last executing test programs: 14m24.544388834s ago: executing program 0 (id=812): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x00000.0000004e22']) close_range(r0, r0, 0x0) 14m24.426090058s ago: executing program 0 (id=815): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x800000, 0xffffffff, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x0, @in=@local, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}, @sadb_x_sec_ctx={0x1}]}, 0x88}}, 0x0) 14m24.250740991s ago: executing program 0 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c00ffffff0761134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60000bf150000000000001d5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc138cea0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874cd004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705ebf9a98a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a4fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe056e2d686e796aaf09e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b00"/3699], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14m23.274957245s ago: executing program 0 (id=822): socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x43}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="6ea88d31bbbbbbbb9bbb81004800010b0000000000ddb254b9496d01fb514cf89d53274350fdbbd2f77e27458c817718d763f46d85ccc0f06ac963ffc8d714096f0ca973e1dd2187b62dfd4cf7e59f836de72bf5d80a04c68bd3619da3ad06a781419b250dd44dd5f3"], 0x0) 14m23.064244383s ago: executing program 0 (id=823): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async, rerun: 64) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000540), 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="fc070000000000000000000000000000851000000500f8ff84000004ba000000a7000000000000001800000000000000000000000000000095000000dff8a1e016000000159500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) 14m22.418776129s ago: executing program 0 (id=829): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000500)=""/231, 0x0, 0xe7, 0x0, 0xfff, 0x0, @void, @value}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x3e7}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x81) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000"], 0x0) r14 = socket(0x25, 0x80000, 0x2) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000016e10000c04828c6452f73d16536e4a1", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r15 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r16, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000100)="66baf80cb858c0c180ef66bafc0cb0feeef20fd6f2c4e27daecdc4c131fe2a0f01ca0fc7588cc4e295381d0e0000003e64640fc75afd440f20c03501000000440f22c0f3f20f08", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) 14m7.220120608s ago: executing program 32 (id=829): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000500)=""/231, 0x0, 0xe7, 0x0, 0xfff, 0x0, @void, @value}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x60, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{0x6, 0x0, 0x3e7}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x81) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000"], 0x0) r14 = socket(0x25, 0x80000, 0x2) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000016e10000c04828c6452f73d16536e4a1", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r15 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r16, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000100)="66baf80cb858c0c180ef66bafc0cb0feeef20fd6f2c4e27daecdc4c131fe2a0f01ca0fc7588cc4e295381d0e0000003e64640fc75afd440f20c03501000000440f22c0f3f20f08", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) 7m1.906599028s ago: executing program 5 (id=2498): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x800}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x10}}, 0x78}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffb, 0x12040) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x5ba, &(0x7f0000000740)={0x0, 0xd8a4, 0x4000, 0x1201fffd, 0x3e7}, &(0x7f0000000100)=0x0, &(0x7f0000000840)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r7, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) io_uring_enter(r5, 0x6e2, 0x0, 0xb, 0x0, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000001000)=""/91) fsopen(&(0x7f0000000140)='dax\x00', 0x0) 6m58.086976913s ago: executing program 5 (id=2505): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x84, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000fffff9000000000000000000000000000000000000000000000800000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff06000000"]}, 0x138) 6m57.902815648s ago: executing program 5 (id=2506): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="19ad40e0b2af55c146", @ANYRESOCT=r0, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f984967500002", @ANYRESOCT=0x0], 0x270}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004081) 6m57.497052628s ago: executing program 5 (id=2508): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000004280)={0x0, 0x0, {0x0, 0x8, 0x2025, 0x4, 0x2, 0xf, 0x2, 0x6}}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2, @void, @value}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0xdddd0000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x80a0000, 0xffff1000, 0xc, 0x9, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0xeeee0000, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x80a0000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2, 0xfffffffffffffffd]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) r7 = fanotify_init(0x0, 0x1) fanotify_mark(r7, 0x105, 0x5000003a, r3, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406441, &(0x7f0000000280)={0x34, 0x0, 0x3, 0xffffffffffffff91, 0x0, 0x0, 0x0, 0xfffffffffffffcb3, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_SIOCSIFBR(r9, 0x890c, &(0x7f0000000000)=@generic={0x1, 0x2, 0x5d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 6m57.11753002s ago: executing program 5 (id=2510): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00'}, 0x10) 6m56.714551889s ago: executing program 5 (id=2513): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)={0x18, r1, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 6m56.379872462s ago: executing program 33 (id=2513): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)={0x18, r1, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 9.356895647s ago: executing program 3 (id=3987): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xffffff7f}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.325578842s ago: executing program 6 (id=3988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x1e000000, 0x0) 9.102557208s ago: executing program 3 (id=3989): socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) r0 = socket$netlink(0x10, 0x3, 0x0) fsopen(0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f0000000080), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffffffe, 0x29c042) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) 9.05072867s ago: executing program 4 (id=3990): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/3699], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.169672247s ago: executing program 4 (id=3991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) (rerun: 32) getdents64(r6, &(0x7f0000000380)=""/141, 0x8d) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r3, 0x601, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r7, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 32) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r8, 0x40045436, 0x3) (async) r9 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x4}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x48880) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}]}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 7.157634455s ago: executing program 4 (id=3992): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x40104593, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(&(0x7f0000000040), 0x40100000, 0x189002) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x597001) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x10, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1, 0x10000000}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) 6.801779797s ago: executing program 3 (id=3993): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_get$pid(0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x1000) (async) sched_getattr(0x0, &(0x7f00000011c0)={0x38}, 0x59, 0x0) (async) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) 6.647956287s ago: executing program 6 (id=3994): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601002004000e34307c3279d0901010000fe565bc414a5557b852bd504fea24299e9e880000000f1b9436404fef86100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000065895340f010022067d7010203010902240001fc00000009046b00020a00000009056b10000000000109058a03"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000eb"], 0x0) 6.478457377s ago: executing program 1 (id=3995): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000280)=0x14) read(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='cpuhp_multi_enter\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0x40000}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 6.177202323s ago: executing program 4 (id=3996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x28011, r0, 0x641d5000) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001200)={0x0, @in6={{0xa, 0x8, 0xf13c, @loopback, 0x3800}}, 0x1800, 0xb3b9}, &(0x7f00000012c0)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001080)={r6, @in={{0x2, 0x4e22, @loopback}}, 0x9, 0xfb, 0x8000, 0x3, 0xf}, &(0x7f0000001140)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000001180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000011c0), 0x103101, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002480)={&(0x7f0000001300)="ee79e4488375bb3b7bf7441f3916c347f109b9143b0d85bb8140c98d6b029c8e000b3b6c623c7640f97b54adf2017cbc9d35ca3c0156998a5bcc871c3a88e17bf94655d5e85fe7bf6cfe92fbe407da67e5bbb152d9a193df514687e1f324f476ca4b045ee12a799a4d82d602059b099d83d7e3d9239b3283809635abf7d0f4a1698fac418c6e4ffa5c4eea", &(0x7f00000013c0)=""/18, &(0x7f0000001400)="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", &(0x7f0000002400)="cde6b4ff4cd24bb02dfde977521bda3f8c1931ab5c5844032950ed6eb713d53a05568fe268dc71b82ed422e9e29e94838ca971b6fcc541fb25e131c7b8895c99244e074a05367e679d78bbe42a", 0x6c}, 0x38) 5.034155643s ago: executing program 1 (id=3997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) iopl(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.958800841s ago: executing program 6 (id=3998): pipe(0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x58}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff0000000000000400850000003600ffb0180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.70142906s ago: executing program 3 (id=3999): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0a050910"], 0xd) r0 = geteuid() mount$9p_rdma(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', &(0x7f0000000700), 0x108000, &(0x7f0000000740)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@common=@debug={'debug', 0x3d, 0xc37c}}, {@sq}], [{@appraise}, {@hash}, {@obj_role={'obj_role', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syztnl2\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r0}}]}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1f9f00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0xa}, @val={0x2, 0x80, 0x200, 0x7, 0x3}, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xa, 0x11, 0x0, @empty, @private0, {[], {0x4f1c, 0x4e20, 0xa, 0x0, @opaque="b927"}}}}}}}, 0x4e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x700, 0x7cf93423f35c4781, 0x0, 0xcf6, {{0x10, 0x4, 0x3, 0x2d, 0x40, 0x64, 0x0, 0xe7, 0x29, 0x0, @broadcast, @private=0xa010101, {[@lsrr={0x83, 0x2b, 0x5c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, @remote, @private=0xa010100, @broadcast, @local, @multicast2]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x12, 0x100, 0x70bd2b, 0x25dfdbfb, {0x29, 0x6, 0xf6, 0x3, {0x4e20, 0x4e23, [0x29, 0x8001, 0xfffffffa, 0x9], [0x8001, 0x1, 0x7, 0xa], r4, [0x6, 0x4]}, 0x5, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "73873fb6bf72d904229f7ca2762863d64e2e4a371be3"}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x48000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@dellinkprop={0xf4, 0x6d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x11a1, 0x18000}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0xffffffff}]}}]}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'nicvf0\x00'}, {0x14, 0x35, 'gre0\x00'}]}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xa7d}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) readlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/14, 0xe) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000840)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2ea}, @in6={0xa, 0x4e23, 0x6, @local, 0x3}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x5}, @in6={0xa, 0x4e22, 0xfff, @loopback, 0x10001}, @in6={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}], 0xbc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0xf, 0x1, '}'}, 0x9) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.393959217s ago: executing program 1 (id=4000): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000900)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000940)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000980)=0x0, &(0x7f00000009c0)=0x4) sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="86de6c14264a012c43a72a84064cf0212c7ef08e04719e6e8bd111060e593941b9a65c596e46e0f098efe501da8ee63cf3bc5a909468718c8be81b0215fadc492f7e8368ed17de041b270161e24ac57117a5cc61", 0x54}, {&(0x7f0000000100)="408c5854990d6e25d4f59373eb9d9979a634f5b1a8ff580f3a4315866159ad6e5748a03bd00bc96d046bef5ff6a81d9160be0e1a36e957208ac303e7f5b4a6a8a612f822a2819f4c886c8012dd438ea4dbc32ed51ae59846baed0c7ad680bb5ee817b1f4fdd82d83df9e4a281df862cdaa41bca750fc8c14fc1dafb8c76f2eafc25e40e35d2c1c7e958b50", 0x8b}, {&(0x7f0000000000)="ce6287a649cc1b38ccc7571cc5275cf01f8afca26cb50b1c2b519a99e7b1ca5d9d2f660e6e41bc51a2fbac4c74", 0x2d}, {&(0x7f00000001c0)="d9f6fecdf0a6987d331528e324ebb7d455b29d03e53bd49b2e1eab21ea96d112724db899aee66cbdfa4c9eecc9181edf402e103134963fd8466cf3390309bc745999f21f85ac107587f6da720845bdccb135c99a1b5539155b0fcaef28d0e24b24fff9b5ed07", 0x66}], 0x4, &(0x7f00000003c0)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x5e, 0xd, '\x00', [@generic={0x22, 0x5f, "f5dd56628945e2b2bea8f896b5657259083d686cf6040841a4bb642cce01716c8ede19bc873c1a0a07e64ed881b6a1edd358987654aa64656fd3b1ffa27d298ff77b397a882b6a117c4ddc7cf5eb19df242e6f458d33978bf67f86bd331ec1"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x800}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x1, 0xa, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, @private2, @loopback, @loopback, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x29, 0x4, 0x0, 0x1, 0x0, [@mcast1, @loopback]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x178}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x3, @mcast2, 0x80000001}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000540)="4909b25d66a8235862974a2e6b1fc19aab2263924f9cc8714b813e292b1497e89befe2a6034a0f5e7ff4880c64359047cd9ecf6fbf00eade7845437a674afed9c00adae07ad689fed49e194c8145959af854729af3d567ff02cab65501e24fffb88e4e3190f0e50259baf224c202ad06aba3bcc80f82957e5772e2971a8c28209783c6d31576dde20c2424ec36d9a9841921085c7fa62d82f6", 0x99}, {&(0x7f0000000600)="6ab8493b2e47e0667e8444813960b49d272619df145b1080ca63aa0faa76bc35b8c8bcf64bb33b340ce3469a31a67e4b4727317bd074f41673c7f71eea56bbecac42108c9507387a3f3d422d650e6363b98cc8ffc689de3bc15eb57b821fd0c7f621fa0fd585002842bce76866d77e09fc7453ce40e187e5728e8c47441a6ba0e10823a6d680bd92b1fabeb3071d94b076e4ae46cf08acdcf3a237d8769dd4c93b7566c4dd0d7716dcb23aeee734ba9c1459698386d17f61d755499244926bca824be0b0ef326acdaabdc490cfe416da54fa983c06d0ac5b4c", 0xd9}, {&(0x7f0000000700)="f7fead9b2922b449bf208674836f7772d4b9fc2779cc4bd1182d392b466e7f1a4b781a28f4777e64e945ef09ceeb340c9bb278c7f474bf2f8a06c996076c579d1ab0b45e028c96ec", 0x48}, {&(0x7f0000000780)="8eaa595b264924ffe8a0ca4509d2c8a8274eeb08740a7734b1e2d31db0028da812d775ab0b66351c9971ba9b3d87633f03d0b4fccd6247d7a265e8ac263719d0624786e00e3f550aee4230c55c4e7d7de7522d36c677836fe2dc37626a963bd5b951405b63d56164270924d10fa684f8a3b9193870274b4d25d70af42b07df7870f987738c4ba0648eb5db093073645387b2d083df06183b3022f1f3b38c382ee50afaaeac2a8ec1d6ea43e68bd253c5ba6a732f10110e0d41efece2332be877afa65c8f953c800b12d1b96982e78f9045746e4ef0b81734637177a60bdbf20db402cf6d54b964c59c6e891177b95ce0e3de36eb36d7520879aa437378", 0xfd}, {&(0x7f0000000340)="5986ec6fb1570cd57760af9241904edc0d103fd7b2982bbb1974c8eadc8d999bbe9d2bce14982e636a8b8b5837d20aea28b805f8a2fcf10f", 0x38}], 0x5, &(0x7f0000000a00)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}}}, @rthdr={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x2, 0x6, 0x0, [@local]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}], 0x100}}, {{&(0x7f0000000b00)={0xa, 0x4e20, 0x800, @remote, 0x2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="a2df0deabc0b8fe576b42927372da6be84269d33b23bd8c56a51dd35063210494687377d478f5fa56cf7af5d362572", 0x2f}, {&(0x7f0000000b80)="dbfb2cdd5a54e4094b62b1e6242e47e74e3901a924298aa1a3c6bb1bee2d5d73437f79496a35848b9c3566b005a8fe9915f8526116c2607c87b2ac6c945335e6bf9a0309c6c5e12d1d46198db25657e20af0417cc213b814ed12935474b903fb11e981d14efdd129dfb24fe7e275e78b5f6b59d47fd544f42118dfaf84e42a8dfb08f9d9b8b00174d30cd2dea1a7b08a27beb6c0879d29be2d53c67bd729becc055738ca56e1cfebdcc9a9e4562c13ef5dc641d4854963c1afbd414bb6", 0xbd}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="5d325cdec27a60b06d2667fe6f07e0566f6acd70e2cefb17532abd39c6b11d904103339f90ec994e827bcb968e1ac93b92b448bef1c56a80a6", 0x39}], 0x4}}], 0x3, 0x4) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x4c) 4.034176139s ago: executing program 4 (id=4002): socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) r0 = socket$netlink(0x10, 0x3, 0x0) fsopen(0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f0000000080), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffffffe, 0x29c042) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) 3.998103158s ago: executing program 6 (id=4003): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x9b) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create(0xd74f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x1}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x70}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = syz_io_uring_setup(0x4a9a, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f00000000c0)=0xffffffff, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(r3, &(0x7f0000000580)="d9ef6a8ebad89b0728fdeefbfa91e01d8588af23b9772c35c137ee6ea85ce267da76b992d9697640ce72dafe98728dcee86c5f0cc42f6188b2d7b5fa020b0e760f7d762e5fb482fd00e28f6e66aa441f0e5fe343df387897a3f2d3bd570ec39546bc1d7ab90ba76afbbc551af73f6a81e783b07e0c1c62c7e8272b2ccd2922faee8f3826a712e428adcc1a14731cfae6477e4ca9aac0edfa3f476d7addc904511a90370ce06d73ea51c2ca5f033ce32034e7a1286624758ccaa47d8222e31237221cb020ec4084566f3019dc1483e4f5bb8e", 0xd2, 0x40048c4, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) fcntl$getownex(r5, 0x10, &(0x7f0000000540)) 3.213194744s ago: executing program 1 (id=4004): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) sendfile(r1, r1, 0x0, 0x200) 1.298772629s ago: executing program 2 (id=4005): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/3699], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.191999914s ago: executing program 1 (id=4006): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x20, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.191187767s ago: executing program 3 (id=4007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x800000000408, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYRES64=r3, @ANYRES64], 0x64}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c200000000000000000008000340000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x0) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4076, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440), 0x0) r11 = accept4(r7, 0x0, 0x0, 0x0) accept4(r11, 0x0, 0x0, 0x0) 1.133157158s ago: executing program 1 (id=4008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601002004000e34307c3279d0901010000fe565bc414a5557b852bd504fea24299e9e880000000f1b9436404fef86100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000065895340f010022067d7010203010902240001fc00000009046b00020a00000009056b10000000000109058a03"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000eb"], 0x0) 1.078917419s ago: executing program 6 (id=4009): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x20, 0x0, 0x0}, &(0x7f00000002c0)=']V+Z,i', 0x0, 0xfff, 0x10000, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x1a000}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000001400), 0x8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0x9) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005196c0083d1bbb0111000000000109022443dfd64d000009043c0002b1a92a0009050901ff030c090009050b"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 338.824568ms ago: executing program 2 (id=4010): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000000deff00004945034a081e00000000540000000000000000b96b5cc5799a90837a238540e58db261d1f8f48b"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x9) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000880030000000000080001"], 0x44}}, 0x0) 338.345864ms ago: executing program 2 (id=4011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000124c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 305.087327ms ago: executing program 2 (id=4012): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000040b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 276.04981ms ago: executing program 2 (id=4013): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000004280)={0x0, 0x0, {0x0, 0x8, 0x300e, 0x4, 0x2, 0xf, 0x5, 0x5}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7, 0x7, 0x5, 0x10, {{0x7, 0x4, 0x3, 0x2b, 0x1c, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@end, @end, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x2}]}}}}}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) mount$fuseblk(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4009000, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x9) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"]) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000040)="0059393883d776a1977a4c39c72a100699cc75fb9df54dc38da6eb7ca25bbe694e36", 0x22}, {0x0}], 0x2) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "519f66fb985a0559", "65a6d5f666600ed3dc852189f92f5b7a", "8d8420f7", "7f54ff591850ac57"}, 0x28) (async) sendto$inet6(r7, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 142.687576ms ago: executing program 3 (id=4014): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090491000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x218, 0x300, 0xfeffffff, 0xf0, 0x218, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x7, 0x64}}, @common=@inet=@tcp={{0x30}, {[], [], 0x3, 0x0, 0x10}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x7, 0x6]}}}, @common=@set={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @loopback, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'ip6tnl0\x00'}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x5, 0x0, 0x3, 0x2, 0x1], 0x0, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @empty, @remote, @gre_key, @gre_key=0x6}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev, @gre_key=0x9, @icmp_id=0x68}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = epoll_create1(0x0) signalfd(r3, &(0x7f0000000140)={[0x69]}, 0x8) syz_usbip_server_init(0x5) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) 142.305076ms ago: executing program 2 (id=4015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40294}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x22000010) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402de0102050507"], 0x0) 9.704695ms ago: executing program 4 (id=4016): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x4c) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 0s ago: executing program 6 (id=4017): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) (async) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) kernel console output (not intermixed with test programs): hcd: release socket [ 1048.806864][T11677] vhci_hcd: disconnect device [ 1049.211769][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.221713][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.234444][ T36] bond0 (unregistering): Released all slaves [ 1049.337918][ T36] bond1 (unregistering): Released all slaves [ 1049.435243][ T36] bond2 (unregistering): Released all slaves [ 1049.447294][ T36] bond3 (unregistering): Released all slaves [ 1049.460344][ T36] bond4 (unregistering): Released all slaves [ 1049.565800][ T36] bond5 (unregistering): Released all slaves [ 1049.668903][ T36] bond6 (unregistering): Released all slaves [ 1049.698638][T18921] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1049.857370][T18928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.864734][T18928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.068391][T18928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.081560][T18928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.145515][T18928] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.155208][ T9483] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1050.164538][T18928] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.173637][T18928] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.183235][T18928] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.222691][ T5938] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1050.239835][T18929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.247751][T18929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.260404][T18929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1050.364420][ T9483] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1050.385346][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 1050.395451][ T9483] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.423518][ T5938] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 1050.452695][ T9483] usb 7-1: config 0 has no interface number 0 [ 1050.458880][ T5938] usb 4-1: config 7 has no interface number 0 [ 1050.475106][ T5938] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1050.489296][ T5938] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1050.500373][ T9483] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1050.526913][ T9483] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.526940][ T9483] usb 7-1: Product: syz [ 1050.526956][ T9483] usb 7-1: Manufacturer: syz [ 1050.526971][ T9483] usb 7-1: SerialNumber: syz [ 1050.530363][ T5938] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 1050.530389][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 1050.530409][ T5938] usb 4-1: Product: syz [ 1050.530424][ T5938] usb 4-1: Manufacturer: syz [ 1050.530439][ T5938] usb 4-1: SerialNumber: syz [ 1050.711623][ T9483] usb 7-1: config 0 descriptor?? [ 1050.743013][ T9483] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 1050.759345][ T5938] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 1051.340865][ T9483] usb 7-1: No valid video chain found. [ 1051.398567][T18963] netlink: 'syz.2.3310': attribute type 7 has an invalid length. [ 1051.419970][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1051.419985][ T30] audit: type=1400 audit(2000000546.460:4426): avc: denied { ioctl } for pid=18944 comm="syz.6.3305" path="socket:[71222]" dev="sockfs" ino=71222 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1051.848903][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1052.118455][ T36] hsr_slave_0: left promiscuous mode [ 1052.136676][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1052.154131][ T36] hsr_slave_1: left promiscuous mode [ 1052.163603][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.187411][ T9483] usb 7-1: USB disconnect, device number 36 [ 1052.229770][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.295743][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.308359][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.372100][ T36] veth1_macvtap: left promiscuous mode [ 1052.388862][ T36] veth0_macvtap: left promiscuous mode [ 1052.409446][ T36] veth1_vlan: left promiscuous mode [ 1052.840920][T18980] Cannot find del_set index 0 as target [ 1053.316523][ T5907] usb 38-1: device descriptor read/8, error -110 [ 1053.669480][T16709] usb 4-1: USB disconnect, device number 67 [ 1053.672806][T18989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18989 comm=syz.1.3317 [ 1053.727469][ T5907] usb usb38-port1: attempt power cycle [ 1053.757269][ T30] audit: type=1400 audit(2000000548.800:4427): avc: denied { map } for pid=18991 comm="syz.2.3318" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1053.893850][ T30] audit: type=1400 audit(2000000548.930:4428): avc: denied { name_bind } for pid=18997 comm="syz.2.3320" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1053.942693][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1053.963345][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.969777][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.073294][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1054.565262][ T5907] usb usb38-port1: unable to enumerate USB device [ 1054.657833][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1054.903733][T19010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1055.286169][ T30] audit: type=1400 audit(2000000550.330:4429): avc: denied { watch } for pid=19005 comm="syz.6.3322" path="/139" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1055.441529][ T30] audit: type=1400 audit(2000000550.330:4430): avc: denied { watch_sb } for pid=19005 comm="syz.6.3322" path="/139" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1058.074141][ T1209] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1058.247399][ T1209] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1058.260159][ T1209] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1058.292297][ T1209] usb 7-1: config 1 has no interface number 1 [ 1058.318233][ T1209] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1058.504591][ T1209] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1058.541750][ T1209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.804200][ T1209] usb 7-1: Product: syz [ 1058.855818][ T1209] usb 7-1: Manufacturer: syz [ 1058.896076][ T1209] usb 7-1: SerialNumber: syz [ 1058.962484][ T36] IPVS: stop unused estimator thread 0... [ 1059.187232][ T1209] usb 7-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1059.262501][ T1209] usb 7-1: USB disconnect, device number 37 [ 1059.889127][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1061.362301][ T30] audit: type=1400 audit(2000000556.400:4431): avc: denied { write } for pid=19077 comm="syz.3.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1061.570547][T19082] raw_sendmsg: syz.3.3341 forgot to set AF_INET. Fix it! [ 1062.085172][T19087] vivid-007: ================= START STATUS ================= [ 1062.110056][T19087] vivid-007: Enable Output Cropping: true grabbed [ 1062.135168][T19087] vivid-007: Enable Output Composing: true grabbed [ 1062.158581][T19090] tipc: Started in network mode [ 1062.164750][T19087] vivid-007: Enable Output Scaler: true grabbed [ 1062.291770][T19090] tipc: Node identity , cluster identity 4711 [ 1062.298551][T19087] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1062.321837][T19090] tipc: Failed to set node id, please configure manually [ 1062.329562][T19087] vivid-007: Transmit Mode: HDMI grabbed [ 1062.339108][T19087] vivid-007: Hotplug Present: 0x00000000 [ 1062.345164][T19090] tipc: Enabling of bearer rejected, failed to enable media [ 1062.355499][T19092] ubi: mtd0 is already attached to ubi31 [ 1062.379843][T19087] vivid-007: RxSense Present: 0x00000000 [ 1062.399433][T19087] vivid-007: EDID Present: 0x00000000 [ 1062.558704][T19087] vivid-007: ================== END STATUS ================== [ 1064.775101][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3352'. [ 1064.806655][T19107] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3352'. [ 1064.847661][ T30] audit: type=1400 audit(2000000559.890:4432): avc: denied { write } for pid=19102 comm="syz.6.3352" path="socket:[71569]" dev="sockfs" ino=71569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1067.347650][ T30] audit: type=1400 audit(2000000561.000:4433): avc: denied { setopt } for pid=19117 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1068.498963][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1068.516032][T19135] xt_hashlimit: size too large, truncated to 1048576 [ 1068.532519][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 1068.741925][T19135] Cannot find add_set index 1 as target [ 1070.007696][T19149] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1070.637042][T19174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1071.189326][ T5907] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1071.382333][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 1071.382576][T18646] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1071.393636][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.546764][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.567328][ T5907] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1071.586144][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.596797][ T5907] usb 4-1: config 0 descriptor?? [ 1071.692976][T18646] usb 2-1: Using ep0 maxpacket: 16 [ 1071.703951][T18646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.721698][T18646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.849014][T18646] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1071.858416][T18646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.890692][T18646] usb 2-1: config 0 descriptor?? [ 1071.895990][ T1209] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1072.072992][ T1209] usb 7-1: Using ep0 maxpacket: 32 [ 1072.159473][ T5907] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 1072.159655][ T1209] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1072.214958][ T5907] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 1072.227432][ T5907] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 1072.237883][ T5907] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 1072.266877][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1072.280485][ T5907] konepure 0003:1E7D:2DB4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 1072.315779][T19163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.334940][ T1209] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1072.348730][T19163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.357861][ T1209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.372178][ T1209] usb 7-1: Product: syz [ 1072.384686][ T1209] usb 7-1: Manufacturer: syz [ 1072.390518][ T1209] usb 7-1: SerialNumber: syz [ 1072.402142][ T1209] usb 7-1: config 0 descriptor?? [ 1072.411247][ T5907] usb 4-1: USB disconnect, device number 68 [ 1072.412678][ T1209] usb 7-1: no audio or video endpoints found [ 1072.480395][T18646] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 1072.487949][T18646] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 1072.495252][T18646] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 1072.502644][T18646] konepure 0003:1E7D:2DB4.0015: unknown main item tag 0x0 [ 1072.510917][T18646] konepure 0003:1E7D:2DB4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 1072.609551][ T5935] usb 7-1: USB disconnect, device number 38 [ 1072.725187][T19162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.737143][T19162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.760190][T18646] usb 2-1: USB disconnect, device number 89 [ 1072.778466][T16709] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1073.170769][T11665] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1073.423596][T16709] usb 3-1: Using ep0 maxpacket: 8 [ 1073.540945][T16709] usb 3-1: config 8 has an invalid interface number: 221 but max is 0 [ 1073.583107][T16709] usb 3-1: config 8 has no interface number 0 [ 1073.589591][T16709] usb 3-1: too many endpoints for config 8 interface 221 altsetting 13: 184, using maximum allowed: 30 [ 1073.648216][T16709] usb 3-1: config 8 interface 221 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 1073.774842][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1073.829131][T16709] usb 3-1: config 8 interface 221 has no altsetting 0 [ 1073.841300][T16709] usb 3-1: New USB device found, idVendor=5ad8, idProduct=4291, bcdDevice=d8.6f [ 1073.859707][T16709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.870780][T16709] usb 3-1: Product: syz [ 1073.885742][T16709] usb 