792][T18433] Bluetooth: (null): Invalid header checksum [ 1196.496503][T18433] Bluetooth: (null): Invalid header checksum [ 1196.513210][T18433] Bluetooth: (null): Invalid header checksum [ 1196.624451][ T67] Bluetooth: (null): Invalid header checksum [ 1196.801104][T20418] fuse: Unknown parameter 'grou00000000000000000000' [ 1197.558882][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.920995][T20430] lo speed is unknown, defaulting to 1000 [ 1198.036337][T20439] binder_alloc: 20438: binder_alloc_buf, no vma [ 1198.088931][T20441] usb usb1: usbfs: process 20441 (syz.3.4175) did not claim interface 0 before use [ 1198.092415][ T30] audit: type=1400 audit(1760653388.289:1135): avc: denied { append } for pid=20440 comm="syz.3.4175" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1198.196628][ T5871] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1199.114259][ T976] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1199.275475][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 1199.312285][ T976] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1199.364066][ T5871] usb 3-1: config 0 has no interfaces? [ 1199.369903][ T976] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1199.407286][ T5871] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1199.423174][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1199.470060][ T976] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1199.471238][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.533567][ T976] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1199.539609][ T5871] usb 3-1: Product: syz [ 1199.551490][T20451] random: crng reseeded on system resumption [ 1199.561088][ T5871] usb 3-1: Manufacturer: syz [ 1199.565869][ T5871] usb 3-1: SerialNumber: syz [ 1199.577677][ T976] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1200.424621][ T5871] usb 3-1: config 0 descriptor?? [ 1200.431674][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.598841][T20457] tipc: Started in network mode [ 1200.603803][T20457] tipc: Node identity 3a27d3e8f9a5, cluster identity 4711 [ 1200.611675][T20457] tipc: Enabled bearer , priority 0 [ 1200.620378][T20457] syzkaller0: entered promiscuous mode [ 1200.639503][T20457] syzkaller0: entered allmulticast mode [ 1200.749031][T20456] tipc: Resetting bearer [ 1200.806822][ T976] usb 2-1: GET_CAPABILITIES returned 0 [ 1200.813015][ T976] usbtmc 2-1:16.0: can't read capabilities [ 1200.827809][T20456] tipc: Disabling bearer [ 1200.939563][ T5871] usb 2-1: USB disconnect, device number 27 [ 1201.711670][T20443] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1203.425208][T20485] usb usb8: usbfs: process 20485 (syz.0.4178) did not claim interface 0 before use [ 1206.105046][T20513] tipc: Enabled bearer , priority 0 [ 1206.112412][T20513] syzkaller0: entered promiscuous mode [ 1206.117982][T20513] syzkaller0: entered allmulticast mode [ 1206.164176][ T1538] usb 3-1: USB disconnect, device number 27 [ 1206.172252][T20512] tipc: Resetting bearer [ 1206.250253][T20512] tipc: Disabling bearer [ 1206.491429][T20520] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 1206.519845][T20520] netlink: 'syz.3.4192': attribute type 2 has an invalid length. [ 1207.435518][T20539] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4199'. [ 1207.590182][T20533] input: syz0 as /devices/virtual/input/input43 [ 1207.725662][T20529] dns_resolver: Unsupported content type (5) [ 1209.392200][T20560] lo speed is unknown, defaulting to 1000 [ 1209.701645][T20572] comedi comedi0: Minor 7 could not be opened [ 1209.707864][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1209.714171][T17203] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1209.888839][T17203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1209.940772][ T9] usb 1-1: config 0 has no interfaces? [ 1209.946788][T17203] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1210.034920][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1210.044225][T17203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.155972][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.179814][ T9] usb 1-1: Product: syz [ 1210.194610][ T9] usb 1-1: Manufacturer: syz [ 1210.213290][T17203] usb 4-1: config 0 descriptor?? [ 1210.220953][ T9] usb 1-1: SerialNumber: syz [ 1210.342677][ T9] usb 1-1: config 0 descriptor?? [ 1210.508703][T20581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.520351][T20581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.167736][ T9] usb 1-1: USB disconnect, device number 22 [ 1213.526997][T17203] usbhid 4-1:0.0: can't add hid device: -71 [ 1213.535073][T17203] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1213.548197][T17203] usb 4-1: USB disconnect, device number 18 [ 1214.125675][T20630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4221'. [ 1214.186996][T20615] input: syz0 as /devices/virtual/input/input44 [ 1215.579830][T20643] binder: BINDER_SET_CONTEXT_MGR already set [ 1215.593264][T20643] binder: 20642:20643 ioctl 4018620d 200000004a80 returned -16 [ 1216.096029][T20650] lo speed is unknown, defaulting to 1000 [ 1216.394438][T16815] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1216.521992][ T976] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1216.687129][T20665] ubi: mtd0 is already attached to ubi31 [ 1216.827634][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1217.148699][T16815] usb 2-1: config 0 has no interfaces? [ 1217.155869][T16815] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1217.173715][T16815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.228661][T16815] usb 2-1: Product: syz [ 1217.242789][T16815] usb 2-1: Manufacturer: syz [ 1217.272433][T16815] usb 2-1: SerialNumber: syz [ 1217.318239][T16815] usb 2-1: config 0 descriptor?? [ 1217.325626][ T976] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1217.389004][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.482976][ T976] usb 3-1: config 0 descriptor?? [ 1217.607542][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1217.875438][T20679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.885330][T20679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.997585][T20680] input: syz0 as /devices/virtual/input/input45 [ 1219.050731][T17203] usb 2-1: USB disconnect, device number 28 [ 1219.172353][T20682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1219.178908][T20682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1219.197246][T20682] vhci_hcd vhci_hcd.0: Device attached [ 1219.278394][T20688] vhci_hcd: connection closed [ 