last executing test programs: 4m42.845549869s ago: executing program 2 (id=595): setgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) socket$inet6(0xa, 0x3, 0xfffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) 4m41.224085901s ago: executing program 2 (id=597): syz_usb_connect(0x1, 0x2d, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x10, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xb00) 4m31.990411398s ago: executing program 2 (id=620): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100002800a005a00626f6e8e"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x20008000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4m30.178106581s ago: executing program 2 (id=624): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000340)=0x4b917691) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m26.702838129s ago: executing program 2 (id=631): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000200)='./file0\x00', 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4m24.701521618s ago: executing program 2 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4m8.80508242s ago: executing program 32 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 16.845338856s ago: executing program 0 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="01030000000000000000170000000e8c926d6edfe74fc2e41fdece4bcb6724e39b2e79253dc03659cf4d6cb7acea928a269812a19ddf3d86305a115be28819cbe996f1e6550a5c74270cebcd40cd14f22375beeb7ae6bcaf9c9d"], 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 15.637719806s ago: executing program 1 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xb, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xfffd, 0x17, 0x9, 0x4, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e105", 0x13}], 0x1}, 0x20000000) 15.260287191s ago: executing program 0 (id=1211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'lblc\x00', 0x11, 0x5, 0x14}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 15.023506495s ago: executing program 0 (id=1213): socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4e, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00\x00`\x00', '\x00', ["2408000ce61c0000c6cb00", "bed0f3d6ce7a5f7389827f04", "d409343c60abd64f2fdc9ddf", "fc43009f621000"]}) r1 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x8, 0x800, 0xf, 0x0, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x78, 0x3, 0xa7, 0x7, 0xc, 0x7, 0x29}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x2, 0xc8d03) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x3, {0x0, 0x1}}, 0x18) listen(0xffffffffffffffff, 0x2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) 13.689563375s ago: executing program 0 (id=1217): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000002940), 0x0, 0x8000) syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69f1, 0xc00, 0x5, 0x2d4}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 13.066085197s ago: executing program 4 (id=1220): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 12.330651917s ago: executing program 4 (id=1223): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000920010073797a3000000080080002982f07a7f6ad639b6c40000000032c000000030a01030000e6ff1b000000020000000900010073597a30000001000900030073797a3200005444beb94153726985075208e1a82f0e2089c9cbd3059f9b3e5e6ee65568aa216106007f4196387e2cda18d0242ad4c674f066b9308e"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000b00000000000000000071100400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={r5, 0x2, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x1a, 0x14, "00c566fa69812c5b7eaffe637883470f79fa9dcc5675cc9989b00e3904717202f0f762c5169053283584bfcc15682e3335f74d8c71d78eaf7c7bb4df66e6b449", "72710d18e983dce8c284d96497367917dcb63678f04acd7620768e53f0fea6c47eb4e7097abf948f7a4e56d16f0a25cd15b67338e28fc657f3057b8cedde876b", "fa880c78c4c986e58a0631c6217aaeaddd0dc118a98e3a24b795d01a083f6011", [0xc, 0xff80000000000000]}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 11.222081217s ago: executing program 3 (id=1225): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001100), 0x0, 0x80525) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='AZ', 0x2}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x1ff, 0x9, 0x0, 0x8, 0xb, "0062ba7d820000000000000000e4f6fffeff00"}) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffce2) 11.120898707s ago: executing program 4 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="01030000000000000000170000000e8c926d6edfe74fc2e41fdece4bcb6724e39b2e79253dc03659cf4d6cb7acea928a269812a19ddf3d86305a115be28819cbe996f1e6550a5c74270cebcd40cd14f22375beeb7ae6bcaf9c9d"], 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 8.736830772s ago: executing program 4 (id=1228): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[], 0xec}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 8.735323989s ago: executing program 3 (id=1229): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) semget(0x2, 0x0, 0x366) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000140)={0x11}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000001010211700000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x3, 0x5, 0x7) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xffffffff, 0x3, 0x3}, 0x10) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) sendmsg$tipc(r8, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) 7.848350783s ago: executing program 4 (id=1231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000700)=[{0x0, 0x8000, 0x0, 0x0}], 0x1}) 7.176090392s ago: executing program 5 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a01", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20048054) 6.868539736s ago: executing program 0 (id=1233): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sw_sync_info(0xffffff9c, &(0x7f0000000400), 0x200080, 0x0) socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x1000001000, 0x5}, 0x0, &(0x7f0000000000)={0xf0, 0x101, 0xff00, 0x9, 0xfffffffffffffffd, 0xf, 0x7ffffffe, 0xe}, 0x0, 0x0) 6.848591332s ago: executing program 5 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.773414055s ago: executing program 1 (id=1235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000280)={0x10001, 0x0, @qpsk={0x5c, 0x1d}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xffea) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7961c60005000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 6.651987968s ago: executing program 3 (id=1236): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000920010073797a3000000080080002982f07a7f6ad639b6c40000000032c000000030a01030000e6ff1b000000020000000900010073597a30000001000900030073797a3200005444beb94153726985075208e1a82f0e2089c9cbd3059f9b3e5e6ee65568aa216106007f4196387e2cda18d0242ad4c674f066b9308e"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000b00000000000000000071100400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x2, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x1a, 0x14, "00c566fa69812c5b7eaffe637883470f79fa9dcc5675cc9989b00e3904717202f0f762c5169053283584bfcc15682e3335f74d8c71d78eaf7c7bb4df66e6b449", "72710d18e983dce8c284d96497367917dcb63678f04acd7620768e53f0fea6c47eb4e7097abf948f7a4e56d16f0a25cd15b67338e28fc657f3057b8cedde876b", "fa880c78c4c986e58a0631c6217aaeaddd0dc118a98e3a24b795d01a083f6011", [0xc, 0xff80000000000000]}}) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 6.582340731s ago: executing program 1 (id=1237): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824", 0x2b}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x4040800) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) 5.946338912s ago: executing program 5 (id=1238): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000000)={0x6, &(0x7f0000000440)=[{0x26, '\x00', @buffer={"749e5d220643035d0686187ce72aaf4fe2b9c594cf92b92ccaf0b166acbabd08", 