3-1: Manufacturer: syz [ 1073.890367][T16709] usb 3-1: SerialNumber: syz [ 1073.928246][T19213] Cannot find add_set index 0 as target [ 1074.253701][T19223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1074.355783][T19224] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 1074.355783][T19224] program syz.6.3389 not setting count and/or reply_len properly [ 1074.979759][T19196] netlink: 'syz.2.3380': attribute type 1 has an invalid length. [ 1074.989485][T19196] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1075.126142][T16709] usb 3-1: USB disconnect, device number 84 [ 1075.674842][ T1209] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1075.891978][ T30] audit: type=1400 audit(2000000570.930:4434): avc: denied { ioctl } for pid=19254 comm="syz.3.3401" path="socket:[73843]" dev="sockfs" ino=73843 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1075.965041][ T1209] usb 7-1: Using ep0 maxpacket: 16 [ 1075.996590][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.029880][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.034541][T19258] Cannot find add_set index 0 as target [ 1076.056368][ T1209] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1076.082365][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.105914][ T1209] usb 7-1: config 0 descriptor?? [ 1076.212187][T19267] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1076.218822][T19267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1076.278289][T19267] vhci_hcd vhci_hcd.0: Device attached [ 1076.331394][T19271] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 1076.338036][T19271] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.415112][T19267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.487405][T18646] vhci_hcd: vhci_device speed not set [ 1076.505198][T19271] vhci_hcd vhci_hcd.0: Device attached [ 1076.635495][T18646] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1076.691513][T19271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.743486][T19278] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 1076.750118][T19278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1076.766976][T19267] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 1076.773601][T19267] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1076.809562][ T1209] konepure 0003:1E7D:2DB4.0016: unknown main item tag 0x0 [ 1076.881785][ T1209] konepure 0003:1E7D:2DB4.0016: unknown main item tag 0x0 [ 1076.929575][T19267] vhci_hcd vhci_hcd.0: Device attached [ 1076.935598][T19278] vhci_hcd vhci_hcd.0: Device attached [ 1076.963385][T19271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1076.981736][ T1209] konepure 0003:1E7D:2DB4.0016: unknown main item tag 0x0 [ 1077.001605][T19285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1077.031741][ T1209] konepure 0003:1E7D:2DB4.0016: unknown main item tag 0x0 [ 1077.112948][T19286] vhci_hcd vhci_hcd.0: port 0 already used [ 1077.210434][ T1209] konepure 0003:1E7D:2DB4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0 [ 1077.250540][T19280] vhci_hcd: connection closed [ 1077.251533][T11665] vhci_hcd: stop threads [ 1077.266871][T19279] vhci_hcd: connection closed [ 1077.279954][T19273] vhci_hcd: connection closed [ 1077.294359][T19268] vhci_hcd: connection reset by peer [ 1077.333232][T11665] vhci_hcd: release socket [ 1077.390182][T11665] vhci_hcd: disconnect device [ 1077.446562][T11665] vhci_hcd: stop threads [ 1077.505577][ T1209] usb 7-1: USB disconnect, device number 39 [ 1077.524511][T11665] vhci_hcd: release socket [ 1077.564325][T11665] vhci_hcd: disconnect device [ 1077.891481][T11665] vhci_hcd: stop threads [ 1077.974909][T19294] lo speed is unknown, defaulting to 1000 [ 1077.996669][T11665] vhci_hcd: release socket [ 1078.114868][T11665] vhci_hcd: disconnect device [ 1078.494554][T11665] vhci_hcd: stop threads [ 1078.498880][T11665] vhci_hcd: release socket [ 1078.522552][T11665] vhci_hcd: disconnect device [ 1079.798770][ T3473] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1079.895550][T19314] ubi31: detaching mtd0 [ 1080.124238][T19314] ubi31: mtd0 is detached [ 1080.135489][T19307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19307 comm=syz.6.3411 [ 1080.151829][T19307] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1080.204879][T19321] Cannot find add_set index 0 as target [ 1080.424036][ T5907] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1080.512114][T16709] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1080.601739][ T30] audit: type=1400 audit(2000000575.640:4435): avc: denied { mount } for pid=19331 comm="syz.3.3420" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1080.673974][ T5907] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1080.702303][T16709] usb 5-1: device descriptor read/64, error -71 [ 1080.747078][ T5907] usb 2-1: config 0 has no interface number 0 [ 1080.800192][ T5907] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.907660][ T5907] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.958410][ T5907] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1080.977807][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.002250][T16709] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1081.009999][ T5907] usb 2-1: config 0 descriptor?? [ 1081.252977][T16709] usb 5-1: device descriptor read/64, error -71 [ 1081.275313][T19338] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 1081.302469][ T30] audit: type=1400 audit(2000000576.340:4436): avc: denied { relabelto } for pid=19318 comm="syz.1.3415" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 1081.351045][ T30] audit: type=1400 audit(2000000576.350:4437): avc: denied { associate } for pid=19318 comm="syz.1.3415" name="msr" dev="devtmpfs" ino=87 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ppp_device_t:s0" [ 1081.386418][T16709] usb usb5-port1: attempt power cycle [ 1081.408320][ T5935] Process accounting resumed [ 1081.422732][ T5907] usbhid 2-1:0.1: can't add hid device: -71 [ 1081.428833][ T5907] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1081.439188][ T5907] usb 2-1: USB disconnect, device number 90 [ 1081.489579][T19342] can: request_module (can-proto-3) failed. [ 1081.592822][ T1209] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1081.733513][T16709] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1081.785316][T16709] usb 5-1: device descriptor read/8, error -71 [ 1081.812344][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 1081.820138][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.831428][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.889633][T18646] vhci_hcd: vhci_device speed not set [ 1081.911611][ T1209] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1081.940959][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.951806][ T1209] usb 3-1: config 0 descriptor?? [ 1082.157136][T16709] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1082.191047][T16709] usb 5-1: device descriptor read/8, error -71 [ 1082.948078][ T5907] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1082.960961][T16709] usb usb5-port1: unable to enumerate USB device [ 1083.147618][ T5907] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1083.152772][ T1209] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 1083.160121][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.218649][ T1209] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 1083.220596][ T5907] usb 7-1: config 0 descriptor?? [ 1083.230919][ T1209] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 1083.230947][ T1209] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 1083.266846][ T1209] konepure 0003:1E7D:2DB4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 1083.328993][ T1209] usb 3-1: USB disconnect, device number 85 [ 1083.364922][T19366] SELinux: failed to load policy [ 1083.459000][ T5907] snd-usb-hiface 7-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1083.633282][ T5828] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1083.878481][ T5828] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 1083.887608][ T5828] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1083.896771][ T5828] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1083.905811][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.917908][ T5828] pcwd_usb: The device isn't a Human Interface Device [ 1084.129799][ T5828] usb 2-1: USB disconnect, device number 91 [ 1084.422346][ T1209] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1084.476232][ T30] audit: type=1400 audit(2000000579.520:4438): avc: denied { accept } for pid=19387 comm="syz.4.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1084.603924][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 1084.678528][ T1209] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1084.704967][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.721566][ T1209] usb 4-1: Product: syz [ 1084.745688][ T1209] usb 4-1: Manufacturer: syz [ 1084.858181][ T1209] usb 4-1: SerialNumber: syz [ 1084.976210][ T1209] usb 4-1: config 0 descriptor?? [ 1085.622341][ T5907] usb 7-1: USB disconnect, device number 40 [ 1085.714618][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.723382][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.744211][ T1209] usb 4-1: ignoring: not an USB2CAN converter [ 1085.948410][ T5907] usb 4-1: USB disconnect, device number 69 [ 1086.208607][T19409] Unsupported ieee802154 address type: 0 [ 1086.264430][ T30] audit: type=1400 audit(2000000581.250:4439): avc: denied { bind } for pid=19403 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1086.314432][ T1209] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1086.561912][ T30] audit: type=1400 audit(2000000581.600:4440): avc: denied { getopt } for pid=19410 comm="syz.2.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1086.627416][ T1209] usb 7-1: Using ep0 maxpacket: 8 [ 1086.734669][ T1209] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1086.765514][ T1209] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 1086.961368][ T1209] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1086.975831][ T1209] usb 7-1: config 4 has no interface number 0 [ 1086.987679][ T1209] usb 7-1: string descriptor 0 read error: -22 [ 1086.994564][ T1209] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1087.005525][ T1209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.032463][ T1209] usb 7-1: Found UVC 0.02 device (04f2:b746) [ 1087.082234][T16709] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1087.322408][T16709] usb 2-1: Using ep0 maxpacket: 32 [ 1087.375560][T16709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1087.484743][T16709] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1087.515720][T16709] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1087.523325][ T1209] usb 7-1: No valid video chain found. [ 1087.532334][ T1209] usb 7-1: USB disconnect, device number 41 [ 1087.535398][T16709] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1087.549675][T16709] usb 2-1: Product: syz [ 1087.556884][T16709] usb 2-1: Manufacturer: syz [ 1087.561785][T16709] usb 2-1: SerialNumber: syz [ 1087.570349][T16709] usb 2-1: config 0 descriptor?? [ 1087.791897][ T9483] usb 2-1: USB disconnect, device number 92 [ 1088.068941][T19444] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1088.486786][T19438] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1088.589390][T19434] delete_channel: no stack [ 1088.712369][T19452] netlink: 'syz.4.3457': attribute type 19 has an invalid length. [ 1088.725786][ T30] audit: type=1400 audit(2000000583.770:4441): avc: denied { write } for pid=19433 comm="syz.2.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1088.745270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.453120][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1089.465410][T19448] nbd: must specify a size in bytes for the device [ 1089.786992][T19448] Unknown options in mask 5 [ 1089.922673][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1090.334622][ T9483] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1090.437600][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1090.470738][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.479502][ T9] usb 2-1: Product: syz [ 1090.488353][ T9] usb 2-1: Manufacturer: syz [ 1090.494888][ T9] usb 2-1: SerialNumber: syz [ 1090.505494][ T9] usb 2-1: config 0 descriptor?? [ 1090.634062][ T9483] usb 3-1: config 252 has an invalid interface number: 101 but max is 0 [ 1090.661883][ T9483] usb 3-1: config 252 has no interface number 0 [ 1090.679534][ T9483] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1090.688684][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.700756][T19481] SELinux: failed to load policy [ 1090.711434][ T9483] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1090.733182][ T9483] pvrusb2: ********** [ 1090.744759][ T9483] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1090.760537][ T9483] pvrusb2: Important functionality might not be entirely working. [ 1090.779947][ T9483] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1090.859233][ T30] audit: type=1400 audit(2000000585.900:4442): avc: denied { mount } for pid=19482 comm="syz.6.3465" name="/" dev="ramfs" ino=73082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1091.770795][ T9483] pvrusb2: ********** [ 1092.092295][T19462] Cannot find add_set index 0 as target [ 1092.413925][ T2338] pvrusb2: Invalid write control endpoint [ 1092.415814][ T9483] usb 3-1: USB disconnect, device number 86 [ 1092.425926][T11661] wlan0: Trigger new scan to find an IBSS to join [ 1092.482131][T16709] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1092.572516][ T5935] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1092.580526][ T9] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 1092.620170][ T2338] pvrusb2: Invalid write control endpoint [ 1092.659317][ T9] usb 2-1: USB disconnect, device number 93 [ 1092.675591][T16709] usb 4-1: Using ep0 maxpacket: 16 [ 1092.682970][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1092.690501][T16709] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1092.706405][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1092.717047][ T9] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 1092.743929][ T5935] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.777755][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1093.263957][ T9] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 1093.593161][T16709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.595822][ T2338] pvrusb2: Device being rendered inoperable [ 1093.622888][ T5935] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1093.642974][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1093.668958][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1093.676734][T16709] usb 4-1: Product: syz [ 1093.681015][T16709] usb 4-1: Manufacturer: syz [ 1093.691797][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1093.712867][T16709] usb 4-1: SerialNumber: syz [ 1093.714097][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1093.726762][ T5935] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1093.743329][T16709] usb 4-1: config 0 descriptor?? [ 1093.804666][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1093.879748][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1093.913762][T16709] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1093.980855][ T5935] usb 7-1: SerialNumber: syz [ 1094.017892][ T5935] usb 7-1: config 0 descriptor?? [ 1094.159821][T19523] serio: Serial port ptm1 [ 1094.198498][ T30] audit: type=1326 audit(2000000589.240:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19525 comm="syz.2.3477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc78098e929 code=0x0 [ 1094.259453][T16709] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1094.572870][T16709] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1094.732140][T16709] usb 3-1: Using ep0 maxpacket: 8 [ 1094.738566][T16709] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 1094.747084][T16709] usb 3-1: config 127 has no interface number 1 [ 1094.753471][T16709] usb 3-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x65, changing to 0x5 [ 1094.765294][T16709] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x5 has invalid maxpacket 25966, setting to 1024 [ 1094.783712][T16709] usb 3-1: config 127 interface 0 altsetting 10 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1094.806062][T16709] usb 3-1: config 127 interface 171 has no altsetting 0 [ 1094.814320][T16709] usb 3-1: config 127 interface 0 has no altsetting 0 [ 1094.823696][T16709] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1094.833333][T16709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.841398][T16709] usb 3-1: Product: syz [ 1094.847376][T16709] usb 3-1: Manufacturer: syz [ 1094.858392][T16709] usb 3-1: SerialNumber: syz [ 1094.976819][T19540] openvswitch: netlink: Key type 113 is out of range max 32 [ 1095.135909][T16709] xr_serial 3-1:127.171: xr_serial converter detected [ 1095.168326][T16709] xr_serial ttyUSB1: Failed to set reg 0x1a: -71 [ 1095.175359][T16709] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1095.193018][T16709] usb 3-1: USB disconnect, device number 87 [ 1095.205637][T16709] xr_serial 3-1:127.171: device disconnected [ 1095.216210][T19557] netlink: 'syz.1.3486': attribute type 1 has an invalid length. [ 1095.249173][T19557] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1095.261844][T19557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1095.273048][T19557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1095.284062][ T3473] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1095.315342][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3487'. [ 1095.351470][T19566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.354218][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3487'. [ 1095.363240][T19566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.449505][T19557] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1095.458955][T19557] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1095.467467][ T5828] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1095.492153][T19557] bond2 (unregistering): Released all slaves [ 1095.500427][ T9483] usb 4-1: USB disconnect, device number 70 [ 1095.535337][ T9483] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1095.564839][ T9483] visor 4-1:0.0: device disconnected [ 1095.611503][T19575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3493'. [ 1095.622374][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 1095.630276][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.665833][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.676383][ T5828] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1095.686243][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.714545][ T5828] usb 5-1: config 0 descriptor?? [ 1095.800937][ T30] audit: type=1400 audit(2000000590.840:4444): avc: denied { bind } for pid=19579 comm="syz.1.