1219.279073][ T67] vhci_hcd: stop threads [ 1219.289727][ T67] vhci_hcd: release socket [ 1219.294818][ T67] vhci_hcd: disconnect device [ 1220.318628][ T976] usbhid 3-1:0.0: can't add hid device: -71 [ 1220.344321][ T976] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1220.415940][T20699] 9pnet_virtio: no channels available for device syz [ 1221.632610][ T976] usb 3-1: USB disconnect, device number 28 [ 1221.759166][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1221.773802][T20706] binder: BINDER_SET_CONTEXT_MGR already set [ 1221.779963][T20706] binder: 20705:20706 ioctl 4018620d 200000004a80 returned -16 [ 1222.467638][T18433] Bluetooth: (null): Invalid header checksum [ 1222.639329][T18433] Bluetooth: (null): Invalid header checksum [ 1222.648349][T18433] Bluetooth: (null): Invalid header checksum [ 1222.687361][T14033] Bluetooth: (null): Invalid header checksum [ 1223.474996][T20728] usb usb8: usbfs: process 20728 (syz.3.4250) did not claim interface 0 before use [ 1224.220833][T20738] random: crng reseeded on system resumption [ 1225.207649][T20743] tipc: Started in network mode [ 1225.212677][T20743] tipc: Node identity e2d925277c6f, cluster identity 4711 [ 1225.227962][T20743] tipc: Enabled bearer , priority 0 [ 1225.265528][T20748] syzkaller0: entered promiscuous mode [ 1225.271079][T20748] syzkaller0: entered allmulticast mode [ 1225.484904][T20742] tipc: Resetting bearer [ 1225.845645][T14033] Bluetooth: (null): Invalid header checksum [ 1226.111577][T20742] tipc: Disabling bearer [ 1226.120551][T14033] Bluetooth: (null): Invalid header checksum [ 1226.146302][T14033] Bluetooth: (null): Invalid header checksum [ 1226.152393][T14033] Bluetooth: (null): Invalid header checksum [ 1226.176333][T18433] Bluetooth: (null): Invalid header checksum [ 1226.653431][T20770] tipc: Enabled bearer , priority 0 [ 1226.771799][T20765] tipc: Resetting bearer [ 1226.879750][T20773] input: syz0 as /devices/virtual/input/input46 [ 1227.064100][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1227.215693][ T9] usb 3-1: config 0 has no interfaces? [ 1227.244825][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1227.262751][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.272237][ T9] usb 3-1: Product: syz [ 1227.276652][ T9] usb 3-1: Manufacturer: syz [ 1227.281351][ T9] usb 3-1: SerialNumber: syz [ 1227.298155][ T9] usb 3-1: config 0 descriptor?? [ 1227.772708][ T1538] tipc: Node number set to 2662737191 [ 1227.794319][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1227.975148][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1227.985376][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.993672][ T9] usb 5-1: Product: syz [ 1227.999067][ T9] usb 5-1: Manufacturer: syz [ 1228.003815][ T9] usb 5-1: SerialNumber: syz [ 1228.016272][ T5830] Bluetooth: hci1: Malformed Event: 0x02 [ 1228.073201][T20792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1228.858443][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1228.872430][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1228.882589][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1228.905687][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1228.931622][ T9] usb 5-1: USB disconnect, device number 19 [ 1230.628856][T20765] tipc: Disabling bearer [ 1230.662611][T20776] lo speed is unknown, defaulting to 1000 [ 1231.298217][T20830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1232.004217][ T8151] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1232.099419][T18433] Bluetooth: (null): Invalid header checksum [ 1232.218528][T18433] Bluetooth: (null): Invalid header checksum [ 1232.224832][T18433] Bluetooth: (null): Invalid header checksum [ 1232.269621][T18433] Bluetooth: (null): Invalid header checksum [ 1232.298393][ T8151] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1232.340186][ T8151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.367258][ T8151] usb 5-1: Product: syz [ 1232.374423][T18433] Bluetooth: (null): Invalid header checksum [ 1232.377850][ T8151] usb 5-1: Manufacturer: syz [ 1232.402310][ T8151] usb 5-1: SerialNumber: syz [ 1232.486699][T16815] usb 3-1: USB disconnect, device number 29 [ 1232.584335][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1232.665567][T20850] overlayfs: failed to resolve './file0': -2 [ 1232.744078][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1232.752978][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.765833][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.777772][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1232.787528][ T9] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1232.797662][ T9] usb 4-1: Manufacturer: syz [ 1232.816173][ T9] usb 4-1: config 0 descriptor?? [ 1233.256430][ T9] ft260 0003:0403:6030.000D: unknown main item tag 0x7 [ 1233.291038][ T8151] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1233.363244][ T8151] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1233.451166][ T9] ft260 0003:0403:6030.000D: chip code: 6424 8183 [ 1233.476901][ T8151] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1233.521254][ T8151] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1233.651560][ T9] ft260 0003:0403:6030.000D: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1233.673371][ T8151] usb 5-1: USB disconnect, device number 20 [ 1233.852100][ T9] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 1233.863775][ T9] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 1233.878724][ T9] ft260 0003:0403:6030.000D: failed to reset I2C controller: -71 [ 1233.943615][ T9] usb 4-1: USB disconnect, device number 19 [ 1234.126882][T20867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1234.220950][T20873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4299'. [ 1234.282555][T20875] lo speed is unknown, defaulting to 1000 [ 1234.564053][ T5864] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1235.317855][T20889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1236.208839][ T5864] usb 5-1: config 0 has no interfaces? [ 1236.233723][ T5864] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1236.266799][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.735231][ T5864] usb 5-1: Product: syz [ 1236.750081][ T5864] usb 5-1: Manufacturer: syz [ 1236.760160][ T5864] usb 5-1: SerialNumber: syz [ 1236.890877][ T5864] usb 5-1: config 0 descriptor?? [ 1238.337598][T20905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1238.707979][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.917534][T20892] mkiss: ax0: crc mode is auto. [ 