0x20}, 0x1}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000008440), 0x0, 0x44) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5.007659301s ago: executing program 3 (id=1239): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 4.985000212s ago: executing program 5 (id=1240): r0 = socket(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100, 0x3, 0x0, 0x1}, 'syz1\x00', 0x32}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f00000001c0)={{0x0, 0xea60}, 0x11, 0x873, 0x7fffffff}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 4.745221177s ago: executing program 5 (id=1241): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb4, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1401fcdb8c25000000000000000000377402007b517f0d2ff6acca5bde6fd80ed7cde05de140cbfdc3d6127fdfe35d3c57c2540d71d46c9ec5b71b184fb0cfd8fd4d99e674e746eedf21532b1ab228e99ad34ca50ae1e448c8d124624d01a83a0a5c1f47ed8d46a7647efacccd25bd71bd0332d436332dccccb0f4200427"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8010) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 4.695947188s ago: executing program 1 (id=1242): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 4.440489162s ago: executing program 3 (id=1243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r3) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000280)={0x10001, 0x0, @qpsk={0x5c, 0x1d}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xffea) pwritev2(r2, &(0x7f0000000380), 0x0, 0x5, 0x1d, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7961c60005000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 4.013182113s ago: executing program 4 (id=1244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000280)={0x10001, 0x0, @qpsk={0x5c, 0x1d}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xffea) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7961c60005000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 1.74037511s ago: executing program 3 (id=1245): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000006c0), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs$pagemap(r6, &(0x7f0000000500)) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@l={0x92, 0x0, 0xd0}], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @my=0x0, 0x0, 0x0, 0x224, 0x0, 0x0, 0xfffffffc, 0x1}) writev(r0, &(0x7f0000003740)=[{&(0x7f0000000280)="64656e79d9", 0x5}], 0x1) 1.527760196s ago: executing program 1 (id=1246): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000920010073797a3000000080080002982f07a7f6ad639b6c40000000032c000000030a01030000e6ff1b000000020000000900010073597a30000001000900030073797a3200005444beb94153726985075208e1a82f0e2089c9cbd3059f9b3e5e6ee65568aa216106007f4196387e2cda18d0242ad4c674f066b9308e"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000b00000000000000000071100400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000500)={r4, 0x2, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x1a, 0x14, "00c566fa69812c5b7eaffe637883470f79fa9dcc5675cc9989b00e3904717202f0f762c5169053283584bfcc15682e3335f74d8c71d78eaf7c7bb4df66e6b449", "72710d18e983dce8c284d96497367917dcb63678f04acd7620768e53f0fea6c47eb4e7097abf948f7a4e56d16f0a25cd15b67338e28fc657f3057b8cedde876b", "fa880c78c4c986e58a0631c6217aaeaddd0dc118a98e3a24b795d01a083f6011", [0xc, 0xff80000000000000]}}) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 1.505031379s ago: executing program 0 (id=1247): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB]) 1.348818982s ago: executing program 5 (id=1248): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x1) 0s ago: executing program 1 (id=1249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) kernel console output (not intermixed with test programs): "dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.516878][ T8249] vhci_hcd: connection closed [ 325.517129][ T6012] vhci_hcd vhci_hcd.0: stop threads [ 325.522233][ T30] audit: type=1400 audit(1780467758.389:345): avc: denied { read } for pid=5279 comm="dhcpcd" name="n30" dev="tmpfs" ino=4643 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.537046][ T6012] vhci_hcd vhci_hcd.0: release socket [ 325.563312][ T5718] usb 34-1: SetAddress Request (2) to port 0 [ 325.577287][ T5718] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 325.588027][ T1014] bridge_slave_1: left allmulticast mode [ 325.597723][ T1014] bridge_slave_1: left promiscuous mode [ 325.622717][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.643283][ T30] audit: type=1400 audit(1780467758.389:346): avc: denied { open } for pid=5279 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=4643 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.681622][ T1014] bridge_slave_0: left allmulticast mode [ 325.687591][ T804] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 325.699480][ T6012] vhci_hcd vhci_hcd.0: disconnect device [ 325.707741][ T1014] bridge_slave_0: left promiscuous mode [ 325.732132][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.740177][ T30] audit: type=1400 audit(1780467758.389:347): avc: denied { getattr } for pid=5279 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=4643 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.833519][ T30] audit: type=1400 audit(1780467759.199:348): avc: denied { read } for pid=8262 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.853302][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 325.869252][ T30] audit: type=1400 audit(1780467759.199:349): avc: denied { read open } for pid=8262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.887055][ T804] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 325.895376][ T30] audit: type=1400 audit(1780467759.199:350): avc: denied { getattr } for pid=8262 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.923688][ T804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.955378][ T804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.148653][ T804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.158694][ T804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.171740][ T804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.181621][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.319599][ T8273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8273 comm=syz.4.686 [ 326.384494][ T8273] 9pnet_virtio: no channels available for device syz [ 326.569829][ T804] usb 4-1: GET_CAPABILITIES returned 0 [ 326.606896][ T804] usbtmc 4-1:16.0: can't read capabilities [ 328.850904][ T804] usb 4-1: USB disconnect, device number 27 [ 329.146147][ T30] audit: type=1400 audit(1780467762.539:351): avc: denied { write } for pid=8261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.266859][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.339720][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.382311][ T1014] bond0 (unregistering): Released all slaves [ 329.496061][ T8295] netlink: 'syz.0.691': attribute type 29 has an invalid length. [ 329.589721][ T1014] tipc: Left network mode [ 329.696534][ T8300] tipc: Enabled bearer , priority 0 [ 329.727024][ T8304] syzkaller0: entered promiscuous mode [ 329.737552][ T8304] syzkaller0: entered allmulticast mode [ 329.745263][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.760398][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.786068][ T8168] bridge_slave_0: entered allmulticast mode [ 329.804221][ T8168] bridge_slave_0: entered promiscuous mode [ 329.932401][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 329.940160][ T8305] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 329.979757][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.014612][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.027913][ T8168] bridge_slave_1: entered allmulticast mode [ 330.057600][ T8168] bridge_slave_1: entered promiscuous mode [ 330.086510][ T8299] tipc: Resetting bearer [ 330.427303][ T8299] tipc: Disabling bearer [ 330.703345][ T5718] usb 34-1: device descriptor read/8, error -110 [ 330.750023][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.789164][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.801763][ T1014] hsr_slave_0: left promiscuous mode [ 330.811287][ T1014] hsr_slave_1: left promiscuous mode [ 330.832252][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.849569][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.866945][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.875354][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.926175][ T1014] veth1_macvtap: left promiscuous mode [ 330.933876][ T1014] veth0_macvtap: left promiscuous mode [ 330.939601][ T1014] veth1_vlan: left promiscuous mode [ 330.946079][ T1014] veth0_vlan: left promiscuous mode [ 331.104977][ T5718] usb usb34-port1: attempt power cycle [ 331.209430][ T1014] pim6reg (unregistering): left allmulticast mode [ 332.620830][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 332.620847][ T30] audit: type=1400 audit(1780467766.009:359): avc: denied { write } for pid=8319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.690845][ T5718] usb usb34-port1: unable to enumerate USB device [ 332.980513][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 333.049310][ T30] audit: type=1400 audit(1780467766.439:360): avc: denied { write } for pid=8356 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.133766][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 334.478920][ T8335] netlink: 'syz.0.698': attribute type 29 has an invalid length. [ 334.512318][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 334.554907][ T8168] team0: Port device team_slave_0 added [ 334.565025][ T8168] team0: Port device team_slave_1 added [ 334.656813][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.685579][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.712693][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.726758][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.782788][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.813204][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.877122][ T8373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 334.883672][ T8373] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 334.962851][ T8373] vhci_hcd vhci_hcd.0: Device attached [ 335.001872][ T8367] syzkaller0: entered promiscuous mode [ 335.014421][ T8374] vhci_hcd: connection closed [ 335.014733][ T8367] syzkaller0: entered allmulticast mode [ 335.026566][ T60] vhci_hcd vhci_hcd.3: stop threads [ 335.033071][ T60] vhci_hcd vhci_hcd.3: release socket [ 335.039912][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 335.145562][ T8168] hsr_slave_0: entered promiscuous mode [ 335.155932][ T8168] hsr_slave_1: entered promiscuous mode [ 335.162501][ T8168] debugfs: 'hsr0' already exists in 'hsr' [ 335.168801][ T8168] Cannot create hsr debugfs directory [ 335.554751][ T8392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8392 comm=syz.0.709 [ 335.605774][ T8392] 9pnet_virtio: no channels available for device syz [ 336.437332][ T1014] IPVS: stop unused estimator thread 0... [ 336.493261][ T30] audit: type=1400 audit(1780467769.879:361): avc: denied { write } for pid=8377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.109427][ T30] audit: type=1400 audit(1780467770.499:362): avc: denied { write } for pid=8400 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.270681][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 337.368022][ T8168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.410866][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.446796][ T8168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.489236][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.517473][ T8168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.559376][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.584648][ T8168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.598633][ T8168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.799861][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.854551][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.885222][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.892331][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.937579][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.944703][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.308519][ T30] audit: type=1400 audit(1780467771.689:363): avc: denied { write } for pid=8409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.342861][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 338.514105][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 338.529936][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.551041][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 338.570042][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 338.609538][ T9] usb 4-1: config 14 has no interface number 0 [ 338.632666][ T9] usb 4-1: config 14 has no interface number 1 [ 338.662666][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 338.702615][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 338.752216][ T30] audit: type=1400 audit(1780467772.139:364): avc: denied { write } for pid=8440 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.774531][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 338.805029][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 338.846282][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 338.894149][ T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.930167][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 339.091355][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 339.100724][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 339.110690][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.119859][ T9] usb 4-1: Product: syz [ 339.124391][ T9] usb 4-1: Manufacturer: syz [ 339.129018][ T9] usb 4-1: SerialNumber: syz [ 339.171963][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 339.440515][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.817482][ T9] legousbtower 4-1:14.57: interrupt endpoints not found [ 340.036081][ T9] legousbtower 4-1:14.228: get version request failed: -71 [ 340.049931][ T9] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 340.069972][ T9] usb 4-1: USB disconnect, device number 28 [ 340.553318][ T5750] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 340.814435][ T5750] usb 5-1: Using ep0 maxpacket: 8 [ 340.881983][ T5750] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 340.988787][ T5750] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.127133][ T5750] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.209379][ T5750] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.240727][ T5750] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.289881][ T5750] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.318130][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.648113][ T5750] usb 5-1: GET_CAPABILITIES returned 0 [ 342.706798][ T5750] usbtmc 5-1:16.0: can't read capabilities [ 342.779892][ T8168] veth0_vlan: entered promiscuous mode [ 342.821257][ T8168] veth1_vlan: entered promiscuous mode [ 343.702264][ T8168] veth0_macvtap: entered promiscuous mode [ 343.841828][ T8168] veth1_macvtap: entered promiscuous mode [ 344.600572][ T5750] usb 5-1: USB disconnect, device number 26 [ 344.626437][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.699534][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.974311][ T156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.028957][ T156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.170586][ T156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.228099][ T156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.467129][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.519370][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.812919][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.846738][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.009228][ T30] audit: type=1400 audit(1780467780.379:365): avc: denied { mounton } for pid=8168 comm="syz-executor" path="/root/syzkaller.OE9naV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 347.256246][ T30] audit: type=1400 audit(1780467780.649:366): avc: denied { ioctl } for pid=8525 comm="syz.0.732" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.300746][ T30] audit: type=1400 audit(1780467780.679:367): avc: denied { create } for pid=8525 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.400969][ T8529] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 347.423367][ T1138] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 347.469298][ T8528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.519393][ T8532] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 347.603185][ T1138] usb 6-1: Using ep0 maxpacket: 8 [ 347.610151][ T1138] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 347.626567][ T1138] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.646714][ T1138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.671483][ T1138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.697054][ T1138] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.724120][ T1138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.735307][ T1138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.961339][ T8542] syzkaller0: entered promiscuous mode [ 347.981112][ T30] audit: type=1400 audit(1780467781.309:368): avc: denied { append } for pid=8541 comm="syz.4.737" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 348.004484][ T8542] syzkaller0: entered allmulticast mode [ 348.216894][ T30] audit: type=1400 audit(1780467781.309:369): avc: denied { open } for pid=8541 comm="syz.4.737" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 348.323599][ T1138] usb 6-1: GET_CAPABILITIES returned 0 [ 348.478047][ T30] audit: type=1400 audit(1780467781.339:370): avc: denied { ioctl } for pid=8541 comm="syz.4.737" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 349.049083][ T1138] usbtmc 6-1:16.0: can't read capabilities [ 349.065107][ T1138] usb 6-1: USB disconnect, device number 2 [ 351.941668][ T8556] syzkaller0: entered promiscuous mode [ 351.956318][ T8556] syzkaller0: entered allmulticast mode [ 352.224755][ T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 352.398119][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 352.411008][ T29] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 352.439475][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.449661][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 352.615126][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 352.629139][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.650149][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 352.663038][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 352.681814][ T9] usb 4-1: config 14 has no interface number 0 [ 352.694684][ T9] usb 4-1: config 14 has no interface number 1 [ 352.711998][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 352.738560][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 352.778434][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.792048][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.813719][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.826947][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.836124][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.945141][ T8579] loop5: detected capacity change from 0 to 2640 [ 352.954395][ T8579] buffer_io_error: 6 callbacks suppressed [ 352.954425][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 352.968872][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 352.978604][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 352.987169][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 352.995755][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 353.004418][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 353.013063][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 353.021665][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 353.029962][ T8579] ldm_validate_partition_table(): Disk read failed. [ 353.036955][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 353.075001][ T8579] Buffer I/O error on dev loop5, logical block 0, async page read [ 353.084310][ T8579] Dev loop5: unable to read RDB block 0 [ 353.092224][ T8579] loop5: unable to read partition table [ 353.099012][ T8579] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 354.083413][ T29] usb 2-1: GET_CAPABILITIES returned 0 [ 354.102368][ T29] usbtmc 2-1:16.0: can't read capabilities [ 354.369202][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 354.390610][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 354.404131][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 354.417201][ T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.432119][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 354.444551][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 354.452004][ T9] usb 4-1: string descriptor 0 read error: -71 [ 354.469157][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 354.486607][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.549657][ T993] usb 2-1: USB disconnect, device number 19 [ 354.598042][ T9] usb 4-1: can't set config #14, error -71 [ 354.613649][ T30] audit: type=1400 audit(1780467787.999:371): avc: denied { read } for pid=8588 comm="syz.4.748" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 354.627621][ T9] usb 4-1: USB disconnect, device number 29 [ 354.675929][ T30] audit: type=1400 audit(1780467788.059:372): avc: denied { write } for pid=8588 comm="syz.4.748" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.510037][ T8600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8600 comm=syz.1.750 [ 355.563716][ T8600] 9pnet_virtio: no channels available for device syz [ 355.589610][ T8600] 9p: Bad value for 'wfdno' [ 357.119111][ T30] audit: type=1400 audit(1780467790.499:373): avc: denied { create } for pid=8613 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 357.142238][ T30] audit: type=1400 audit(1780467790.499:374): avc: denied { write } for pid=8613 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 359.099739][ T8603] syzkaller0: entered promiscuous mode [ 359.121220][ T8603] syzkaller0: entered allmulticast mode [ 359.143582][ T5718] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 359.343243][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 359.356098][ T5718] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 359.375287][ T5718] usb 2-1: config 179 has no interface number 0 [ 359.389391][ T5718] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 359.414501][ T5718] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 359.436659][ T5718] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.461082][ T5718] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 359.489301][ T5718] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 359.519265][ T5718] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 359.538543][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.565088][ T993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 359.577824][ T8633] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 359.687927][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 