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1095.976345][T19590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1096.409990][ T5828] konepure 0003:1E7D:2DB4.0018: unknown main item tag 0x0 [ 1096.422219][T11663] wlan0: Trigger new scan to find an IBSS to join [ 1096.424388][ T5828] konepure 0003:1E7D:2DB4.0018: unknown main item tag 0x0 [ 1096.438315][ T5828] konepure 0003:1E7D:2DB4.0018: unknown main item tag 0x0 [ 1096.444023][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.445562][ T5828] konepure 0003:1E7D:2DB4.0018: unknown main item tag 0x0 [ 1096.462841][ T5935] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1096.466242][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.480291][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.491780][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.492846][ T5828] konepure 0003:1E7D:2DB4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 1096.569827][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.578701][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.628117][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.640838][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.670656][ T5935] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1096.691021][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.703254][ T5935] usb 3-1: config 0 descriptor?? [ 1096.732376][ T9483] usb 5-1: USB disconnect, device number 85 [ 1097.192474][ T30] audit: type=1400 audit(2000000592.200:4445): avc: denied { bind } for pid=19606 comm="syz.1.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1097.631458][ T49] wlan0: Creating new IBSS network, BSSID 4e:e5:8a:5d:2b:0e [ 1097.727822][ T5935] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 1098.388706][ T5935] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 1098.398623][ T5935] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0019/input/input34 [ 1098.416493][ T5935] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1098.432259][ T5935] usb 3-1: USB disconnect, device number 88 [ 1098.659450][T19625] vivid-000: disconnect [ 1098.772122][ T30] audit: type=1400 audit(2000000593.710:4446): avc: denied { setopt } for pid=19619 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1099.073185][ T30] audit: type=1400 audit(2000000593.720:4447): avc: denied { setopt } for pid=19619 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1099.093079][ T30] audit: type=1400 audit(2000000593.730:4448): avc: denied { getopt } for pid=19619 comm="syz.4.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1099.585936][T19619] vivid-000: reconnect [ 1100.099378][T19652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.110573][T19652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.368051][T19661] xt_hashlimit: size too large, truncated to 1048576 [ 1100.419470][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1101.118734][T19667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1101.125305][T19667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1101.330738][T19667] vhci_hcd vhci_hcd.0: Device attached [ 1102.380228][T19682] ALSA: mixer_oss: invalid OSS volume 'u' [ 1102.402471][ T9] usb 38-1: SetAddress Request (118) to port 0 [ 1102.408739][ T9] usb 38-1: new SuperSpeed USB device number 118 using vhci_hcd [ 1102.785146][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1102.918471][T19669] vhci_hcd: connection reset by peer [ 1102.930756][ T3507] vhci_hcd: stop threads [ 1102.941771][ T3507] vhci_hcd: release socket [ 1102.950492][ T3507] vhci_hcd: disconnect device [ 1102.983578][T19689] can: request_module (can-proto-3) failed. [ 1103.872539][ T5935] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1104.107892][ T5935] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1104.193172][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.220402][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.254236][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.267643][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.281042][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.311822][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.320280][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.329627][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.341317][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.358033][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.491505][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.977546][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1104.991105][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1105.000616][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1105.012271][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1105.023879][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1105.034177][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1105.045605][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1105.120607][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1105.125558][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1105.344745][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1105.436933][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1105.444798][ T5935] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1105.462118][ T5935] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1105.487113][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1105.501668][T19731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.520981][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1105.562516][T19731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.576518][ T5935] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1105.595883][ T5935] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1105.613611][ T5935] usb 5-1: Product: syz [ 1105.617808][ T5935] usb 5-1: Manufacturer: syz [ 1105.632268][ T5935] usb 5-1: SerialNumber: syz [ 1105.644150][ T5935] usb 5-1: config 0 descriptor?? [ 1105.664644][ T5935] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1105.747254][T19739] can: request_module (can-proto-3) failed. [ 1105.987853][ T5935] usb 5-1: USB disconnect, device number 86 [ 1106.004462][ T5935] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1106.055072][T19747] blktrace: Concurrent blktraces are not allowed on sg0 [ 1106.089881][ T30] audit: type=1804 audit(2000000601.130:4449): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3545" name="file0" dev="ramfs" ino=73622 res=1 errno=0 [ 1106.135288][ T30] audit: type=1804 audit(2000000601.130:4450): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.3545" name="file0" dev="ramfs" ino=73622 res=1 errno=0 [ 1106.156213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.170530][ T30] audit: type=1400 audit(2000000601.140:4451): avc: denied { mounton } for pid=19746 comm="syz.1.3545" path="/file0" dev="ramfs" ino=73622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1106.192593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.458127][T19764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1106.477565][T11661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1106.492419][T11661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1106.505156][T16709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.432722][T16709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.441975][T16709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.488225][T19774] Cannot find del_set index 0 as target [ 1107.694370][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1107.801461][ T30] audit: type=1400 audit(2000000602.830:4452): avc: denied { bind } for pid=19775 comm="syz.1.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1107.820980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1107.831833][ T9483] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1107.882373][T18646] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1107.943243][ T9] usb 38-1: device descriptor read/8, error -110 [ 1108.172172][T16709] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1108.252149][ T9483] usb 4-1: Using ep0 maxpacket: 16 [ 1108.257374][T18646] usb 5-1: Using ep0 maxpacket: 16 [ 1108.264562][ T9483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.275948][ T9483] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1108.285773][ T9483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.294629][T18646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.306858][T18646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.317097][ T9483] usb 4-1: config 0 descriptor?? [ 1108.322495][T18646] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1108.332907][T18646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.383489][ T9] usb usb38-port1: attempt power cycle [ 1108.407913][T18646] usb 5-1: config 0 descriptor?? [ 1108.414667][T16709] usb 3-1: Using ep0 maxpacket: 8 [ 1108.427324][T16709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.445648][T16709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.458404][T16709] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1108.467817][T16709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.480053][T16709] usb 3-1: config 0 descriptor?? [ 1108.523805][T19790] can: request_module (can-proto-3) failed. [ 1108.951928][T18646] konepure 0003:1E7D:2DB4.001A: unknown main item tag 0x0 [ 1108.961132][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3560'. [ 1108.974521][T18646] konepure 0003:1E7D:2DB4.001A: unknown main item tag 0x0 [ 1108.981712][T18646] konepure 0003:1E7D:2DB4.001A: unknown main item tag 0x0 [ 1108.986603][T16709] uclogic 0003:5543:0004.001B: No inputs registered, leaving [ 1108.993021][T18646] konepure 0003:1E7D:2DB4.001A: unknown main item tag 0x0 [ 1109.013862][T18646] konepure 0003:1E7D:2DB4.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 1109.030137][ T9483] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1109.038603][T16709] uclogic 0003:5543:0004.001B: hidraw1: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 1109.056242][ T9] usb usb38-port1: unable to enumerate USB device [ 1109.065147][ T9483] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1109.079041][T19799] Cannot find add_set index 0 as target [ 1109.089131][ T9483] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1109.101353][ T9483] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1109.111718][ T9483] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1109.126023][ T9483] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1109.659133][ T5907] usb 3-1: USB disconnect, device number 89 [ 1109.674626][T16709] usb 5-1: USB disconnect, device number 87 [ 1109.736857][ T9483] usb 4-1: USB disconnect, device number 71 [ 1110.502154][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1110.742093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.209190][ T3473] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1111.287656][T19820] Cannot find del_set index 0 as target [ 1111.722394][ T30] audit: type=1400 audit(2000000606.600:4453): avc: denied { create } for pid=19821 comm="syz.1.3567" name="#30" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1111.763061][T19823] delete_channel: no stack [ 1111.768284][ T30] audit: type=1400 audit(2000000606.600:4454): avc: denied { link } for pid=19821 comm="syz.1.3567" name="#30" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1111.962171][ T30] audit: type=1400 audit(2000000606.610:4455): avc: denied { rename } for pid=19821 comm="syz.1.3567" name="#31" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1112.078218][T19837] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1112.084766][T19837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1112.092851][T19837] vhci_hcd vhci_hcd.0: Device attached [ 1112.228625][ T30] audit: type=1400 audit(2000000606.760:4456): avc: denied { write } for pid=19823 comm="syz.3.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1112.363748][ T9483] usb 46-1: SetAddress Request (14) to port 0 [ 1112.385120][ T9483] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1112.877549][T19841] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3572'. [ 1113.670345][T19845] can: request_module (can-proto-3) failed. [ 1113.718851][ T30] audit: type=1400 audit(2000000608.760:4457): avc: denied { map } for pid=19852 comm="syz.1.3575" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1113.778858][T19840] vhci_hcd: connection reset by peer [ 1113.785695][T11661] vhci_hcd: stop threads [ 1113.789951][T11661] vhci_hcd: release socket [ 1113.794461][T11661] vhci_hcd: disconnect device [ 1114.152094][T18646] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1115.169824][T18646] usb 4-1: Using ep0 maxpacket: 32 [ 1115.200738][T19873] SET target dimension over the limit! [ 1115.203259][T18646] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1115.227151][T18646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.244495][T18646] usb 4-1: config 0 has no interface number 0 [ 1115.254149][T18646] usb 4-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1115.287878][ T30] audit: type=1400 audit(2000000610.330:4458): avc: denied { mount } for pid=19876 comm="syz.6.3583" name="/" dev="hugetlbfs" ino=75949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1115.292099][T18646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.362613][T18646] usb 4-1: Product: syz [ 1115.366864][T18646] usb 4-1: Manufacturer: syz [ 1115.371464][T18646] usb 4-1: SerialNumber: syz [ 1115.388589][T18646] usb 4-1: config 0 descriptor?? [ 1115.432685][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.439094][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.451639][T18646] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 1115.475091][T18646] cx231xx 4-1:0.1: Not found matching IAD interface [ 1115.537933][ T30] audit: type=1400 audit(2000000610.570:4459): avc: denied { execute } for pid=19876 comm="syz.6.3583" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=75958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1115.605581][T19885] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1115.649456][ T30] audit: type=1400 audit(2000000610.640:4460): avc: denied { mounton } for pid=19876 comm="syz.6.3583" path="/194/file0/bus" dev="hugetlbfs" ino=76867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 1116.126797][T19885] overlayfs: failed to set xattr on upper [ 1116.132817][T19885] overlayfs: ...falling back to redirect_dir=nofollow. [ 1116.139731][T19885] overlayfs: ...falling back to index=off. [ 1116.146244][T19885] overlayfs: ...falling back to uuid=null. [ 1116.153247][ T30] audit: type=1400 audit(2000000610.720:4461): avc: denied { accept } for pid=19882 comm="syz.1.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1116.181085][T19885] overlayfs: maximum fs stacking depth exceeded [ 1116.323291][ T30] audit: type=1400 audit(2000000611.360:4462): avc: denied { unmount } for pid=15418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1116.407986][T16709] usb 4-1: USB disconnect, device number 72 [ 1116.488184][T19894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1116.593806][T19904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.602921][T19904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.608861][T19901] can: request_module (can-proto-3) failed. [ 1116.612617][T19904] overlayfs: missing 'lowerdir' [ 1116.629685][T19905] overlayfs: missing 'lowerdir' [ 1117.027381][T19911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1117.302402][ T30] audit: type=1400 audit(2000000612.340:4463): avc: denied { read } for pid=19912 comm="syz.4.3594" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1117.334846][T16709] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1117.462216][T19918] Cannot find del_set index 0 as target [ 1117.526205][T19919] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1117.532749][T19919] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1117.648651][ T9483] usb 46-1: device descriptor read/8, error -110 [ 1117.655417][T19919] vhci_hcd vhci_hcd.0: Device attached [ 1117.715328][T16709] usb 4-1: config 1 has an invalid interface number: 41 but max is 0 [ 1117.930138][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3596'. [ 1117.972572][ T1209] usb 36-1: SetAddress Request (110) to port 0 [ 1117.995767][ T1209] usb 36-1: new SuperSpeed USB device number 110 using vhci_hcd [ 1118.012383][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 1118.075577][ T9483] usb usb46-port1: attempt power cycle [ 1118.152951][ T30] audit: type=1400 audit(2000000613.200:4464): avc: denied { name_bind } for pid=19924 comm="syz.6.3597" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1118.472654][T19920] vhci_hcd: connection reset by peer [ 1118.509691][ T3507] vhci_hcd: stop threads [ 1118.543416][ T3507] vhci_hcd: release socket [ 1118.586571][ T3507] vhci_hcd: disconnect device [ 1118.761180][ T9483] usb usb46-port1: unable to enumerate USB device [ 1118.880616][T16709] usb 4-1: config 1 has no interface number 0 [ 1118.887254][T16709] usb 4-1: config 1 interface 41 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1118.898826][T16709] usb 4-1: config 1 interface 41 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1118.909662][T16709] usb 4-1: config 1 interface 41 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1118.912231][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1118.920493][T16709] usb 4-1: config 1 interface 41 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1118.939914][T16709] usb 4-1: config 1 interface 41 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1118.951089][T16709] usb 4-1: config 1 interface 41 altsetting 0 endpoint 0x8F has invalid maxpacket 1983, setting to 64 [ 1118.962110][T16709] usb 4-1: config 1 interface 41 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1118.972936][T16709] usb 4-1: config 1 interface 41 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1118.983649][T16709] usb 4-1: config 1 interface 41 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1118.994439][T16709] usb 4-1: config 1 interface 41 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1119.006957][T16709] usb 