1239.086322][T20892] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1239.094484][T20892] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1239.613941][ T8151] usb 5-1: USB disconnect, device number 21 [ 1240.934397][T20948] random: crng reseeded on system resumption [ 1241.933169][T20952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1242.062294][T20953] 9pnet_virtio: no channels available for device syz [ 1243.924065][ T5864] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1244.303359][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 1244.345413][ T5864] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1244.368853][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1244.413546][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1244.449745][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1244.601356][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.998673][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1245.025240][T20994] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1245.034061][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.279412][ T5864] usb 5-1: GET_CAPABILITIES returned 0 [ 1245.304315][ T5864] usbtmc 5-1:16.0: can't read capabilities [ 1245.939539][ T5864] usb 5-1: USB disconnect, device number 22 [ 1246.416210][T21010] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4341'. [ 1246.919109][ T67] Bluetooth: (null): Invalid header checksum [ 1247.274902][ T67] Bluetooth: (null): Invalid header checksum [ 1247.282523][ T67] Bluetooth: (null): Invalid header checksum [ 1247.288841][ T67] Bluetooth: (null): Invalid header checksum [ 1247.295197][ T67] Bluetooth: (null): Invalid header checksum [ 1247.454339][T21023] random: crng reseeded on system resumption [ 1248.683090][T21038] block device autoloading is deprecated and will be removed. [ 1250.089382][T21058] fuse: Bad value for 'fd' [ 1250.312929][T21063] random: crng reseeded on system resumption [ 1252.579600][T21098] fuse: Bad value for 'fd' [ 1253.644861][T21108] comedi comedi0: Minor 7 could not be opened [ 1254.204180][T21122] dns_resolver: Unsupported content type (5) [ 1254.301041][T21126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1254.307599][T21126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1254.337082][T21126] vhci_hcd vhci_hcd.0: Device attached [ 1254.430638][T21127] vhci_hcd: connection closed [ 1254.431889][T14039] vhci_hcd: stop threads [ 1254.444265][T14039] vhci_hcd: release socket [ 1254.449424][T14039] vhci_hcd: disconnect device [ 1254.459164][T21133] tipc: Enabled bearer , priority 0 [ 1254.498966][T21136] fuse: Bad value for 'fd' [ 1254.569963][T21128] tipc: Resetting bearer [ 1255.258392][T21141] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4382'. [ 1256.608131][T21152] comedi comedi0: Minor 7 could not be opened [ 1256.967999][T21156] fuse: Bad value for 'rootmode' [ 1257.584270][T21166] input: syz0 as /devices/virtual/input/input47 [ 1259.100257][T21128] tipc: Disabling bearer [ 1260.060081][T21188] fuse: Bad value for 'rootmode' [ 1260.751794][T21205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4405'. [ 1260.924754][T21212] comedi comedi0: Minor 7 could not be opened [ 1264.838324][T21254] random: crng reseeded on system resumption [ 1266.004822][T21266] dns_resolver: Unsupported content type (5) [ 1266.274563][ T30] audit: type=1400 audit(1760653968.479:1136): avc: denied { setopt } for pid=21278 comm="syz.2.4427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1266.583665][T21287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1273.365655][ T9] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1273.563010][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1273.778706][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1273.791846][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1273.804147][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1273.816980][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1273.836331][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1273.911190][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1273.917714][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1273.932067][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.545047][ T9] usb 3-1: config 0 descriptor?? [ 1274.591276][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 1274.635711][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1274.978081][ T5864] usb 3-1: USB disconnect, device number 30 [ 1275.832366][T21392] binder: 21389:21392 ioctl 81e8943c 200000000880 returned -22 [ 1275.929753][T21393] rdma_rxe: rxe_newlink: failed to add lo [ 1282.504583][T21440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4471'. [ 1283.377739][T21452] 9pnet_virtio: no channels available for device syz [ 1283.444046][ T1538] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1283.615110][ T1538] usb 1-1: Using ep0 maxpacket: 8 [ 1283.679312][ T1538] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1283.703995][ T1538] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.734422][ T1538] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.745224][ T1538] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.764043][ T1538] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1283.788536][ T1538] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1283.814272][ T1538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.866208][ T1538] usbtmc 1-1:16.0: bulk endpoints not found [ 1284.225411][T21463] netlink: 'syz.3.4476': attribute type 1 has an invalid length. [ 1284.233304][T21463] netlink: 'syz.3.4476': attribute type 2 has an invalid length. [ 1284.571733][T21458] orangefs_mount: mount request failed with -4 [ 1285.936886][T17203] usb 1-1: USB disconnect, device number 23 [ 1289.359254][ T1538] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1289.554117][ T1538] usb 2-1: Using ep0 maxpacket: 8 [ 1289.565813][ T1538] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1289.601402][ T1538] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.623151][T21526] tipc: Enabled bearer , priority 0 [ 1289.626580][ T1538] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.656416][T21526] tipc: Resetting bearer [ 1289.674041][ T1538] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.683809][ T1538] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1289.714148][ T1538] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1289.723412][ T1538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.759394][ T1538] usbtmc 2-1:16.0: bulk endpoints not found [ 1289.774662][T21525] tipc: Disabling bearer [ 1290.290725][T21537] fuse: Bad value for 'user_id' [ 1290.307943][T21537] fuse: Bad value for 'user_id' [ 1291.954455][T14033] Bluetooth: (null): Invalid header checksum [ 1291.960541][T14033] Bluetooth: (null): Invalid header checksum [ 1292.656131][ T9] usb 2-1: USB disconnect, device number 29 [ 1294.460406][ T30] audit: type=1400 audit(1760653996.659:1137): avc: denied { setopt } for pid=21583 comm="syz.3.