359.708919][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 359.733293][ T993] usb 6-1: Using ep0 maxpacket: 32 [ 359.758184][ T30] audit: type=1400 audit(1780467793.129:375): avc: denied { write } for pid=8637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.807908][ T993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.820343][ T993] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 359.830963][ T993] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 359.854928][ T993] usb 6-1: config 14 has no interface number 0 [ 359.924831][ T993] usb 6-1: config 14 has no interface number 1 [ 359.983936][ T993] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 360.015545][ T993] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 360.037759][ T993] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 360.049806][ T30] audit: type=1400 audit(1780467793.429:376): avc: denied { write } for pid=8653 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.080858][ T993] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 360.093200][ T993] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 360.106173][ T993] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.183302][ T5750] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 360.346547][ T5750] usb 1-1: Using ep0 maxpacket: 8 [ 360.348388][ T993] usb 6-1: config 14 interface 57 has no altsetting 0 [ 360.359696][ T993] usb 6-1: config 14 interface 228 has no altsetting 0 [ 360.370672][ T993] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 360.380209][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.389786][ T993] usb 6-1: Product: syz [ 360.403374][ T5750] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 360.409127][ T993] usb 6-1: Manufacturer: syz [ 360.411796][ T5750] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.433684][ T993] usb 6-1: SerialNumber: syz [ 360.567828][ T8661] loop5: detected capacity change from 0 to 2640 [ 360.579038][ T8661] buffer_io_error: 336 callbacks suppressed [ 360.579140][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.594043][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.602913][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.611792][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.620983][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.630655][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.639827][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.648681][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.657196][ T8661] ldm_validate_partition_table(): Disk read failed. [ 360.683571][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.692509][ T8661] Buffer I/O error on dev loop5, logical block 0, async page read [ 360.702663][ T8661] Dev loop5: unable to read RDB block 0 [ 360.712808][ T8661] loop5: unable to read partition table [ 360.720209][ T8661] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 361.395602][ T5750] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.405760][ T5750] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.416097][ T5750] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.429725][ T5750] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.923886][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.979600][ T993] legousbtower 6-1:14.57: interrupt endpoints not found [ 362.172385][ T5750] usb 1-1: GET_CAPABILITIES returned 0 [ 362.178640][ T5750] usbtmc 1-1:16.0: can't read capabilities [ 362.197074][ T993] legousbtower 6-1:14.228: get version request failed: -71 [ 362.213381][ T993] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 362.264242][ T993] usb 6-1: USB disconnect, device number 3 [ 362.565407][ T5718] usb 1-1: USB disconnect, device number 22 [ 363.447314][ T50] Bluetooth: hci5: link tx timeout [ 363.454359][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.473676][ T1138] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 363.482266][ T50] Bluetooth: hci5: link tx timeout [ 363.493857][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.507786][ T50] Bluetooth: hci5: link tx timeout [ 363.514131][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.521887][ T50] Bluetooth: hci5: link tx timeout [ 363.528426][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.541601][ T50] Bluetooth: hci5: link tx timeout [ 363.548747][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.562138][ T50] Bluetooth: hci5: link tx timeout [ 363.567338][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.578042][ T50] Bluetooth: hci5: link tx timeout [ 363.587337][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.601136][ T50] Bluetooth: hci5: link tx timeout [ 363.606369][ T50] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.809132][ T1138] usb 1-1: Using ep0 maxpacket: 8 [ 363.819045][ T1138] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 363.842313][ T1138] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.870274][ T1138] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.885819][ T1138] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.914022][ T1138] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.942450][ T1138] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.952043][ T1138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.292365][ T1138] usb 1-1: GET_CAPABILITIES returned 0 [ 364.322012][ T1138] usbtmc 1-1:16.0: can't read capabilities [ 365.003858][ T5718] usb 1-1: USB disconnect, device number 23 [ 365.412534][ T8633] syzkaller1: entered promiscuous mode [ 365.418214][ T8633] syzkaller1: entered allmulticast mode [ 365.507172][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 365.569255][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 365.602961][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 365.611292][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 365.620206][ T804] usb 2-1: USB disconnect, device number 20 [ 365.864247][ T8701] netlink: 'syz.0.770': attribute type 29 has an invalid length. [ 365.918467][ T30] audit: type=1400 audit(1780467799.309:377): avc: denied { append } for pid=8705 comm="syz.4.774" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.108166][ T804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 366.285649][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 366.357266][ T804] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.423687][ T804] usb 2-1: config 179 has no interface number 0 [ 366.460104][ T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.539880][ T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.626699][ T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.748493][ T804] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 366.869839][ T804] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.948026][ T804] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.981781][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.991017][ T30] audit: type=1400 audit(1780467800.379:378): avc: denied { write } for pid=8685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.024868][ T8716] autofs: Unknown parameter '0x0000000000000000' [ 367.044616][ T8693] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 367.191640][ T8724] fuse: Unknown parameter 'grou00000000000000000000' [ 367.231895][ T8722] syzkaller0: entered promiscuous mode [ 367.238297][ T8722] syzkaller0: entered allmulticast mode [ 367.287586][ T30] audit: type=1400 audit(1780467800.669:379): avc: denied { write } for pid=8725 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.169596][ T8693] syzkaller1: entered promiscuous mode [ 368.210814][ T8693] syzkaller1: entered allmulticast mode [ 368.813047][ T30] audit: type=1400 audit(1780467802.199:380): avc: denied { unmount } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 372.089649][ T5718] usb 2-1: USB disconnect, device