4-1: New USB device found, idVendor=6189, idProduct=2068, bcdDevice= 6.7c [ 1119.016133][T16709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.024191][T16709] usb 4-1: Product: syz [ 1119.028462][T16709] usb 4-1: Manufacturer: syz [ 1119.033248][T16709] usb 4-1: SerialNumber: syz [ 1119.034427][T19934] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1119.043584][T16709] pl2303 4-1:1.41: required endpoints missing [ 1119.044309][T19934] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1119.063200][T19934] vhci_hcd vhci_hcd.0: Device attached [ 1119.142622][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1119.181247][ T9] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1119.205458][ T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.222266][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1119.288836][ T9] usb 5-1: config 6 has no interface number 0 [ 1119.313723][ T9] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1119.349964][T19937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1119.404277][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1119.439729][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.481871][ T9] usb 5-1: Product: syz [ 1119.499135][ T9] usb 5-1: Manufacturer: syz [ 1119.586465][ T9] usb 5-1: SerialNumber: syz [ 1119.699107][ T9] hso 5-1:6.2: Failed to find INT IN ep [ 1120.009003][T19935] vhci_hcd: connection closed [ 1120.009528][ T49] vhci_hcd: stop threads [ 1120.086887][ T49] vhci_hcd: release socket [ 1120.129628][ T49] vhci_hcd: disconnect device [ 1120.236518][T19930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.301514][T19930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.406624][T18646] usb 5-1: USB disconnect, device number 88 [ 1120.503144][T13533] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1120.511873][T13533] Bluetooth: hci2: Injecting HCI hardware error event [ 1120.520605][ T5838] Bluetooth: hci2: hardware error 0x00 [ 1120.580326][T19941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.613915][T19941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.710981][T18646] usb 4-1: USB disconnect, device number 73 [ 1121.308666][ T30] audit: type=1326 audit(2000000616.350:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1121.487132][ T30] audit: type=1326 audit(2000000616.350:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1121.527340][ T30] audit: type=1326 audit(2000000616.380:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1121.550656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.556922][ T30] audit: type=1326 audit(2000000616.380:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1121.649561][ T30] audit: type=1326 audit(2000000616.380:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.071710][ T30] audit: type=1326 audit(2000000616.380:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.085443][T18646] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1122.306508][ T30] audit: type=1326 audit(2000000616.520:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.330112][T18646] usb 5-1: Using ep0 maxpacket: 16 [ 1122.346407][ T30] audit: type=1326 audit(2000000616.520:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.370008][T18646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.390489][ T30] audit: type=1326 audit(2000000616.550:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.402088][T18646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.445596][T18646] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1122.466427][ T30] audit: type=1326 audit(2000000616.560:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.525536][ T30] audit: type=1326 audit(2000000616.560:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.582398][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1122.603440][T18646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.619975][ T30] audit: type=1326 audit(2000000616.560:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1122.645738][T18646] usb 5-1: config 0 descriptor?? [ 1123.111765][ T30] audit: type=1326 audit(2000000617.270:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1123.208927][ T30] audit: type=1326 audit(2000000617.270:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19968 comm="syz.6.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028718e929 code=0x7ffc0000 [ 1123.222683][ T1209] usb 36-1: device descriptor read/8, error -110 [ 1123.351902][T18646] usbhid 5-1:0.0: can't add hid device: -71 [ 1123.358065][T18646] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1123.371009][T18646] usb 5-1: USB disconnect, device number 89 [ 1123.426137][ T30] audit: type=1326 audit(2000000618.460:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19987 comm="syz.1.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd998e929 code=0x7fc00000 [ 1123.681843][T19998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1123.720224][ T30] audit: type=1326 audit(2000000618.490:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19987 comm="syz.1.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd998e929 code=0x7fc00000 [ 1123.780503][ T1209] usb usb36-port1: attempt power cycle [ 1123.911254][T20012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.921844][T20012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.940402][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1124.122072][T18646] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1124.239597][T20020] xt_connbytes: Forcing CT accounting to be enabled [ 1124.246700][T20020] --map-set only usable from mangle table [ 1124.374501][ T1209] usb usb36-port1: unable to enumerate USB device [ 1124.392469][T18646] usb 4-1: Using ep0 maxpacket: 16 [ 1124.469023][T18646] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1124.521050][T18646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.573236][T18646] usb 4-1: config 0 has no interface number 0 [ 1124.583222][T18646] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1124.595191][T18646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.603826][T18646] usb 4-1: Product: syz [ 1124.608034][T18646] usb 4-1: Manufacturer: syz [ 1124.615472][T18646] usb 4-1: SerialNumber: syz [ 1124.623413][T18646] usb 4-1: config 0 descriptor?? [ 1124.631226][T18646] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1124.644209][T18646] usb 4-1: No valid video chain found. [ 1125.444777][T20030] ALSA: mixer_oss: invalid OSS volume 'u' [ 1125.467810][T20030] random: crng reseeded on system resumption [ 1125.853735][T20039] netlink: 'syz.6.3627': attribute type 1 has an invalid length. [ 1126.301782][T20039] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1126.573249][ T9483] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1126.573775][T20039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.591314][T20039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3627'. [ 1126.702317][ T3500] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1126.802069][ T9483] usb 5-1: Using ep0 maxpacket: 16 [ 1126.862870][ T9483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.911518][ T9483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.934660][ T9483] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1126.967323][ T9483] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1126.990681][ T9483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.035662][ T9483] usb 5-1: config 0 descriptor?? [ 1127.081829][ T1209] usb 4-1: USB disconnect, device number 74 [ 1127.195536][T20039] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1127.205055][T20039] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1127.224392][T20039] bond1 (unregistering): Released all slaves [ 1127.257466][ T30] audit: type=1400 audit(2000000622.300:4481): avc: denied { name_bind 0x1000000 } for pid=20085 comm="syz.3.3631" path="socket:[76182]" dev="sockfs" ino=76182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1127.257853][T20086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1127.311465][T20037] fuse: Unknown parameter 'tŃLq˙:HBtďy®›O ś®EO6BŠ¸s<”ĺŔm??°:ÁĂUD)űi^F' [ 1127.410262][T20096] siw: device registration error -23 [ 1127.465311][T20099] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 1127.529390][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1127.539924][T20096] ip6tnl0: mtu less than device minimum [ 1127.566665][ T9483] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001D/input/input35 [ 1127.582261][T20099] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 1127.639305][T11658] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1127.640998][ T9483] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1127.702160][T13533] Bluetooth: hci5: command 0x0406 tx timeout [ 1127.915025][T20110] ALSA: mixer_oss: invalid OSS volume 'u' [ 1127.926083][T20110] random: crng reseeded on system resumption [ 1128.029188][T16709] usb 5-1: USB disconnect, device number 90 [ 1128.862473][T20116] Cannot find del_set index 0 as target [ 1129.025614][T20127] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 1129.042357][T16709] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1129.083931][T20127] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1129.111597][T11658] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1129.112465][T20127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1129.145070][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3644'. [ 1129.232526][T16709] usb 3-1: Using ep0 maxpacket: 16 [ 1129.253650][T16709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.285300][T16709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.324925][T16709] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1129.359599][T16709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.399867][T16709] usb 3-1: config 0 descriptor?? [ 1129.425243][T20127] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1129.436894][T20127] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1129.447385][T20127] bond1 (unregistering): Released all slaves [ 1129.526186][T20134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.537983][T20134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.829768][T16709] konepure 0003:1E7D:2DB4.001E: unknown main item tag 0x0 [ 1129.852313][T16709] konepure 0003:1E7D:2DB4.001E: unknown main item tag 0x0 [ 1129.859485][T16709] konepure 0003:1E7D:2DB4.001E: unknown main item tag 0x0 [ 1129.876102][T16709] konepure 0003:1E7D:2DB4.001E: unknown main item tag 0x0 [ 1129.902252][T16709] konepure 0003:1E7D:2DB4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 1130.266695][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.276062][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.293401][T16709] usb 3-1: USB disconnect, device number 90 [ 1130.333067][T20147] netlink: 'syz.1.3650': attribute type 5 has an invalid length. [ 1130.721605][ T1209] libceph: connect (1)[c::]:6789 error -101 [ 1130.806903][ T1209] libceph: mon0 (1)[c::]:6789 connect error [ 1130.868406][T20158] SELinux: failed to load policy [ 1130.884869][T20153] ceph: No mds server is up or the cluster is laggy [ 1131.378319][T20169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1131.994578][T20170] SELinux: failed to load policy [ 1132.404442][T20187] vlan2: entered promiscuous mode [ 1132.409646][T20187] erspan0: entered promiscuous mode [ 1132.598733][T20193] netlink: 'syz.6.3662': attribute type 1 has an invalid length. [ 1132.623128][T20193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1132.632966][T20193] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3662'. [ 1132.747042][T20193] bond1 (unregistering): Released all slaves [ 1133.182837][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3665'. [ 1133.572777][T20206] IPVS: stopping master sync thread 20211 ... [ 1133.582159][T20211] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1133.630617][ T5838] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1133.631872][T20206] SELinux: policydb magic number 0x28 does not match expected magic number 0xf97cff8c [ 1133.748045][T20206] SELinux: failed to load policy [ 1133.997024][T20222] lo speed is unknown, defaulting to 1000 [ 1134.003379][T20222] lo speed is unknown, defaulting to 1000 [ 1134.014153][T20222] lo speed is unknown, defaulting to 1000 [ 1134.083223][T20222] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1134.222601][ T30] audit: type=1400 audit(2000000629.020:4482): avc: denied { bind } for pid=20214 comm="syz.4.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1134.370002][T20222] lo speed is unknown, defaulting to 1000 [ 1134.376520][T20222] lo speed is unknown, defaulting to 1000 [ 1134.384450][T20222] lo speed is unknown, defaulting to 1000 [ 1134.390892][T20222] lo speed is unknown, defaulting to 1000 [ 1134.458187][T20222] lo speed is unknown, defaulting to 1000 [ 1134.465700][T20222] lo speed is unknown, defaulting to 1000 [ 1135.035359][ T30] audit: type=1400 audit(2000000630.080:4483): avc: denied { map } for pid=20234 comm="syz.6.3676" path="/218/bus" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1135.063386][ T9808] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1135.077463][T20238] netlink: 'syz.1.3677': attribute type 1 has an invalid length. [ 1135.121825][T20238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1135.130119][T20238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3677'. [ 1135.257301][T20238] bond2 (unregistering): Released all slaves [ 1135.491334][T16709] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1135.682199][T16709] usb 3-1: Using ep0 maxpacket: 16 [ 1135.693094][T16709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.726150][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3680'. [ 1135.779519][T16709] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1135.862800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1135.876819][T16709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.993174][ T30] audit: type=1400 audit(2000000630.940:4484): avc: denied { write } for pid=20254 comm="syz.1.3681" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1136.055821][T16709] usb 3-1: config 0 descriptor?? [ 1136.070612][ T30] audit: type=1400 audit(2000000630.980:4485): avc: denied { ioctl } for pid=20254 comm="syz.1.3681" path="/dev/usbmon9" dev="devtmpfs" ino=744 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1136.116089][ T30] audit: type=1400 audit(2000000631.160:4486): avc: denied { unmount } for pid=15418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1136.305844][T20265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.315895][ T30] audit: type=1400 audit(2000000631.370:4487): avc: denied { setopt } for pid=20262 comm="syz.1.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1136.344032][T11663] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1136.462266][T20265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.672058][T20272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.092229][ T5935] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1137.259407][T20230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.300531][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1137.339507][T16709] usbhid 3-1:0.0: can't add hid device: -71 [ 1137.345562][T16709] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1137.369013][T16709] usb 3-1: USB disconnect, device number 91 [ 1137.375362][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 1137.408073][ T5935] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1137.427753][ T5935] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.439457][ T5935] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1137.468322][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1137.478128][ T5935] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1137.490805][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.503318][ T5935] usb 2-1: config 0 descriptor?? [ 1137.516780][T20289] netlink: 'syz.6.3691': attribute type 1 has an invalid length. [ 1137.561720][T20289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1137.570014][T20289] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3691'. [ 1137.680141][ T59] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1137.702186][ T5828] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1137.724650][T20289] bond1 (unregistering): Released all slaves [ 1137.761242][T20293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.773605][T20293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.790146][T20293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.799623][T20293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.802087][T20294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.825784][T20294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.853782][ T5828] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1137.863993][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.903256][ T5828] usb 5-1: config 0 descriptor?? [ 1137.918185][ T5828] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1137.929389][ T5935] zeroplus 0003:0C12:0030.001F: item 0 1 0 9 parsing failed [ 1137.970996][ T5935] zeroplus 0003:0C12:0030.001F: parse failed [ 1137.979535][ T5828] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1137.990372][ T5935] zeroplus 0003:0C12:0030.001F: probe with driver zeroplus failed with error -22 [ 1138.284630][ T30] audit: type=1400 audit(2000000633.320:4488): avc: denied { setattr } for pid=20284 comm="syz.4.3690" name="ALG" dev="sockfs" ino=77722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1138.468106][ T5935] usb 2-1: USB disconnect, device number 95 [ 1138.474121][T18646] usb 5-1: USB disconnect, device number 91 [ 1139.953352][T20328] syz.2.3702: attempt to access beyond end of device [ 1139.953352][T20328] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1139.953871][T20325] can0: slcan on ptm0. [ 1140.145967][T20336] mkiss: ax0: crc mode is auto. [ 1140.192113][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1140.223418][T20325] can0 (unregistered): slcan off ptm0. [ 1140.308864][T20344] Cannot find del_set index 0 as target [ 1140.454983][ T30] audit: type=1400 audit(2000000635.500:4489): avc: denied { append } for pid=20345 comm="syz.2.3709" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1140.522778][T20346] SELinux: failed to load policy [ 1140.563993][T20353] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1140.577263][T20353] SELinux: failed to load policy [ 1140.584178][T20355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3712'. [ 1140.597772][T20356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3712'. [ 1140.611127][T20359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.625940][T20359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.945330][T20364] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3714'. [ 1142.137487][T20396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1142.495899][ T59] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1143.814109][T20440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.966995][T20440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.023312][ T30] audit: type=1400 audit(2000000639.060:4490): avc: denied { ioctl } for pid=20433 comm="syz.6.3736" path="socket:[77895]" dev="sockfs" ino=77895 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1144.046389][T20438] lo speed is unknown, defaulting to 1000 [ 1144.116510][ T30] audit: type=1400 audit(2000000639.060:4491): avc: denied { accept } for pid=20433 comm="syz.6.