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1294.511598][T21588] tmpfs: Unknown parameter 'mpol' [ 1294.556597][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1294.643615][T21588] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1294.714075][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1295.114084][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1295.160477][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1295.179582][T21588] geneve2: entered promiscuous mode [ 1295.198710][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.220976][T21588] geneve2: entered allmulticast mode [ 1295.254405][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1295.260161][ T30] audit: type=1400 audit(1760653997.419:1138): avc: denied { shutdown } for pid=21583 comm="syz.3.4515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1295.464241][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1295.484013][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1295.514857][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1295.534393][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.566168][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 1296.993007][T21612] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1297.021558][T21612] bond1 (unregistering): Released all slaves [ 1297.370972][ T5864] usb 2-1: USB disconnect, device number 30 [ 1297.385863][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1297.392333][T21626] dns_resolver: Unsupported content type (5) [ 1298.019391][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1298.034098][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1298.077097][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.118024][ T9] usb 3-1: config 0 descriptor?? [ 1298.483461][T21633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.505422][T21633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.676611][T21637] fuse: Bad value for 'fd' [ 1300.149518][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.479254][T21657] 9pnet_virtio: no channels available for device syz [ 1300.813448][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1300.829863][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1300.903558][ T9] usb 3-1: USB disconnect, device number 31 [ 1301.160696][T21667] binder: 21663:21667 ioctl 81e8943c 200000000880 returned -22 [ 1302.002744][T21666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1302.278355][T21676] dns_resolver: Unsupported content type (5) [ 1302.706359][ T5821] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1302.982653][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.011669][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.047415][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1303.090050][ T5821] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1303.118521][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.154669][ T5821] usb 1-1: config 0 descriptor?? [ 1304.290498][ T5821] usbhid 1-1:0.0: can't add hid device: -71 [ 1304.290593][ T5821] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1304.436545][ T5821] usb 1-1: USB disconnect, device number 24 [ 1304.803314][T21696] veth0: entered promiscuous mode [ 1304.824083][ T5864] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1304.827478][T21695] veth0: left promiscuous mode [ 1305.025272][T21702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1305.036073][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1305.055775][ T5864] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1305.101974][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.151184][ T5864] usb 2-1: config 0 descriptor?? [ 1305.202934][T21707] tipc: Enabling of bearer rejected, failed to enable media [ 1305.451749][T21719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.484179][T21719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.412097][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 1306.475200][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1306.505687][ T5864] usb 2-1: USB disconnect, device number 31 [ 1308.523754][T21753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4570'. [ 1309.721244][T21773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4575'. [ 1310.265130][T21781] tipc: Started in network mode [ 1310.270125][T21781] tipc: Node identity 4, cluster identity 4711 [ 1310.276424][T21781] tipc: Node number set to 4 [ 1310.511850][T21786] veth0: entered promiscuous mode [ 1310.517817][T21784] veth0: left promiscuous mode [ 1310.906648][T21787] dns_resolver: Unsupported content type (5) [ 1311.475563][T21795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1314.556946][ T5864] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1314.714100][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 1314.775591][ T5864] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1314.783817][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1314.798557][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1314.924374][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1314.954144][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1314.996767][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1315.601830][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.648373][ T5864] usbtmc 5-1:16.0: bulk endpoints not found [ 1316.904662][T18433] Bluetooth: (null): Invalid header checksum [ 1316.911234][T18433] Bluetooth: (null): Invalid header checksum [ 1316.937752][T18433] Bluetooth: (null): Invalid header checksum [ 1316.963436][T18433] Bluetooth: (null): Invalid header checksum [ 1316.984519][ T12] Bluetooth: (null): Invalid header checksum [ 1317.506623][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4601'. [ 1317.558985][ T1538] usb 5-1: USB disconnect, device number 23 [ 1318.057942][T21870] comedi comedi0: Minor 7 could not be opened [ 1318.726289][T21884] input: syz0 as /devices/virtual/input/input48 [ 1318.754281][ T5864] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1318.926865][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 1318.965601][ T30] audit: type=1400 audit(1760654021.169:1139): avc: denied { remount } for pid=21889 comm="syz.0.4617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1319.859080][ T5864] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1320.010327][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1320.051132][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1320.061395][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1320.072044][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1320.093100][ T5864] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.211696][ T5864] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1320.221559][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.238788][ T5864] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 1320.797825][ T5917] Bluetooth: (null): Invalid header checksum [ 1320.864424][ T5917] Bluetooth: (null): Invalid header checksum [ 1320.876863][ T5917] Bluetooth: (null): Invalid header checksum [ 1320.889316][ T5917] Bluetooth: (null): Invalid header checksum [ 1320.906049][ T5917] Bluetooth: (null): Invalid header checksum [ 1320.921877][ T5917] Bluetooth: (null): Invalid header checksum [ 1321.368103][T21913] 9pnet_virtio: no channels available for device syz [ 1322.133464][T21921] 9pnet_virtio: no channels available for device syz [ 1322.735914][T21932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4626'. [ 1322.805126][T17203] usb 4-1: USB disconnect, device number 20 [ 1323.499156][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4632'. [ 1327.746099][T21996] tipc: Started in network mode [ 1327.753714][T21996] tipc: Node identity 4, cluster identity 4711 [ 1327.759980][T21996] tipc: Node number set to 4 [ 1328.120707][T22002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4649'. [ 1332.819801][T22049] 9pnet_virtio: no channels available for device syz [ 1333.054554][T22055] tipc: Enabling of bearer rejected, failed to enable media [ 1333.213870][T22062] netlink: 'syz.0.4658': attribute type 1 has an invalid length. [ 1333.223604][T22062] netlink: 'syz.0.4658': attribute type 2 has an invalid length. [ 1334.883495][T22090] fuse: Unknown parameter 'use00000000000000000000' [ 1340.094309][T14039] Bluetooth: (null): Invalid header checksum [ 1340.100487][T14039] Bluetooth: (null): Invalid header checksum [ 1340.415902][T14039] Bluetooth: (null): Invalid header checksum [ 1340.466877][T14039] Bluetooth: (null): Invalid header checksum [ 1340.472972][T14039] Bluetooth: (null): Invalid header checksum [ 1340.600686][ T30] audit: type=1400 audit(1760654042.799:1140): avc: denied { mounton } for pid=22148 comm="syz.3.4686" path="/proc/1050/task" dev="proc" ino=80009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1340.631421][ T5864] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1340.860985][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 1340.872544][ T5864] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1340.880884][ T5864] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1340.891639][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1340.904734][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1340.922595][ T5864] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1340.965802][ T5864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1340.976636][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.119142][T22159] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4689'. [ 1341.193895][ T5864] usb 2-1: GET_CAPABILITIES returned 0 [ 1341.201137][ T5864] usbtmc 2-1:16.0: can't read capabilities [ 1341.397948][ T5864] usb 2-1: USB disconnect, device number 32 [ 1341.667305][T22167] usb usb8: usbfs: process 22167 (syz.0.4692) did not claim interface 0 before use [ 1341.842867][T22169] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4691'. [ 1343.268731][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4697'. [ 1344.773840][T22214] autofs: Unknown parameter '0x0000000000000000' [ 1344.822758][ T5864] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1344.985849][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1345.027749][ T5864] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1345.037821][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.057901][ T5864] usb 3-1: config 0 descriptor?? [ 1345.346841][T22217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.366298][T22217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.659181][ T5864] usbhid 3-1:0.0: can't add hid device: -71 [ 1348.528081][ T5864] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1348.575342][ T5864] usb 3-1: USB disconnect, device number 32 [ 1349.101463][T22252] autofs: Unknown parameter 'fd0x0000000000000000' [ 1349.829414][T22266] binder: 22265:22266 ioctl 4018620d 0 returned -22 [ 1350.086407][ T8151] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1350.254111][ T8151] usb 2-1: Using ep0 maxpacket: 8 [ 1350.264059][ T8151] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1350.292207][ T8151] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1350.323392][ T8151] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1350.356506][ T8151] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1350.385401][ T8151] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1350.413222][ T8151] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1350.430045][ T8151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.668467][ T8151] usb 2-1: GET_CAPABILITIES returned 0 [ 1350.675522][ T8151] usbtmc 2-1:16.0: can't read capabilities [ 1350.872840][ T8151] usb 2-1: USB disconnect, device number 33 [ 1351.072791][T22268] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1353.194826][T22305] comedi comedi0: Minor 7 could not be opened [ 1353.219217][T22308] random: crng reseeded on system resumption [ 1353.604585][T22320] lo speed is unknown, defaulting to 1000 [ 1353.605235][ T30] audit: type=1400 audit(1760654055.799:1141): avc: denied { create } for pid=22315 comm="syz.2.