number 21 [ 372.095656][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 372.095686][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 372.462356][ T8780] syzkaller0: entered promiscuous mode [ 372.533654][ T8780] syzkaller0: entered allmulticast mode [ 373.958030][ T30] audit: type=1400 audit(1780467807.349:381): avc: denied { write } for pid=8737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.706880][ T8798] autofs: Unknown parameter '0x0000000000000000' [ 374.731067][ T8799] fuse: Unknown parameter 'grou00000000000000000000' [ 375.135642][ T30] audit: type=1400 audit(1780467808.529:382): avc: denied { write } for pid=8803 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.057150][ T30] audit: type=1400 audit(1780467809.929:383): avc: denied { mounton } for pid=8813 comm="syz.5.799" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 377.551163][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.802'. [ 378.394275][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.400801][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.971335][ T30] audit: type=1400 audit(1780467813.359:384): avc: denied { read } for pid=8876 comm="syz.4.809" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.997557][ T30] audit: type=1400 audit(1780467813.359:385): avc: denied { open } for pid=8876 comm="syz.4.809" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 380.021511][ T30] audit: type=1400 audit(1780467813.359:386): avc: denied { ioctl } for pid=8876 comm="syz.4.809" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 380.373216][ T804] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 380.533166][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 380.540596][ T804] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 380.548967][ T804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.559245][ T804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.569099][ T804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.580562][ T804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.596091][ T804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.605328][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.837637][ T804] usb 5-1: GET_CAPABILITIES returned 0 [ 380.843427][ T804] usbtmc 5-1:16.0: can't read capabilities [ 381.137304][ T1138] usb 5-1: USB disconnect, device number 27 [ 381.286592][ T8828] bridge_slave_0: left allmulticast mode [ 381.292253][ T8828] bridge_slave_0: left promiscuous mode [ 381.300876][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.312552][ T8828] bridge_slave_1: left allmulticast mode [ 381.320487][ T8828] bridge_slave_1: left promiscuous mode [ 381.328471][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.344514][ T8828] bond0: (slave bond_slave_0): Releasing backup interface [ 381.356814][ T8828] bond0: (slave bond_slave_1): Releasing backup interface [ 381.377830][ T8828] team0: Port device team_slave_0 removed [ 381.389577][ T8828] team0: Port device team_slave_1 removed [ 381.397999][ T8828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.412959][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.429366][ T8828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.436939][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.448465][ T8828] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.466164][ T8830] team0: Mode changed to "broadcast" [ 381.530004][ T8854] syzkaller0: entered promiscuous mode [ 381.542917][ T8854] syzkaller0: entered allmulticast mode [ 381.555411][ T8870] syzkaller0: entered promiscuous mode [ 381.564221][ T8870] syzkaller0: entered allmulticast mode [ 381.577588][ T8840] tipc: Enabled bearer , priority 0 [ 381.782449][ T8892] 9pnet_fd: Insufficient options for proto=fd [ 382.684303][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 383.240561][ T30] audit: type=1400 audit(1780467816.629:387): avc: denied { write } for pid=8883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.561589][ T30] audit: type=1400 audit(1780467817.949:388): avc: denied { write } for pid=8914 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.650676][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 387.861600][ T8929] loop5: detected capacity change from 0 to 2640 [ 387.870819][ T8929] buffer_io_error: 336 callbacks suppressed [ 387.870849][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.885751][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.894374][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.902896][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.911492][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.920066][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.928646][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.937121][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.945377][ T8929] ldm_validate_partition_table(): Disk read failed. [ 387.952277][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.989335][ T8929] Buffer I/O error on dev loop5, logical block 0, async page read [ 387.998550][ T8929] Dev loop5: unable to read RDB block 0 [ 388.006472][ T8929] loop5: unable to read partition table [ 388.013204][ T8929] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 389.727504][ T5718] tipc: Node number set to 3380847585 [ 389.735023][ T8903] team0: No ports can be present during mode change [ 390.363189][ T8946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8946 comm=syz.5.824 [ 390.416173][ T8946] 9p: Bad value for 'rfdno' [ 391.619501][ T8949] 9pnet_fd: Insufficient options for proto=fd [ 391.951857][ T8954] netlink: 260 bytes leftover after parsing attributes in process `syz.5.828'. [ 391.984943][ T8955] syzkaller0: entered promiscuous mode [ 392.016010][ T8955] syzkaller0: entered allmulticast mode [ 393.090160][ T8966] fuse: Unknown parameter 'grou00000000000000000000' [ 393.156816][ T8968] bridge_slave_0: left allmulticast mode [ 393.186266][ T8968] bridge_slave_0: left promiscuous mode [ 393.208910][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.258123][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 393.512896][ T8968] bridge_slave_1: left allmulticast mode [ 393.543685][ T8968] bridge_slave_1: left promiscuous mode [ 393.561918][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.590785][ T8968] bond0: (slave bond_slave_0): Releasing backup interface [ 393.612826][ T8968] bond0: (slave bond_slave_1): Releasing backup interface [ 393.646591][ T8968] team0: Port device team_slave_0 removed [ 393.690055][ T8968] team0: Port device team_slave_1 removed [ 393.705198][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.713514][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.724274][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.736577][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.754039][ T8968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.773973][ T8969] team0: Mode changed to "broadcast" [ 393.799652][ T8973] vlan0: entered promiscuous mode [ 393.876959][ T8973] team0: Port device vlan0 added [ 394.601761][ T5718] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 395.433314][ T804] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 395.465774][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 395.502149][ T5718] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 395.528073][ T5718] usb 6-1: config 179 has no interface number 0 [ 395.547552][ T5718] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 395.572515][ T5718] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 395.598405][ T5718] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 395.624115][ T5718] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 395.655870][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 395.686664][ T5718] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.734501][ T804] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 395.827110][ T5718] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 395.827528][ T804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.856216][ T804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.937035][ T804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.990899][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.012111][ T804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.138720][ T804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.178907][ T8984] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 396.251046][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.621360][ T9006] autofs: Unknown parameter '0x0000000000000000' [ 396.696299][ T804] usb 4-1: GET_CAPABILITIES returned 0 [ 396.721112][ T804] usbtmc 4-1:16.0: can't read capabilities [ 397.067703][ T9016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9016 comm=syz.0.846 [ 397.134801][ T9016] 9pnet_virtio: no channels available for device syz [ 399.245703][ T9] usb 4-1: USB disconnect, device number 30 [ 399.406976][ T30] audit: type=1400 audit(1780467832.799:389): avc: denied { name_bind } for pid=9023 comm="syz.0.848" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 399.478580][ T10] usb 6-1: USB disconnect, device number 4 [ 399.478583][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 399.478726][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 399.526259][ T30] audit: type=1400 audit(1780467832.799:390): avc: denied { node_bind } for pid=9023 comm="syz.0.848" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 402.303277][ T9053] fuse: Unknown parameter 'group_i00000000000000000000' [ 402.583803][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 402.765832][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 402.778428][ T5718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.811757][ T5718] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 402.848105][ T5718] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.888335][ T5718] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 402.905629][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.920712][ T5718] usb 6-1: Product: syz [ 402.931554][ T5718] usb 6-1: Manufacturer: syz [ 402.941832][ T5718] usb 6-1: SerialNumber: syz [ 402.953234][ T804] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 403.106036][ T804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 403.130063][ T804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.147287][ T804] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 403.183163][ T804] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.233238][ T804] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 403.252551][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.280559][ T804] usb 2-1: Product: syz [ 403.307583][ T804] usb 2-1: Manufacturer: syz [ 403.381288][ T804] usb 2-1: SerialNumber: syz [ 403.780219][ T9074] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.015373][ T5718] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 405.073675][ T5718] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 405.223790][ T1138] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 405.252764][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.384974][ T1138] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 405.407889][ T1138] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 405.441817][ T1138] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 405.481058][ T1138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 405.532141][ T1138] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 405.571409][ T1138] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.583229][ T1138] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.600885][ T1138] usb 1-1: Product: syz [ 405.607648][ T1138] usb 1-1: Manufacturer: syz [ 405.645148][ T1138] cdc_wdm 1-1:1.0: skipping garbage [ 405.663991][ T1138] cdc_wdm 1-1:1.0: skipping garbage [ 405.893074][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.867'. [ 406.072627][ T1138] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 406.667756][ T1138] cdc_wdm 1-1:1.0: Unknown control protocol [ 406.703793][ T1138] usb 1-1: USB disconnect, device number 24 [ 407.928718][ T5718] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 407.941671][ T804] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 407.959052][ T5718] usb 6-1: USB disconnect, device number 5 [ 409.911349][ T804] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 410.268568][ T8918] udevd[8918]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.317528][ T9121] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 410.324076][ T9121] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 410.356214][ T9121] vhci_hcd vhci_hcd.0: Device attached [ 410.419284][ T9122] vhci_hcd: connection closed [ 410.419615][ T13] vhci_hcd vhci_hcd.5: stop threads [ 410.430674][ T13] vhci_hcd vhci_hcd.5: release socket [ 410.440955][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 410.520464][ T804] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 410.556404][ T804] usb 2-1: USB disconnect, device number 22 [ 411.753242][ T8918] udevd[8918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.886108][ T9138] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 411.892659][ T9138] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 411.983884][ T9138] vhci_hcd vhci_hcd.0: Device attached [ 412.020336][ T9147] fuse: Bad value for 'fd' [ 413.408879][ T9139] vhci_hcd: connection closed [ 413.452187][ T7099] vhci_hcd vhci_hcd.5: stop threads [ 413.582687][ T7099] vhci_hcd vhci_hcd.5: release socket [ 413.646061][ T7099] vhci_hcd vhci_hcd.5: disconnect device [ 413.776466][ T1138] usb 44-1: enqueue for inactive port 0 [ 413.793449][ T993] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 413.989691][ T993] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 414.084684][ T993] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 414.411638][ T993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.080190][ T993] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 415.112786][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.127111][ T993] usb 1-1: Product: syz [ 415.131912][ T993] usb 1-1: Manufacturer: syz [ 415.136915][ T993] usb 1-1: SerialNumber: syz [ 415.184832][ T993] usb 1-1: config 0 descriptor?? [ 415.192777][ T993] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 415.203991][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 415.214009][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 415.224896][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 415.226805][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 415.247954][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 415.256161][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 415.264238][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 415.271294][ T9160] syzkaller0: entered promiscuous mode [ 415.274114][ T993] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 415.287189][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 415.294724][ T9160] syzkaller0: entered allmulticast mode [ 415.295603][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 415.319085][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 415.331014][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 415.339304][ T993] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 415.355715][ T993] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 415.374729][ T1138] usb usb44-port1: attempt power cycle [ 415.574011][ T9169] netlink: 68 bytes leftover after parsing attributes in process `syz.0.883'. [ 415.747723][ T993] usb 