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1144.155664][T20447] netlink: 'syz.2.3740': attribute type 13 has an invalid length. [ 1144.219719][ T9483] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 1144.236392][T20438] lo speed is unknown, defaulting to 1000 [ 1144.372062][ T9483] usb 5-1: device descriptor read/64, error -71 [ 1144.376338][ T30] audit: type=1400 audit(2000000639.420:4492): avc: denied { append } for pid=20453 comm="syz.2.3742" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1144.632203][ T9483] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 1144.662225][T18646] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1144.772383][ T9483] usb 5-1: device descriptor read/64, error -71 [ 1144.829361][T18646] usb 3-1: Using ep0 maxpacket: 16 [ 1144.843869][T18646] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1144.872175][T18646] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1144.902318][ T9483] usb usb5-port1: attempt power cycle [ 1144.962033][T18646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.042978][T18646] usb 3-1: config 0 descriptor?? [ 1145.052387][ T30] audit: type=1401 audit(2000000640.100:4493): op=fscreate invalid_context=04 [ 1145.275527][T20454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.284081][T20454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.294816][T16709] usb 3-1: USB disconnect, device number 92 [ 1145.342716][ T9483] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1145.589602][T20467] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1145.589602][T20467] program syz.6.3746 not setting count and/or reply_len properly [ 1145.703137][ T9483] usb 5-1: device descriptor read/8, error -71 [ 1145.742334][T20470] SET target dimension over the limit! [ 1145.942660][ T9483] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1146.020849][T20480] ALSA: mixer_oss: invalid OSS volume 'u' [ 1146.033066][T20480] random: crng reseeded on system resumption [ 1146.109839][ T9483] usb 5-1: device descriptor read/8, error -71 [ 1146.222421][ T9483] usb usb5-port1: unable to enumerate USB device [ 1146.432302][T20490] ALSA: mixer_oss: invalid OSS volume 'u' [ 1146.456021][T20490] random: crng reseeded on system resumption [ 1147.523818][T20494] Cannot find add_set index 0 as target [ 1147.599194][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1147.701298][T20506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.114344][T20500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1150.224920][T20529] can: request_module (can-proto-3) failed. [ 1151.852916][T20559] SET target dimension over the limit! [ 1151.936924][T20568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1152.165208][ T30] audit: type=1400 audit(2000000647.180:4494): avc: denied { unmount } for pid=17247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1152.185227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1153.081137][T20587] vhci_hcd vhci_hcd.0: port 0 already used [ 1153.091254][ T30] audit: type=1400 audit(2000000648.120:4495): avc: denied { setopt } for pid=20591 comm="syz.2.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1153.148240][ T30] audit: type=1400 audit(2000000648.140:4496): avc: denied { write } for pid=20591 comm="syz.2.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1153.646595][T20603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.659733][T20603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.801046][T16709] lo speed is unknown, defaulting to 1000 [ 1154.572129][ T5838] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 1155.325474][T20612] SET target dimension over the limit! [ 1155.431876][T20606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.451452][T20614] can: request_module (can-proto-3) failed. [ 1155.461331][T20606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.532302][ T9] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1155.702232][T16709] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1155.805200][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1155.815065][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.831211][ T9] usb 4-1: Product: syz [ 1155.838953][ T9] usb 4-1: Manufacturer: syz [ 1155.849078][ T9] usb 4-1: SerialNumber: syz [ 1155.857714][ T9] usb 4-1: config 0 descriptor?? [ 1155.925999][ T9] usb 4-1: selecting invalid altsetting 3 [ 1155.933677][T16709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.955484][T16709] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1155.976995][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 1155.979900][T16709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.007556][ T9] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1156.019968][ T9] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 1156.031416][T16709] usb 5-1: Product: syz [ 1156.038876][T16709] usb 5-1: Manufacturer: syz [ 1156.045012][T16709] usb 5-1: SerialNumber: syz [ 1156.051752][T16709] usb 5-1: config 0 descriptor?? [ 1156.431962][ T9] usb 4-1: USB disconnect, device number 76 [ 1156.433160][T16709] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1156.466030][T16709] usb 5-1: USB disconnect, device number 96 [ 1156.606858][T20641] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1156.613376][T20641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1156.625096][T20641] vhci_hcd vhci_hcd.0: Device attached [ 1156.902352][ T9] usb 36-1: SetAddress Request (114) to port 0 [ 1156.911501][ T9] usb 36-1: new SuperSpeed USB device number 114 using vhci_hcd [ 1157.051766][T20644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.064287][T20644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.459151][T20642] vhci_hcd: connection reset by peer [ 1158.483998][T11677] vhci_hcd: stop threads [ 1158.533170][T20653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.548594][T11677] vhci_hcd: release socket [ 1158.638832][T11677] vhci_hcd: disconnect device [ 1158.871650][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1159.492073][T18646] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1159.492075][T16709] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1159.530072][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 1159.536253][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 1159.638257][T20679] ceph: No mds server is up or the cluster is laggy [ 1159.709455][T18646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.727820][T20686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.733752][T16709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1159.737039][T20686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.916717][ T9483] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1159.924869][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 1159.925879][T18646] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 1159.940059][T18646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.972590][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 1159.978673][T16709] usb 5-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=a9.d7 [ 1159.983336][T18646] usb 4-1: Product: syz [ 1160.001791][T16709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.013370][T18646] usb 4-1: Manufacturer: syz [ 1160.020183][T16709] usb 5-1: config 0 descriptor?? [ 1160.038398][T20683] 9pnet: Could not find request transport:  [ 1160.040206][T16709] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 1160.044467][T18646] usb 4-1: SerialNumber: syz [ 1160.063835][T18646] usb 4-1: config 0 descriptor?? [ 1160.072167][ T9483] usb 2-1: Using ep0 maxpacket: 8 [ 1160.078535][ T9483] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1160.086922][ T9483] usb 2-1: config 0 has no interface number 0 [ 1160.100151][ T9483] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1160.111442][ T9483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.119826][T18646] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1160.129140][ T9483] usb 2-1: Product: syz [ 1160.139222][ T9483] usb 2-1: Manufacturer: syz [ 1160.144214][ T9483] usb 2-1: SerialNumber: syz [ 1160.152781][ T9483] usb 2-1: config 0 descriptor?? [ 1160.278620][ T1209] usb 4-1: USB disconnect, device number 77 [ 1160.286778][T16709] usb 5-1: USB disconnect, device number 97 [ 1160.398509][ T9483] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1160.405032][ T9483] usb 2-1: No streaming interface found for terminal 6. [ 1160.419005][ T9483] usb 2-1: USB disconnect, device number 96 [ 1160.642083][ T5935] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1160.711473][T20701] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1160.717994][T20701] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1160.726577][T20701] vhci_hcd vhci_hcd.0: Device attached [ 1160.792289][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1161.034061][T16709] usb 46-1: SetAddress Request (18) to port 0 [ 1161.070596][T16709] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1161.104518][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.114667][ T5935] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1161.128747][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.377167][ T5935] usb 3-1: device descriptor read/64, error -71 [ 1161.535218][ T5935] usb usb3-port1: attempt power cycle [ 1161.964822][ T5935] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1162.016547][T20710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.131744][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1162.402260][ T5935] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1162.423850][ T5935] usb 3-1: device descriptor read/8, error -71 [ 1162.426089][ T9] usb 36-1: device descriptor read/8, error -110 [ 1162.540907][ T5935] usb usb3-port1: unable to enumerate USB device [ 1162.739185][T20702] vhci_hcd: connection reset by peer [ 1162.803406][T11656] vhci_hcd: stop threads [ 1162.822247][T11656] vhci_hcd: release socket [ 1162.879025][T11656] vhci_hcd: disconnect device [ 1163.301548][T20718] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1163.311599][T20718] SELinux: failed to load policy [ 1163.378085][ T9] usb usb36-port1: attempt power cycle [ 1163.618592][T20734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=20734 comm=syz.2.3824 [ 1163.648671][ T30] audit: type=1400 audit(2000000658.690:4497): avc: denied { set_context_mgr } for pid=20730 comm="syz.6.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1163.692393][ T1209] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1164.948546][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 1165.007064][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.059093][ T9] usb usb36-port1: unable to enumerate USB device [ 1165.097947][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.142485][T20747] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1165.181598][ T1209] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1165.210785][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1165.239656][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.258262][T20747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1165.286026][ T1209] usb 4-1: config 0 descriptor?? [ 1165.510420][T20753] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1165.516979][T20753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1165.655971][T20759] netlink: 'syz.2.3827': attribute type 1 has an invalid length. [ 1165.931737][T20753] vhci_hcd vhci_hcd.0: Device attached [ 1166.150482][T20757] orangefs_mount: mount request failed with -4 [ 1167.680361][T11658] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1167.766823][ T1209] usbhid 4-1:0.0: can't add hid device: -71 [ 1167.772142][T20765] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1167.779265][T20765] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1167.785247][ T1209] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1167.807348][T20765] vhci_hcd vhci_hcd.0: Device attached [ 1167.813363][ T1209] usb 4-1: USB disconnect, device number 78 [ 1168.092341][ T5935] usb 38-1: SetAddress Request (122) to port 0 [ 1168.134895][T20765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.154678][T20765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.191003][ T5935] usb 38-1: new SuperSpeed USB device number 122 using vhci_hcd [ 1169.236484][T11663] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1169.251827][T20754] vhci_hcd: connection reset by peer [ 1169.268196][T11663] vhci_hcd: stop threads [ 1169.274824][T11663] vhci_hcd: release socket [ 1169.279604][T16709] usb 46-1: device descriptor read/8, error -110 [ 1169.286106][T11663] vhci_hcd: disconnect device [ 1169.368336][T20766] vhci_hcd: connection reset by peer [ 1169.375661][ T3507] vhci_hcd: stop threads [ 1169.379888][ T3507] vhci_hcd: release socket [ 1169.384682][ T3507] vhci_hcd: disconnect device [ 1169.495557][T20777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20777 comm=syz.3.3832 [ 1169.673077][T16709] usb usb46-port1: attempt power cycle [ 1170.270930][T16709] usb usb46-port1: unable to enumerate USB device [ 1170.284031][ T30] audit: type=1400 audit(2000000665.270:4498): avc: denied { bind } for pid=20788 comm="syz.6.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1170.422125][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1170.774944][T20795] netlink: 'syz.6.3840': attribute type 1 has an invalid length. [ 1170.824867][T20795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1170.833145][T20795] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3840'. [ 1171.502563][ T1209] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1171.661781][T20795] bond2 (unregistering): Released all slaves [ 1171.692365][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 1171.721333][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.765877][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.827258][ T1209] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1171.853860][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.880139][ T1209] usb 2-1: config 0 descriptor?? [ 1172.218351][T20823] delete_channel: no stack [ 1172.345959][ T1209] usbhid 2-1:0.0: can't add hid device: -71 [ 1172.370663][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1172.447464][ T1209] usb 2-1: USB disconnect, device number 97 [ 1173.076178][T20830] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1173.082734][T20830] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1173.091742][ T30] audit: type=1400 audit(2000000668.130:4499): avc: denied { setattr } for pid=20829 comm="syz.2.3847" name="TIPC" dev="sockfs" ino=78671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1173.123914][T20830] vhci_hcd vhci_hcd.0: Device attached [ 1173.402797][ T5828] usb 42-1: SetAddress Request (84) to port 0 [ 1174.210000][ T5828] usb 42-1: new SuperSpeed USB device number 84 using vhci_hcd [ 1174.221849][ T3507] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1174.342528][ T5935] usb 38-1: device descriptor read/8, error -110 [ 1174.389568][ T9483] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1174.444739][T20832] vhci_hcd: connection reset by peer [ 1174.467056][T11677] vhci_hcd: stop threads [ 1174.472160][T11677] vhci_hcd: release socket [ 1174.477172][T11677] vhci_hcd: disconnect device [ 1174.633782][ T9483] usb 3-1: Using ep0 maxpacket: 32 [ 1174.687719][ T9483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.705843][ T9483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.716124][ T9483] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1174.737901][ T9483] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1174.752069][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.840921][ T5935] usb usb38-port1: attempt power cycle [ 1174.854161][ T9483] usb 3-1: config 0 descriptor?? [ 1175.345560][ T9483] usbhid 3-1:0.0: can't add hid device: -71 [ 1175.370998][ T9483] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1175.735743][ T5935] usb usb38-port1: unable to enumerate USB device [ 1175.816864][ T9483] usb 3-1: USB disconnect, device number 97 [ 1175.855631][T20865] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 1175.871900][T20865] SELinux: failed to load policy [ 1176.062083][T18646] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1176.625289][ T1209] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1176.642322][T18646] usb 5-1: Using ep0 maxpacket: 16 [ 1176.652754][T18646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.674420][T18646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.685112][T18646] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1176.708067][T18646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.718328][T18646] usb 5-1: config 0 descriptor?? [ 1176.815389][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 1176.840661][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.847381][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.902297][ T24] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1177.058750][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.090867][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.130257][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.131763][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1177.153819][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1177.171703][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.179959][ T24] usb 3-1: Product: syz [ 1177.185650][ T24] usb 3-1: Manufacturer: syz [ 1177.193049][ T24] usb 3-1: SerialNumber: syz [ 1177.202533][ T1209] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1177.212671][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.225160][ T1209] usb 4-1: config 0 descriptor?? [ 1177.333463][T20888] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1177.340021][T20888] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1177.362035][T18646] usbhid 5-1:0.0: can't add hid device: -71 [ 1177.373611][T18646] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1177.612994][T20888] vhci_hcd vhci_hcd.0: Device attached [ 1177.763914][T18646] usb 5-1: USB disconnect, device number 98 [ 1177.972298][T16709] usb 46-1: SetAddress Request (22) to port 0 [ 1177.978736][T16709] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1178.472623][ T30] audit: type=1400 audit(2000000673.500:4500): avc: denied { mount } for pid=20879 comm="syz.2.3864" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1178.521480][ T30] audit: type=1400 audit(2000000673.500:4501): avc: denied { search } for pid=20879 comm="syz.2.3864" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1178.544176][ T30] audit: type=1400 audit(2000000673.500:4502): avc: denied { unmount } for pid=20879 comm="syz.2.3864" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1178.564274][ T30] audit: type=1400 audit(2000000673.500:4503): avc: denied { search } for pid=20879 comm="syz.2.3864" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1178.590477][ T1209] usbhid 4-1:0.0: can't add hid device: -71 [ 1178.610419][ T1209] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1178.637820][ T1209] usb 4-1: USB disconnect, device number 79 [ 1178.654748][ T30] audit: type=1400 audit(2000000673.700:4504): avc: denied { bind } for pid=20912 comm="syz.1.