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1353.893096][ T30] audit: type=1400 audit(1760654055.809:1142): avc: denied { ioctl } for pid=22315 comm="syz.2.4739" path="socket:[81162]" dev="sockfs" ino=81162 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1354.727882][T22302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1354.734441][T22302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1354.778465][T22302] vhci_hcd vhci_hcd.0: Device attached [ 1354.845764][T22327] vhci_hcd: connection closed [ 1354.846277][ T12] vhci_hcd: stop threads [ 1354.876167][ T12] vhci_hcd: release socket [ 1354.880631][ T12] vhci_hcd: disconnect device [ 1355.132463][T22338] lo speed is unknown, defaulting to 1000 [ 1355.172886][T22342] ======================================================= [ 1355.172886][T22342] WARNING: The mand mount option has been deprecated and [ 1355.172886][T22342] and is ignored by this kernel. Remove the mand [ 1355.172886][T22342] option from the mount to silence this warning. [ 1355.172886][T22342] ======================================================= [ 1355.209085][T22342] 9pnet_virtio: no channels available for device syz [ 1355.234521][T22344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4750'. [ 1355.773569][T22353] fuse: Unknown parameter 'user_id00000000000000000000' [ 1356.428822][T22360] sp0: Synchronizing with TNC [ 1357.464506][T22369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=22369 comm=syz.0.4757 [ 1358.668037][T22383] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4762'. [ 1360.150637][T22401] binder: 22400:22401 ioctl c0306201 0 returned -14 [ 1361.594767][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.645370][T22414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=22414 comm=syz.3.4769 [ 1362.918750][T22430] mkiss: ax0: crc mode is auto. [ 1363.191807][T22430] fuse: Bad value for 'rootmode' [ 1363.663606][T22442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4777'. [ 1363.702201][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.702332][T22442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4777'. [ 1363.723192][T22444] binder: 22443:22444 ioctl c0306201 0 returned -14 [ 1363.745625][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4777'. [ 1363.802177][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.811118][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.820076][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1363.831890][T22446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4777'. [ 1364.109768][T22451] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4776'. [ 1367.041170][ T30] audit: type=1400 audit(1760654325.236:1143): avc: denied { create } for pid=22486 comm="syz.4.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1367.102643][ T30] audit: type=1400 audit(1760654325.236:1144): avc: denied { write } for pid=22486 comm="syz.4.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1367.492640][T22496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1367.553875][T22496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1367.579705][T22496] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1367.658389][T22496] overlayfs: d_ino too big (341, ino=9223372036854777676, xinobits=2) [ 1367.667947][T22496] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=2) [ 1367.677957][T22496] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=2) [ 1367.712044][T22496] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=2) [ 1367.731036][T22496] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=2) [ 1367.773171][T22496] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=2) [ 1367.810491][T22496] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=2) [ 1367.843835][T22496] overlayfs: d_ino too big (io.pressure, ino=4611686018427387915, xinobits=2) [ 1367.878944][T22496] overlayfs: d_ino too big (cgroup.procs, ino=4611686018427387906, xinobits=2) [ 1367.985179][T22496] overlayfs: d_ino too big (cpuset.cpus.isolated, ino=4611686018427387922, xinobits=2) [ 1368.044031][ T5884] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1368.210048][T22513] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1368.286359][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1368.321007][ T5884] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1368.321110][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.387997][ T5884] usb 1-1: config 0 descriptor?? [ 1368.705797][T22516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.719167][T22516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.694465][ T30] audit: type=1400 audit(1760654328.886:1145): avc: denied { ioctl } for pid=22528 comm="syz.4.4801" path="socket:[81523]" dev="sockfs" ino=81523 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1370.980894][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 1371.008278][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1371.021630][ T5884] usb 1-1: USB disconnect, device number 25 [ 1371.564551][T22552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=22552 comm=syz.4.4809 [ 1371.619193][T22535] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1371.625746][T22535] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1371.634926][T22535] vhci_hcd vhci_hcd.0: Device attached [ 1371.652804][T22556] input: syz0 as /devices/virtual/input/input49 [ 1371.820797][T22554] vhci_hcd: connection closed [ 1371.821240][T14033] vhci_hcd: stop threads [ 1371.832448][T14033] vhci_hcd: release socket [ 1371.837571][T14033] vhci_hcd: disconnect device [ 1372.500697][T22572] netlink: 'syz.2.4814': attribute type 72 has an invalid length. [ 1372.508794][T22572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4814'. [ 1373.370875][T22590] tipc: Enabled bearer , priority 0 [ 1373.380330][T22589] tipc: Disabling bearer [ 1373.439141][T22592] syzkaller0: entered promiscuous mode [ 1373.444817][T22592] syzkaller0: entered allmulticast mode [ 1374.038156][T22601] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1374.552424][T22609] tipc: Enabled bearer , priority 10 [ 1374.812836][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4833'. [ 1375.140800][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1375.365526][ T5871] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1375.536286][ T5871] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1375.546871][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.610347][ T5871] usb 4-1: config 0 descriptor?? [ 1375.666151][ T5871] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1375.674564][ T9] tipc: Node number set to 2886997057 [ 1375.859756][ T5871] gp8psk: usb in 128 operation failed. [ 1375.866511][ T5871] gp8psk: usb in 137 operation failed. [ 1375.872095][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1375.892617][ T5871] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1375.936749][ T5871] usb 4-1: media controller created [ 1375.970653][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.028483][ T5871] gp8psk_fe: Frontend attached [ 1376.049376][ T5871] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1376.068547][ T5871] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1376.426637][ T5871] gp8psk: usb in 137 operation failed. [ 1376.432477][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1376.463192][ T5871] gp8psk: found Genpix USB device pID = 203 (hex) [ 1376.483724][ T5871] usb 4-1: USB disconnect, device number 21 [ 1377.335232][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1377.530839][T22682] random: crng reseeded on system resumption [ 1380.341531][T22730] random: crng reseeded on system resumption [ 1380.348452][T22458] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1380.494517][T22729] sp0: Synchronizing with TNC [ 1380.628042][T22458] usb 3-1: Using ep0 maxpacket: 16 [ 1380.712224][T22458] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 1380.796172][T22458] usb 3-1: config 0 has no interface number 0 [ 1380.888659][T22458] usb 3-1: config 0 interface 237 has no altsetting 0 [ 1381.161606][T22458] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1381.182992][T22458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.205948][T22458] usb 3-1: Product: syz [ 1381.210157][T22458] usb 3-1: Manufacturer: syz [ 1381.222586][T22458] usb 3-1: SerialNumber: syz [ 1381.248466][T22458] usb 3-1: config 0 descriptor?? [ 1381.269723][T22458] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 found [ 1381.387562][ T30] audit: type=1400 audit(1760654595.584:1146): avc: denied { connect } for pid=22739 comm="syz.3.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1381.494143][T22458] snd_usb_podhd 3-1:0.237: cannot get proper max packet size [ 1381.565500][T22458] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 now disconnected [ 1381.682600][T22458] snd_usb_podhd 3-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 1381.750863][T22458] usb 3-1: USB disconnect, device number 33 [ 1383.140858][T22775] usb usb8: usbfs: process 22775 (syz.4.4874) did not claim interface 0 before use [ 1383.901836][T22781] random: crng reseeded on system resumption [ 1384.014091][T22786] sp0: Synchronizing with TNC [ 1384.216004][T22789] fuse: Bad value for 'group_id' [ 1384.216026][T22789] fuse: Bad value for 'group_id' [ 1384.561948][T22800] lo speed is unknown, defaulting to 1000 [ 1384.974094][T22789] orangefs_mount: mount request failed with -4 [ 1386.054016][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1386.214060][ T9] usb 3-1: config 1 has an invalid interface number: 255 but max is 0 [ 1386.242604][ T9] usb 3-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 1386.271999][ T9] usb 3-1: config 1 has no interface number 0 [ 1386.294521][ T9] usb 3-1: config 1 interface 255 has no altsetting 0 [ 1386.345182][ T9] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=7b.2a [ 1386.366329][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.392862][ T9] usb 3-1: Product: syz [ 1386.404497][ T9] usb 3-1: Manufacturer: syz [ 1386.422602][ T9] usb 3-1: SerialNumber: syz [ 1386.793502][T22844] kvm: kvm [22843]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xb7 [ 1386.907929][T22846] xt_ecn: cannot match TCP bits for non-tcp packets [ 1387.034693][T22851] fuse: Bad value for 'group_id' [ 1387.039981][T22851] fuse: Bad value for 'group_id' [ 1387.914236][T22851] orangefs_mount: mount request failed with -4 [ 1388.592778][ T9] kaweth 3-1:1.255: Firmware present in device. [ 1388.641210][ T9] kaweth 3-1:1.255: Error reading configuration (-71), no net device created [ 1388.666483][ T9] kaweth 3-1:1.255: probe with driver kaweth failed with error -5 [ 1388.712635][ T9] usb 3-1: USB disconnect, device number 34 [ 1389.003303][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4907'. [ 1390.516413][T22910] comedi comedi0: Minor 7 could not be opened [ 1393.276010][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1394.379433][T22945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1398.834949][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1399.319883][T22957] dns_resolver: Unsupported content type (5) [ 1401.634115][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1409.423940][ C0] sched: DL replenish lagged too much [ 1412.421376][ T9] usb 1-1: device descriptor read/all, error -110 [ 1423.373076][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.331153][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.404900][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.509733][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.991804][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1689.643860][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1689.650859][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5884/1:b..l [ 1689.659351][ C0] rcu: (detected by 0, t=10503 jiffies, g=112697, q=254 ncpus=2) [ 1689.667174][ C0] task:kworker/1:4 state:R running task stack:23328 pid:5884 tgid:5884 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1689.682192][ C0] Workqueue: events_power_efficient gc_worker [ 1689.688282][ C0] Call Trace: [ 1689.691567][ C0] [ 1689.694505][ C0] __schedule+0x1190/0x5de0 [ 1689.699035][ C0] ? __pfx___schedule+0x10/0x10 [ 1689.703899][ C0] ? mark_held_locks+0x49/0x80 [ 1689.708686][ C0] preempt_schedule_irq+0x51/0x90 [ 1689.713729][ C0] irqentry_exit+0x36/0x90 [ 1689.718158][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1689.724154][ C0] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 1689.729283][ C0] Code: 00 00 48 c7 c7 68 e5 83 90 e8 57 b4 12 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 35 d6 36 f8 58 48 85 db 0f 85 d4 0f 00 00 b6 da 36 f8 8b 1d 60 87 fd 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 1689.748896][ C0] RSP: 0018:ffffc9000467fb48 EFLAGS: 00000293 [ 1689.754940][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89866939 [ 1689.762883][ C0] RDX: ffff888026d20000 RSI: ffffffff89866948 RDI: 0000000000000007 [ 1689.770831][ C0] RBP: ffffffff9afbf2ac R08: 0000000000000007 R09: 0000000000000000 [ 1689.778801][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88814cc00000 [ 1689.786746][ C0] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 [ 1689.794698][ C0] ? gc_worker+0xe19/0x16e0 [ 1689.799182][ C0] ? gc_worker+0xe28/0x16e0 [ 1689.803663][ C0] ? gc_worker+0xe28/0x16e0 [ 1689.808140][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 1689.813759][ C0] ? __pfx_gc_worker+0x10/0x10 [ 1689.818500][ C0] ? rcu_is_watching+0x12/0xc0 [ 1689.823239][ C0] process_one_work+0x9cf/0x1b70 [ 1689.828157][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 1689.834227][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1689.839580][ C0] ? assign_work+0x1a0/0x250 [ 1689.844145][ C0] worker_thread+0x6c8/0xf10 [ 1689.848719][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1689.853805][ C0] kthread+0x3c5/0x780 [ 1689.857874][ C0] ? __pfx_kthread+0x10/0x10 [ 1689.862444][ C0] ? rcu_is_watching+0x12/0xc0 [ 1689.867204][ C0] ? __pfx_kthread+0x10/0x10 [ 1689.871770][ C0] ret_from_fork+0x675/0x7d0 [ 1689.876337][ C0] ? __pfx_kthread+0x10/0x10 [ 1689.880912][ C0] ret_from_fork_asm+0x1a/0x30 [ 1689.885657][ C0] [ 1689.888725][ C0] rcu: rcu_preempt kthread starved for 557 jiffies! g112697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1689.899829][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1689.909802][ C0] rcu: RCU grace-period kthread stack dump: [ 1689.915689][ C0] task:rcu_preempt state:R running task stack:27984 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1689.929187][ C0] Call Trace: [ 1689.932472][ C0] [ 1689.935403][ C0] __schedule+0x1190/0x5de0 [ 1689.939943][ C0] ? __pfx___schedule+0x10/0x10 [ 1689.944814][ C0] ? find_held_lock+0x2b/0x80 [ 1689.949499][ C0] ? schedule+0x2d7/0x3a0 [ 1689.953842][ C0] schedule+0xe7/0x3a0 [ 1689.957911][ C0] schedule_timeout+0x123/0x290 [ 1689.962772][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1689.968170][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1689.973485][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1689.979304][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1689.984786][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1689.989567][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1689.994868][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1690.000082][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1690.005027][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1690.009910][ C0] rcu_gp_kthread+0x26d/0x380 [ 1690.014609][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1690.019825][ C0] ? rcu_is_watching+0x12/0xc0 [ 1690.024606][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1690.029839][ C0] ? __kthread_parkme+0x19e/0x250 [ 1690.034888][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1690.040118][ C0] kthread+0x3c5/0x780 [ 1690.044216][ C0] ? __pfx_kthread+0x10/0x10 [ 1690.048833][ C0] ? rcu_is_watching+0x12/0xc0 [ 1690.053621][ C0] ? __pfx_kthread+0x10/0x10 [ 1690.058237][ C0] ret_from_fork+0x675/0x7d0 [ 1690.062848][ C0] ? __pfx_kthread+0x10/0x10 [ 1690.067469][ C0] ret_from_fork_asm+0x1a/0x30 [ 1690.072262][ C0] [ 1690.075284][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1690.081621][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1690.086851][ C1] NMI backtrace for cpu 1 [ 1690.086868][ C1] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(full) [ 1690.086888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1690.086898][ C1] RIP: 0010:unwind_next_frame+0x5d4/0x20a0 [ 1690.086928][ C1] Code: 83 e2 07 41 83 e7 01 38 d0 7f 08 84 c0 0f 85 a3 14 00 00 45 88 7d 35 44 0f b6 71 04 41 83 e6 0f 41 80 fe 06 0f 84 27 0a 00 00 <0f> 87 20 02 00 00 41 80 fe 04 0f 84 c7 0b 00 00 41 80 fe 05 0f 85 [ 1690.086944][ C1] RSP: 0018:ffffc90000077610 EFLAGS: 00000297 [ 1690.086958][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff9116391c [ 1690.086969][ C1] RDX: 0000000000000005 RSI: 0000000000000001 RDI: ffffffff90933284 [ 1690.086979][ C1] RBP: ffffc900000776c8 R08: ffffffff91163920 R09: 0000000000000000 [ 1690.086990][ C1] R10: 0000000000000000 R11: 0000000000006193 R12: ffffc900000776d0 [ 1690.087000][ C1] R13: ffffc90000077680 R14: 0000000000000005 R15: 0000000000000000 [ 1690.087010][ C1] FS: 0000000000000000(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 1690.087026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1690.087036][ C1] CR2: 00007f75aaddd990 CR3: 0000000057a5a000 CR4: 00000000003526f0 [ 1690.087047][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1690.087057][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1690.087068][ C1] Call Trace: [ 1690.087073][ C1] [ 1690.087080][ C1] ? ret_from_fork+0x675/0x7d0 [ 1690.087102][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1690.087121][ C1] arch_stack_walk+0x94/0x100 [ 1690.087145][ C1] ? ret_from_fork+0x675/0x7d0 [ 1690.087166][ C1] stack_trace_save+0x8e/0xc0 [ 1690.087182][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1690.087200][ C1] ? __lock_acquire+0x622/0x1c90 [ 1690.087220][ C1] save_stack+0x160/0x1f0 [ 1690.087245][ C1] ? __pfx_save_stack+0x10/0x10 [ 1690.087262][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 1690.087278][ C1] ? qlist_free_all+0x4d/0x120 [ 1690.087297][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 1690.087316][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 1690.087337][ C1] ? __kmalloc_noprof+0x2e8/0x880 [ 1690.087353][ C1] ? lsm_blob_alloc+0x68/0x90 [ 1690.087369][ C1] ? security_task_alloc+0x2d/0x260 [ 1690.087391][ C1] ? copy_process+0x220b/0x76a0 [ 1690.087407][ C1] ? kernel_clone+0xfc/0x930 [ 1690.087421][ C1] ? kernel_thread+0xd7/0x120 [ 1690.087436][ C1] ? kthreadd+0x503/0x800 [ 1690.087454][ C1] ? ret_from_fork+0x675/0x7d0 [ 1690.087474][ C1] ? page_ext_put+0x3e/0xd0 [ 1690.087495][ C1] __reset_page_owner+0x84/0x1a0 [ 1690.087515][ C1] __free_frozen_pages+0x7df/0x1160 [ 1690.087534][ C1] qlist_free_all+0x4d/0x120 [ 1690.087554][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 1690.087575][ C1] __kasan_slab_alloc+0x69/0x90 [ 1690.087596][ C1] __kmalloc_noprof+0x2e8/0x880 [ 1690.087612][ C1] ? lsm_blob_alloc+0x68/0x90 [ 1690.087630][ C1] ? lsm_blob_alloc+0x68/0x90 [ 1690.087645][ C1] lsm_blob_alloc+0x68/0x90 [ 1690.087661][ C1] security_task_alloc+0x2d/0x260 [ 1690.087684][ C1] copy_process+0x220b/0x76a0 [ 1690.087700][ C1] ? find_held_lock+0x2b/0x80 [ 1690.087721][ C1] ? __pfx_copy_process+0x10/0x10 [ 1690.087738][ C1] ? __pfx_wake_up_new_task+0x10/0x10 [ 1690.087765][ C1] kernel_clone+0xfc/0x930 [ 1690.087779][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 1690.087804][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1690.087826][ C1] ? __pfx_kthread+0x10/0x10 [ 1690.087844][ C1] kernel_thread+0xd7/0x120 [ 1690.087859][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 1690.087878][ C1] ? __pfx_kthread+0x10/0x10 [ 1690.087897][ C1] ? find_held_lock+0x2b/0x80 [ 1690.087911][ C1] ? kthreadd+0x495/0x800 [ 1690.087933][ C1] kthreadd+0x503/0x800 [ 1690.087953][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1690.087972][ C1] ret_from_fork+0x675/0x7d0 [ 1690.087990][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1690.088009][ C1] ret_from_fork_asm+0x1a/0x30 [ 1690.088032][ C1]