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1178.679102][T20913] cgroup2: Unknown parameter 'pkd9 /s_lo€vlevents' [ 1178.793744][T20891] vhci_hcd: connection reset by peer [ 1178.800436][T11656] vhci_hcd: stop threads [ 1178.804797][T11656] vhci_hcd: release socket [ 1178.809316][T11656] vhci_hcd: disconnect device [ 1179.347562][ T5828] usb 42-1: device descriptor read/8, error -110 [ 1179.932149][ T24] usb 3-1: 0:2 : does not exist [ 1180.266858][ T5828] usb usb42-port1: attempt power cycle [ 1180.288127][ T24] usb 3-1: USB disconnect, device number 98 [ 1180.923378][ T5828] usb usb42-port1: unable to enumerate USB device [ 1181.415013][T20939] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 1181.817020][T20930] delete_channel: no stack [ 1181.912380][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1181.943823][T20935] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3879'. [ 1181.944275][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3881'. [ 1182.037894][T20946] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1182.057750][T20946] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1182.093782][T20946] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1182.115800][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1182.163727][T20946] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1182.225653][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1182.259642][T20946] bond1: (slave geneve2): making interface the new active one [ 1182.270079][T20940] can: request_module (can-proto-3) failed. [ 1182.377896][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1182.387233][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.409205][T20946] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1182.550255][ T9] usb 5-1: Product: syz [ 1182.571174][ T9] usb 5-1: Manufacturer: syz [ 1182.587248][T20939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1182.645862][ T9] usb 5-1: SerialNumber: syz [ 1182.698745][ T9] usb 5-1: config 0 descriptor?? [ 1182.753906][T20932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1182.799186][T20932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1183.065138][T16709] usb 46-1: device descriptor read/8, error -110 [ 1183.091646][T20965] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1183.098181][T20965] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1183.191257][T20965] vhci_hcd vhci_hcd.0: Device attached [ 1183.216646][T20970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1183.378545][ T9] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 1183.389303][ T9] usb 5-1: USB disconnect, device number 99 [ 1183.452092][T18646] usb 38-1: SetAddress Request (126) to port 0 [ 1183.475821][T18646] usb 38-1: new SuperSpeed USB device number 126 using vhci_hcd [ 1184.338631][T16709] usb usb46-port1: attempt power cycle [ 1184.400947][T20978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1184.407503][T20978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1184.432560][T20978] vhci_hcd vhci_hcd.0: Device attached [ 1184.440335][ T59] wlan0: Trigger new scan to find an IBSS to join [ 1184.453810][T20966] vhci_hcd: connection reset by peer [ 1184.732131][ T1209] usb 36-1: SetAddress Request (118) to port 0 [ 1184.738339][ T1209] usb 36-1: new SuperSpeed USB device number 118 using vhci_hcd [ 1184.802070][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1185.058711][T16709] usb usb46-port1: unable to enumerate USB device [ 1185.280711][T11677] vhci_hcd: stop threads [ 1185.323364][T11677] vhci_hcd: release socket [ 1185.358438][T11677] vhci_hcd: disconnect device [ 1185.918455][T20979] vhci_hcd: connection reset by peer [ 1185.924718][ T3473] vhci_hcd: stop threads [ 1185.931670][ T3473] vhci_hcd: release socket [ 1185.945433][ T3473] vhci_hcd: disconnect device [ 1185.962046][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1185.973744][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.032237][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.044392][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1186.065708][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.180611][ T9] usb 5-1: config 0 descriptor?? [ 1186.650965][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1186.774693][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1187.014823][ T9] usb 5-1: USB disconnect, device number 100 [ 1187.148337][T21013] dlm: non-version read from control device 116 [ 1187.163043][ T30] audit: type=1400 audit(2000000682.200:4505): avc: denied { getopt } for pid=21012 comm="syz.2.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1187.284168][T21024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1187.290713][T21024] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1187.316937][T21024] vhci_hcd vhci_hcd.0: Device attached [ 1187.335373][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3897'. [ 1188.388068][T11672] wlan0: Trigger new scan to find an IBSS to join [ 1188.686613][T21027] vhci_hcd: connection closed [ 1188.712690][ T1114] vhci_hcd: stop threads [ 1188.796918][ T1114] vhci_hcd: release socket [ 1188.832952][ T1114] vhci_hcd: disconnect device [ 1190.095989][T18646] usb 38-1: device descriptor read/8, error -110 [ 1190.214976][ T3473] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1190.338333][T21053] fuse: Bad value for 'fd' [ 1190.540133][T21071] SELinux: policydb version -845211227 does not match my version range 15-34 [ 1190.540459][T18646] usb usb38-port1: attempt power cycle [ 1190.552062][T21071] SELinux: failed to load policy [ 1190.586435][T16709] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1190.752680][ T36] wlan0: Creating new IBSS network, BSSID 4e:af:d1:aa:22:8a [ 1190.803497][T21077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3914'. [ 1190.862247][T16709] usb 2-1: Using ep0 maxpacket: 16 [ 1190.876045][T16709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.899816][T16709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.906006][ T1209] usb 36-1: device descriptor read/8, error -110 [ 1190.910649][T16709] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1190.926616][T16709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.017122][T16709] usb 2-1: config 0 descriptor?? [ 1191.072060][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1191.759988][T18646] usb usb38-port1: unable to enumerate USB device [ 1192.043161][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1192.054844][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1192.073268][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.086632][T21092] can: request_module (can-proto-3) failed. [ 1192.259829][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1192.274789][ T1209] usb usb36-port1: attempt power cycle [ 1193.186143][T21093] vhci_hcd vhci_hcd.0: port 0 already used [ 1193.222087][ T9] usb 5-1: config 1 has no interface number 1 [ 1193.223091][T16709] usbhid 2-1:0.0: can't add hid device: -71 [ 1193.228230][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1193.234482][T16709] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1193.283383][T16709] usb 2-1: USB disconnect, device number 98 [ 1194.362606][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1194.371675][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.391069][ T9] usb 5-1: can't set config #1, error -71 [ 1194.398711][ T9] usb 5-1: USB disconnect, device number 101 [ 1194.882950][T21111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.922984][T21111] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1194.978925][T21111] bond0: (slave gre0): Error -95 calling set_mac_address [ 1194.991038][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1195.101802][ T1209] usb usb36-port1: unable to enumerate USB device [ 1195.420092][T21121] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1195.451583][T21121] VFS: Can't find a romfs filesystem on dev nullb0. [ 1195.451583][T21121] [ 1195.532101][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1195.537381][ T30] audit: type=1400 audit(2000000690.580:4506): avc: denied { map } for pid=21120 comm="syz.6.3924" path="socket:[81260]" dev="sockfs" ino=81260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1195.591609][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1195.599749][ T9] usb 5-1: config 0 has no interface number 0 [ 1195.617627][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1195.645037][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.656319][ T30] audit: type=1400 audit(2000000690.580:4507): avc: denied { read } for pid=21120 comm="syz.6.3924" path="socket:[81260]" dev="sockfs" ino=81260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1195.730859][ T9] usb 5-1: Product: syz [ 1195.742755][ T9] usb 5-1: Manufacturer: syz [ 1195.747368][ T9] usb 5-1: SerialNumber: syz [ 1195.803005][ T9] usb 5-1: config 0 descriptor?? [ 1195.810143][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.460360][T21140] netlink: 'syz.1.3929': attribute type 1 has an invalid length. [ 1196.507009][T21140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1196.515586][T21140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3929'. [ 1196.668626][ T24] usb 5-1: USB disconnect, device number 102 [ 1196.703503][T21140] bond2 (unregistering): Released all slaves [ 1196.825397][T21154] SET target dimension over the limit! [ 1196.835585][ T30] audit: type=1400 audit(2000000691.880:4508): avc: denied { ioctl } for pid=21120 comm="syz.6.3924" path="socket:[80543]" dev="sockfs" ino=80543 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1197.102118][T16709] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1197.175088][ T9] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1197.263822][T16709] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 1197.347452][ T9] usb 3-1: config 0 has an invalid interface number: 80 but max is 0 [ 1197.378981][T16709] usb 4-1: config 0 has no interface number 0 [ 1197.385270][ T9] usb 3-1: config 0 has no interface number 0 [ 1197.423882][T16709] usb 4-1: New USB device found, idVendor=5276, idProduct=a15e, bcdDevice=ba.30 [ 1197.436627][ T9] usb 3-1: New USB device found, idVendor=06e1, idProduct=0008, bcdDevice=8f.e9 [ 1197.453434][T16709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.481161][T16709] usb 4-1: Product: syz [ 1197.486553][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.497440][T16709] usb 4-1: Manufacturer: syz [ 1197.515348][T16709] usb 4-1: SerialNumber: syz [ 1197.525583][ T9] usb 3-1: Product: syz [ 1197.540629][ T9] usb 3-1: Manufacturer: syz [ 1197.544472][T16709] usb 4-1: config 0 descriptor?? [ 1197.664694][ T9] usb 3-1: SerialNumber: syz [ 1198.131604][ T9] usb 3-1: config 0 descriptor?? [ 1198.549872][T16709] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1198.583408][T16709] usb 4-1: MIDIStreaming interface descriptor not found [ 1198.671891][ T9] kaweth 3-1:0.80: Firmware present in device. [ 1198.703796][ T9] kaweth 3-1:0.80: Error reading configuration (-71), no net device created [ 1198.712944][ T1209] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1198.728243][ T9] kaweth 3-1:0.80: probe with driver kaweth failed with error -5 [ 1198.759002][ T9] usb 3-1: USB disconnect, device number 99 [ 1198.762387][T16709] usb 4-1: USB disconnect, device number 80 [ 1198.962432][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 1198.969429][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.986870][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.996804][ T1209] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1199.007074][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.018174][ T1209] usb 5-1: config 0 descriptor?? [ 1199.309689][T21210] SELinux: failed to load policy [ 1199.639748][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 1199.661568][ T1209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1199.710528][ T1209] usb 5-1: USB disconnect, device number 103 [ 1200.103302][T21218] netlink: 'syz.3.3945': attribute type 10 has an invalid length. [ 1200.240673][ T3507] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1200.322833][T21218] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1202.128717][T21252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1202.135260][T21252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1202.168460][T21252] vhci_hcd vhci_hcd.0: Device attached [ 1202.525975][ T1209] usb 38-1: SetAddress Request (4) to port 0 [ 1202.608869][ T1209] usb 38-1: new SuperSpeed USB device number 4 using vhci_hcd [ 1203.878551][T21219] syz.3.3945 (21219): drop_caches: 2 [ 1204.758569][T21266] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1205.021039][T21273] Failed to get privilege flags for destination (handle=0x0:0x20000) [ 1205.350223][T21253] vhci_hcd: connection reset by peer [ 1205.350422][T21279] netlink: 'syz.1.3964': attribute type 1 has an invalid length. [ 1205.428776][T11661] vhci_hcd: stop threads [ 1205.434013][T11661] vhci_hcd: release socket [ 1205.443925][T11661] vhci_hcd: disconnect device [ 1205.523743][T21279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1205.554652][T11663] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1205.556533][T21286] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1206.048476][T21288] vlan2: entered allmulticast mode [ 1206.053960][T21288] veth1: entered allmulticast mode [ 1206.059796][T21288] veth1: entered promiscuous mode [ 1206.069876][T21288] veth1: left promiscuous mode [ 1206.091849][T21288] bond2: (slave vlan2): making interface the new active one [ 1206.107016][T21288] veth1: entered promiscuous mode [ 1206.114506][T21288] vlan2: entered promiscuous mode [ 1206.127152][T21288] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1206.145099][T21289] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3965'. [ 1206.201250][T21278] delete_channel: no stack [ 1206.243028][ T30] audit: type=1400 audit(2000000701.290:4509): avc: denied { mounton } for pid=21295 comm="syz.1.3969" path="/proc/579/task" dev="proc" ino=81947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1206.343964][T21300] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 1206.403757][T21300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1206.411931][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1206.465093][T21307] SELinux: failed to load policy [ 1206.969965][T21300] bond1 (unregistering): Released all slaves [ 1208.904857][ T1209] usb 38-1: device descriptor read/8, error -110 [ 1209.164683][T21340] can: request_module (can-proto-3) failed. [ 1209.314064][ T1209] usb usb38-port1: attempt power cycle [ 1209.432127][T21350] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3983'. [ 1209.878605][ T30] audit: type=1400 audit(2000000704.900:4510): avc: denied { connect } for pid=21345 comm="syz.4.3982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1210.038247][T21344] delete_channel: no stack [ 1210.400139][ T1209] usb usb38-port1: unable to enumerate USB device [ 1210.464297][T21364] vhci_hcd vhci_hcd.0: port 0 already used [ 1210.522037][ T5938] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1210.684066][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.888996][ T5938] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1212.342163][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.371345][ T5938] usb 3-1: config 0 descriptor?? [ 1212.384852][ T5938] pwc: Askey VC010 type 2 USB webcam detected. [ 1212.856569][T21388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.865828][T21388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.878258][T21388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.887368][T21388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.012334][ T5938] pwc: recv_control_msg error -32 req 02 val 2700 [ 1213.019945][ T5938] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1213.769210][ T5938] pwc: recv_control_msg error -32 req 04 val 1000 [ 1215.468069][ T5938] pwc: recv_control_msg error -71 req 04 val 1300 [ 1215.475215][ T5938] pwc: recv_control_msg error -71 req 04 val 1400 [ 1215.481950][ T5938] pwc: recv_control_msg error -71 req 02 val 2000 [ 1215.509723][ T5938] pwc: recv_control_msg error -71 req 02 val 2100 [ 1215.545596][ T5938] pwc: recv_control_msg error -71 req 04 val 1500 [ 1215.569091][ T5938] pwc: recv_control_msg error -71 req 02 val 2500 [ 1215.581006][T21418] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1215.587508][T21418] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1215.610874][ T5938] pwc: recv_control_msg error -71 req 02 val 2400 [ 1215.634693][T21414] SELinux: failed to load policy [ 1215.702824][ T5938] pwc: recv_control_msg error -71 req 02 val 2600 [ 1215.716116][T21413] can: request_module (can-proto-3) failed. [ 1215.723997][T21419] binder: 21417:21419 ioctl c0306201 0 returned -14 [ 1215.734550][ T5938] pwc: recv_control_msg error -71 req 02 val 2900 [ 1215.742386][T21418] vhci_hcd vhci_hcd.0: Device attached [ 1216.012083][ T5828] usb 42-1: SetAddress Request (88) to port 0 [ 1216.246275][ T5828] usb 42-1: new SuperSpeed USB device number 88 using vhci_hcd [ 1216.272143][ T5938] pwc: recv_control_msg error -71 req 02 val 2800 [ 1216.436302][ T5938] pwc: recv_control_msg error -71 req 04 val 1100 [ 1216.775976][ T5938] pwc: recv_control_msg error -71 req 04 val 1200 [ 1216.812257][ T5838] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 1216.814402][ T5938] pwc: Registered as video103. [ 1216.843705][ T5938] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 1216.892286][ T5938] usb 3-1: USB disconnect, device number 100 [ 1217.410653][ T30] audit: type=1400 audit(2000000712.290:4511): avc: denied { setopt } for pid=21417 comm="syz.6.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1218.474244][T21455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.484495][T21421] vhci_hcd: connection reset by peer [ 1218.484674][T21455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.498202][T11672] vhci_hcd: stop threads [ 1218.512278][T11672] vhci_hcd: release socket [ 1218.516879][T11672] vhci_hcd: disconnect device [ 1218.981541][T21455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.991153][T21455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.142047][T16709] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1219.204593][T21462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4011'. [ 1219.271885][ T30] audit: type=1400 audit(2000000714.310:4512): avc: denied { getopt } for pid=21465 comm="syz.2.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1219.313914][T16709] usb 2-1: Using ep0 maxpacket: 16 [ 1219.332720][T16709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.346215][T16709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.366184][T16709] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1219.376404][T16709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.389904][T16709] usb 2-1: config 0 descriptor?? [ 1219.568070][T21475] sp0: Synchronizing with TNC [ 1219.575463][ T36] [ 1219.577775][ T36] ===================================================== [ 1219.584671][ T36] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1219.592090][ T36] 6.16.0-rc1-syzkaller #0 Not tainted [ 1219.597424][ T36] ----------------------------------------------------- [ 1219.604320][ T36] kworker/u8:2/36 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1219.611918][ T36] ffffffff8f799cb8 (disc_data_lock#4){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 1219.620243][ T36] [ 1219.620243][ T36] and this task is already holding: [ 1219.627576][ T36] ffffffff9b088eb8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1219.636243][ T36] which would create a new lock dependency: [ 1219.642098][ T36] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#4){.+.+}-{3:3} [ 1219.649903][ T36] [ 1219.649903][ T36] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1219.659319][ T36] (&port_lock_key){-.-.}-{3:3} [ 1219.659333][ T36] [ 1219.659333][ T36] ... which became HARDIRQ-irq-safe at: [ 1219.671818][ T36] lock_acquire+0x179/0x350 [ 1219.676387][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 1219.681645][ T36] serial8250_handle_irq+0x95/0xcb0 [ 1219.686897][ T36] serial8250_default_handle_irq+0x9a/0x210 [ 1219.692843][ T36] serial8250_interrupt+0x103/0x210 [ 1219.698095][ T36] __handle_irq_event_percpu+0x22c/0x7d0 [ 1219.703786][ T36] handle_irq_event+0xab/0x1e0 [ 1219.708607][ T36] handle_edge_irq+0x28e/0xab0 [ 1219.713424][ T36] __common_interrupt+0xe2/0x250 [ 1219.718423][ T36] common_interrupt+0xba/0xe0 [ 1219.723155][ T36] asm_common_interrupt+0x26/0x40 [ 1219.728234][ T36] pv_native_safe_halt+0xf/0x20 [ 1219.733143][ T36] default_idle+0x13/0x20 [ 1219.737528][ T36] default_idle_call+0x6d/0xb0 [ 1219.742346][ T36] do_idle+0x391/0x510 [ 1219.746475][ T36] cpu_startup_entry+0x4f/0x60 [ 1219.751295][ T36] start_secondary+0x21d/0x2b0 [ 1219.756116][ T36] common_startup_64+0x13e/0x148 [ 1219.761105][ T36] [ 1219.761105][ T36] to a HARDIRQ-irq-unsafe lock: [ 1219.768086][ T36] (disc_data_lock#4){.+.+}-{3:3} [ 1219.768105][ T36] [ 1219.768105][ T36] ... which became HARDIRQ-irq-unsafe at: [ 1219.780951][ T36] ... [ 1219.780957][ T36] lock_acquire+0x179/0x350 [ 1219.788079][ T36] _raw_read_lock+0x5f/0x70 [ 1219.792643][ T36] sp_get+0x18/0xf0 [ 1219.796514][ T36] sixpack_receive_buf+0x59/0x1c90 [ 1219.801692][ T36] tty_ldisc_receive_buf+0x15a/0x1a0 [ 1219.807043][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 1219.812826][ T36] flush_to_ldisc+0x26b/0x780 [ 1219.817564][ T36] process_one_work+0x9cf/0x1b70 [ 1219.822558][ T36] worker_thread+0x6c8/0xf10 [ 1219.827203][ T36] kthread+0x3c5/0x780 [ 1219.831326][ T36] ret_from_fork+0x5d4/0x6f0 [ 1219.835975][ T36] ret_from_fork_asm+0x1a/0x30 [ 1219.840794][ T36] [ 1219.840794][ T36] other info that might help us debug this: [ 1219.840794][ T36] [ 1219.850988][ T36] Possible interrupt unsafe locking scenario: [ 1219.850988][ T36] [ 1219.859287][ T36] CPU0 CPU1 [ 1219.864624][ T36] ---- ---- [ 1219.869958][ T36] lock(disc_data_lock#4); [ 1219.874436][ T36] local_irq_disable(); [ 1219.881176][ T36] lock(&port_lock_key); [ 1219.887999][ T36] lock(disc_data_lock#4); [ 1219.894996][ T36] [ 1219.898427][ T36] lock(&port_lock_key); [ 1219.902899][ T36] [ 1219.902899][ T36] *** DEADLOCK *** [ 1219.902899][ T36] [ 1219.911008][ T36] 6 locks held by kworker/u8:2/36: [ 1219.916082][ T36] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1219.927180][ T36] #1: ffffc90000ac7d10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1219.938184][ T36] #2: ffff888025e48ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780 [ 1219.947197][ T36] #3: ffff88807c4430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1219.956469][ T36] #4: ffffffff9b088eb8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1219.965568][ T36] #5: ffff88807c4430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1219.974838][ T36] [ 1219.974838][ T36] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1219.985210][ T36] -> (&port_lock_key){-.-.}-{3:3} { [ 1219.990386][ T36] IN-HARDIRQ-W at: [ 1219.994333][ T36] lock_acquire+0x179/0x350 [ 1220.000465][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 1220.007284][ T36] serial8250_handle_irq+0x95/0xcb0 [ 1220.014107][ T36] serial8250_default_handle_irq+0x9a/0x210 [ 1220.021617][ T36] serial8250_interrupt+0x103/0x210 [ 1220.028431][ T36] __handle_irq_event_percpu+0x22c/0x7d0 [ 1220.035686][ T36] handle_irq_event+0xab/0x1e0 [ 1220.042068][ T36] handle_edge_irq+0x28e/0xab0 [ 1220.048451][ T36] __common_interrupt+0xe2/0x250 [ 1220.055017][ T36] common_interrupt+0xba/0xe0 [ 1220.061312][ T36] asm_common_interrupt+0x26/0x40 [ 1220.067952][ T36] pv_native_safe_halt+0xf/0x20 [ 1220.074424][ T36] default_idle+0x13/0x20 [ 1220.080370][ T36] default_idle_call+0x6d/0xb0 [ 1220.086750][ T36] do_idle+0x391/0x510 [ 1220.092440][ T36] cpu_startup_entry+0x4f/0x60 [ 1220.098826][ T36] start_secondary+0x21d/0x2b0 [ 1220.105211][ T36] common_startup_64+0x13e/0x148 [ 1220.111766][ T36] IN-SOFTIRQ-W at: [ 1220.115716][ T36] lock_acquire+0x179/0x350 [ 1220.121843][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 1220.128660][ T36] serial8250_handle_irq+0x95/0xcb0 [ 1220.135475][ T36] serial8250_default_handle_irq+0x9a/0x210 [ 1220.142985][ T36] serial8250_interrupt+0x103/0x210 [ 1220.149799][ T36] __handle_irq_event_percpu+0x22c/0x7d0 [ 1220.157049][ T36] handle_irq_event+0xab/0x1e0 [ 1220.163431][ T36] handle_edge_irq+0x28e/0xab0 [ 1220.169812][ T36] __common_interrupt+0xe2/0x250 [ 1220.176376][ T36] common_interrupt+0x61/0xe0 [ 1220.182682][ T36] asm_common_interrupt+0x26/0x40 [ 1220.189327][ T36] bio_put+0x4/0x5b0 [ 1220.194851][ T36] __read_end_io+0x2f6/0x390 [ 1220.201067][ T36] mpage_end_io+0x85/0xf0 [ 1220.207022][ T36] bio_endio+0x70d/0x850 [ 1220.212894][ T36] blk_update_request+0x96b/0x1630 [ 1220.219626][ T36] scsi_end_request+0x7c/0x9c0 [ 1220.226009][ T36] scsi_io_completion+0x17d/0x14c0 [ 1220.232739][ T36] scsi_complete+0x124/0x250 [ 1220.238949][ T36] blk_complete_reqs+0xb1/0xf0 [ 1220.245334][ T36] handle_softirqs+0x219/0x8e0 [ 1220.251733][ T36] __irq_exit_rcu+0x109/0x170 [ 1220.258029][ T36] irq_exit_rcu+0x9/0x30 [ 1220.263890][ T36] common_interrupt+0xbf/0xe0 [ 1220.270185][ T36] asm_common_interrupt+0x26/0x40 [ 1220.276826][ T36] pv_native_safe_halt+0xf/0x20 [ 1220.283299][ T36] default_idle+0x13/0x20 [ 1220.289252][ T36] default_idle_call+0x6d/0xb0 [ 1220.295633][ T36] do_idle+0x391/0x510 [ 1220.301322][ T36] cpu_startup_entry+0x4f/0x60 [ 1220.307705][ T36] start_secondary+0x21d/0x2b0 [ 1220.314091][ T36] common_startup_64+0x13e/0x148 [ 1220.320646][ T36] INITIAL USE at: [ 1220.324509][ T36] lock_acquire+0x179/0x350 [ 1220.330549][ T36] _raw_spin_lock_irqsave+0x3a/0x60 [ 1220.337279][ T36] serial8250_do_set_termios+0x310/0x1710 [ 1220.344528][ T36] serial8250_set_termios+0x6e/0x80 [ 1220.351266][ T36] uart_set_options+0x31a/0x5f0 [ 1220.357649][ T36] serial8250_console_setup+0x189/0x450 [ 1220.364725][ T36] univ8250_console_setup+0x1eb/0x2e0 [ 1220.371628][ T36] try_enable_preferred_console+0x2fd/0x530 [ 1220.379054][ T36] register_console+0x3ab/0x11b0 [ 1220.385524][ T36] univ8250_console_init+0x5f/0x90 [ 1220.392179][ T36] console_init+0x14f/0x680 [ 1220.398218][ T36] start_kernel+0x29f/0x4d0 [ 1220.404257][ T36] x86_64_start_reservations+0x18/0x30 [ 1220.411250][ T36] x86_64_start_kernel+0x130/0x190 [ 1220.417894][ T36] common_startup_64+0x13e/0x148 [ 1220.424359][ T36] } [ 1220.426825][ T36] ... key at: [] port_lock_key+0x0/0x40 [ 1220.434432][ T36] [ 1220.434432][ T36] the dependencies between the lock to be acquired [ 1220.434437][ T36] and HARDIRQ-irq-unsafe lock: [ 1220.447888][ T36] -> (disc_data_lock#4){.+.+}-{3:3} { [ 1220.453244][ T36] HARDIRQ-ON-R at: [ 1220.457192][ T36] lock_acquire+0x179/0x350 [ 1220.463322][ T36] _raw_read_lock+0x5f/0x70 [ 1220.469448][ T36] sp_get+0x18/0xf0 [ 1220.474878][ T36] sixpack_receive_buf+0x59/0x1c90 [ 1220.481618][ T36] tty_ldisc_receive_buf+0x15a/0x1a0 [ 1220.488533][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 1220.495874][ T36] flush_to_ldisc+0x26b/0x780 [ 1220.502173][ T36] process_one_work+0x9cf/0x1b70 [ 1220.508727][ T36] worker_thread+0x6c8/0xf10 [ 1220.514935][ T36] kthread+0x3c5/0x780 [ 1220.520619][ T36] ret_from_fork+0x5d4/0x6f0 [ 1220.526830][ T36] ret_from_fork_asm+0x1a/0x30 [ 1220.533211][ T36] SOFTIRQ-ON-R at: [ 1220.537157][ T36] lock_acquire+0x179/0x350 [ 1220.543284][ T36] _raw_read_lock+0x5f/0x70 [ 1220.549408][ T36] sp_get+0x18/0xf0 [ 1220.554837][ T36] sixpack_receive_buf+0x59/0x1c90 [ 1220.561571][ T36] tty_ldisc_receive_buf+0x15a/0x1a0 [ 1220.568475][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 1220.575817][ T36] flush_to_ldisc+0x26b/0x780 [ 1220.582115][ T36] process_one_work+0x9cf/0x1b70 [ 1220.588670][ T36] worker_thread+0x6c8/0xf10 [ 1220.594876][ T36] kthread+0x3c5/0x780 [ 1220.600561][ T36] ret_from_fork+0x5d4/0x6f0 [ 1220.606773][ T36] ret_from_fork_asm+0x1a/0x30 [ 1220.613153][ T36] INITIAL READ USE at: [ 1220.617450][ T36] lock_acquire+0x179/0x350 [ 1220.623924][ T36] _raw_read_lock+0x5f/0x70 [ 1220.630394][ T36] sp_get+0x18/0xf0 [ 1220.636170][ T36] sixpack_receive_buf+0x59/0x1c90 [ 1220.643250][ T36] tty_ldisc_receive_buf+0x15a/0x1a0 [ 1220.650504][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 1220.658194][ T36] flush_to_ldisc+0x26b/0x780 [ 1220.664839][ T36] process_one_work+0x9cf/0x1b70 [ 1220.671741][ T36] worker_thread+0x6c8/0xf10 [ 1220.678296][ T36] kthread+0x3c5/0x780 [ 1220.684329][ T36] ret_from_fork+0x5d4/0x6f0 [ 1220.690887][ T36] ret_from_fork_asm+0x1a/0x30 [ 1220.697615][ T36] } [ 1220.700085][ T36] ... key at: [] disc_data_lock+0x18/0xfe0 [ 1220.707947][ T36] ... acquired at: [ 1220.711717][ T36] lock_acquire+0x179/0x350 [ 1220.716374][ T36] _raw_read_lock+0x5f/0x70 [ 1220.721020][ T36] sp_get+0x18/0xf0 [ 1220.724972][ T36] sixpack_write_wakeup+0x20/0x390 [ 1220.730230][ T36] tty_wakeup+0xe8/0x120 [ 1220.734616][ T36] tty_port_default_wakeup+0x2a/0x40 [ 1220.740052][ T36] serial8250_tx_chars+0x68e/0x860 [ 1220.745302][ T36] __start_tx+0x3e9/0x4a0 [ 1220.749779][ T36] serial8250_start_tx+0x368/0x530 [ 1220.755119][ T36] __uart_start+0x292/0x4c0 [ 1220.759765][ T36] uart_write+0x218/0xb30 [ 1220.764241][ T36] sixpack_receive_buf+0x3d3/0x1c90 [ 1220.769598][ T36] tty_ldisc_receive_buf+0x15a/0x1a0 [ 1220.775028][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 1220.780893][ T36] flush_to_ldisc+0x26b/0x780 [ 1220.785715][ T36] process_one_work+0x9cf/0x1b70 [ 1220.790792][ T36] worker_thread+0x6c8/0xf10 [ 1220.795523][ T36] kthread+0x3c5/0x780 [ 1220.799733][ T36] ret_from_fork+0x5d4/0x6f0 [ 1220.804467][ T36] ret_from_fork_asm+0x1a/0x30 [ 1220.809372][ T36] [ 1220.811665][ T36] [ 1220.811665][ T36] stack backtrace: [ 1220.817523][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1220.817538][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1220.817546][ T36] Workqueue: events_unbound flush_to_ldisc [ 1220.817562][ T36] Call Trace: [ 1220.817567][ T36] [ 1220.817572][ T36] dump_stack_lvl+0x116/0x1f0 [ 1220.817588][ T36] check_irq_usage+0x7dc/0x920 [ 1220.817607][ T36] ? check_path.constprop.0+0x24/0x50 [ 1220.817624][ T36] ? __lock_acquire+0x1285/0x1c90 [ 1220.817639][ T36] __lock_acquire+0x1285/0x1c90 [ 1220.817656][ T36] ? lock_acquire+0x179/0x350 [ 1220.817673][ T36] lock_acquire+0x179/0x350 [ 1220.817688][ T36] ? sp_get+0x18/0xf0 [ 1220.817703][ T36] ? ldsem_down_read_trylock+0x11a/0x180 [ 1220.817714][ T36] ? ldsem_down_read_trylock+0x120/0x180 [ 1220.817725][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1220.817741][ T36] _raw_read_lock+0x5f/0x70 [ 1220.817754][ T36] ? sp_get+0x18/0xf0 [ 1220.817768][ T36] sp_get+0x18/0xf0 [ 1220.817782][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1220.817797][ T36] sixpack_write_wakeup+0x20/0x390 [ 1220.817813][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1220.817828][ T36] tty_wakeup+0xe8/0x120 [ 1220.817841][ T36] tty_port_default_wakeup+0x2a/0x40 [ 1220.817858][ T36] serial8250_tx_chars+0x68e/0x860 [ 1220.817869][ T36] __start_tx+0x3e9/0x4a0 [ 1220.817879][ T36] serial8250_start_tx+0x368/0x530 [ 1220.817889][ T36] __uart_start+0x292/0x4c0 [ 1220.817902][ T36] uart_write+0x218/0xb30 [ 1220.817919][ T36] sixpack_receive_buf+0x3d3/0x1c90 [ 1220.817935][ T36] ? ldsem_down_read_trylock+0x120/0x180 [ 1220.817946][ T36] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1220.817958][ T36] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1220.817974][ T36] tty_ldisc_receive_buf+0x15a/0x1a0 [ 1220.817990][ T36] tty_port_default_receive_buf+0x70/0xb0 [ 1220.818007][ T36] flush_to_ldisc+0x26b/0x780 [ 1220.818022][ T36] ? rcu_is_watching+0x12/0xc0 [ 1220.818036][ T36] process_one_work+0x9cf/0x1b70 [ 1220.818049][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1220.818061][ T36] ? assign_work+0x1a0/0x250 [ 1220.818079][ T36] worker_thread+0x6c8/0xf10 [ 1220.818091][ T36] ? __kthread_parkme+0x19e/0x250 [ 1220.818105][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1220.818116][ T36] kthread+0x3c5/0x780 [ 1220.818124][ T36] ? __pfx_kthread+0x10/0x10 [ 1220.818134][ T36] ? rcu_is_watching+0x12/0xc0 [ 1220.818146][ T36] ? __pfx_kthread+0x10/0x10 [ 1220.818155][ T36] ret_from_fork+0x5d4/0x6f0 [ 1220.818170][ T36] ? __pfx_kthread+0x10/0x10 [ 1220.818179][ T36] ret_from_fork_asm+0x1a/0x30 [ 1220.818193][ T36] [ 1221.080009][T11672] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1221.098151][T21477] SELinux: failed to load policy [ 1221.152137][ T5935] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1221.153050][ T5938] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1221.295549][T16709] konepure 0003:1E7D:2DB4.0020: unknown main item tag 0x0 [ 1221.303862][ T5828] usb 42-1: device descriptor read/8, error -110 [ 1221.310238][T16709] konepure 0003:1E7D:2DB4.0020: unknown main item tag 0x0 [ 1221.317381][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 1221.322074][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 1221.322513][T16709] konepure 0003:1E7D:2DB4.0020: unknown main item tag 0x0 [ 1221.335620][T16709] konepure 0003:1E7D:2DB4.0020: unknown main item tag 0x0 [ 1221.342577][ T5938] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1221.343635][ T5935] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 1221.350996][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.359617][T16709] konepure 0003:1E7D:2DB4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 1221.370549][ T5938] usb 3-1: config 0 has no interface number 0 [ 1221.380798][ T5935] usb 4-1: config 0 has no interface number 0 [ 1221.389950][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1221.395078][ T5935] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1221.402035][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.414031][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.419488][ T5938] usb 3-1: Product: syz [ 1221.429862][ T5935] usb 4-1: Product: syz [ 1221.431349][ T5938] usb 3-1: Manufacturer: syz [ 1221.435254][ T5935] usb 4-1: Manufacturer: syz [ 1221.440173][ T5938] usb 3-1: SerialNumber: syz [ 1221.449618][ T5935] usb 4-1: SerialNumber: syz [ 1221.455320][ T5935] usb 4-1: config 0 descriptor?? [ 1221.460645][ T5938] usb 3-1: config 0 descriptor?? [ 1221.461223][ T5935] hub 4-1:0.145: bad descriptor, ignoring hub [ 1221.471831][ T5935] hub 4-1:0.145: probe with driver hub failed with error -5 [ 1221.480217][ T5935] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input37 [ 1221.501477][T21450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.509980][T21450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.520380][ T9] usb 2-1: USB disconnect, device number 99 [ 1221.667549][ T5938] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 1221.682093][ T5938] usb 3-1: No valid video chain found. [ 1221.689630][ T5938] usb 3-1: USB disconnect, device number 101 [ 1221.692431][ T5828] usb usb42-port1: attempt power cycle [ 1221.765200][T21481] vhci_hcd vhci_hcd.0: port 0 already used [ 1221.772984][T21481] syz.3.4014: attempt to access beyond end of device [ 1221.772984][T21481] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1221.786044][T21481] hfs: can't find a HFS filesystem on dev loop3 [ 1221.812227][ T5935] usb 4-1: USB disconnect, device number 81 [ 1221.949204][T11661] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1222.252630][ T5828] usb usb42-port1: unable to enumerate USB device [ 1222.632703][ T36] vlan2: left promiscuous mode