1-1: USB disconnect, device number 25 [ 415.760486][ T9170] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 415.767009][ T9170] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 415.792476][ T993] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 415.819118][ T993] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 415.953845][ T993] keyspan 1-1:0.0: device disconnected [ 415.967725][ T1138] usb usb44-port1: unable to enumerate USB device [ 415.983690][ T9170] vhci_hcd vhci_hcd.0: Device attached [ 416.015848][ T9171] vhci_hcd: connection closed [ 416.016087][ T6012] vhci_hcd vhci_hcd.1: stop threads [ 416.070635][ T6012] vhci_hcd vhci_hcd.1: release socket [ 416.980488][ T6012] vhci_hcd vhci_hcd.1: disconnect device [ 419.222055][ T9208] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 419.228588][ T9208] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 419.243349][ T9208] vhci_hcd vhci_hcd.0: Device attached [ 419.279338][ T9213] fuse: Unknown parameter 'group_id00000000000000000000' [ 419.348961][ T9210] vhci_hcd: connection closed [ 419.349195][ T48] vhci_hcd vhci_hcd.1: stop threads [ 419.361582][ T48] vhci_hcd vhci_hcd.1: release socket [ 419.368079][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 419.533232][ T993] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 419.693299][ T993] usb 1-1: Using ep0 maxpacket: 8 [ 419.700607][ T993] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 419.710402][ T993] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.721997][ T993] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.732832][ T993] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.743715][ T993] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.759344][ T993] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.769008][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.050322][ T993] usb 1-1: GET_CAPABILITIES returned 0 [ 420.056250][ T993] usbtmc 1-1:16.0: can't read capabilities [ 420.279710][ T993] usb 1-1: USB disconnect, device number 26 [ 420.587122][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 420.833167][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 420.842745][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 420.851555][ T9235] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 420.852147][ T9] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 420.868784][ T9] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 420.869104][ T9235] syzkaller0: entered promiscuous mode [ 420.877158][ T9] usb 2-1: config 14 has no interface number 0 [ 420.877184][ T9] usb 2-1: config 14 has no interface number 1 [ 420.877242][ T9] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 420.905419][ T9235] syzkaller0: entered allmulticast mode [ 420.906206][ T9] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 420.931393][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 420.944332][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 420.956446][ T9] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 420.963198][ T993] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 420.991489][ T9] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.005585][ T9] usb 2-1: config 14 interface 57 has no altsetting 0 [ 421.012826][ T9] usb 2-1: config 14 interface 228 has no altsetting 0 [ 421.024253][ T9] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 421.038832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.050687][ T9] usb 2-1: Product: syz [ 421.055209][ T9] usb 2-1: Manufacturer: syz [ 421.135300][ T993] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 421.169580][ T993] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 421.231854][ T993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 421.299796][ T993] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 421.357218][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.413847][ T993] usb 6-1: Product: syz [ 421.439153][ T993] usb 6-1: Manufacturer: syz [ 421.488290][ T993] usb 6-1: SerialNumber: syz [ 421.602317][ T993] usb 6-1: config 0 descriptor?? [ 421.714688][ T993] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 421.775978][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 421.960683][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 422.014958][ T9242] netlink: 68 bytes leftover after parsing attributes in process `syz.5.902'. [ 422.098847][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 422.232580][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 422.291504][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 422.346369][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 422.433540][ T993] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 422.502156][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 422.511362][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 422.521618][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 422.531721][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 422.547330][ T993] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 422.742772][ T993] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 422.879737][ T9] usb 2-1: SerialNumber: syz [ 422.911373][ T9249] fuse: Bad value for 'fd' [ 422.931834][ T993] usb 6-1: USB disconnect, device number 6 [ 422.988909][ T993] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 423.035404][ T9251] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 423.057387][ T993] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 423.082294][ T993] keyspan 6-1:0.0: device disconnected [ 423.281939][ T9256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 423.288506][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.383609][ T9] legousbtower 2-1:14.57: interrupt endpoints not found [ 423.397496][ T9] legousbtower 2-1:14.228: get version request failed: -71 [ 423.407180][ T9] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 423.423827][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 423.439229][ T9] usb 2-1: USB disconnect, device number 23 [ 423.464233][ T9258] vhci_hcd: connection closed [ 423.464631][ T9264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 423.468985][ T7099] vhci_hcd vhci_hcd.0: stop threads [ 423.469350][ T9264] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.485700][ T7099] vhci_hcd vhci_hcd.0: release socket [ 423.489611][ T9264] vhci_hcd vhci_hcd.0: Device attached [ 423.509950][ T7099] vhci_hcd vhci_hcd.0: disconnect device [ 423.577551][ T9265] vhci_hcd: connection closed [ 423.577914][ T1014] vhci_hcd vhci_hcd.1: stop threads [ 423.588747][ T1014] vhci_hcd vhci_hcd.1: release socket [ 423.594376][ T1014] vhci_hcd vhci_hcd.1: disconnect device [ 423.763802][ T5718] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 423.923443][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 423.939727][ T5718] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 423.953238][ T5718] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.021060][ T5718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.057688][ T5718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.089085][ T5718] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.188165][ T5718] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.267690][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.658451][ T5718] usb 5-1: GET_CAPABILITIES returned 0 [ 424.666378][ T5718] usbtmc 5-1:16.0: can't read capabilities [ 424.668458][ T9273] tipc: Resetting bearer [ 424.742007][ T9273] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.821295][ T9276] team0: Unable to change to the same mode the team is in [ 424.882332][ T9275] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 425.078493][ T9279] syzkaller0: entered promiscuous mode [ 425.102700][ T9279] syzkaller0: entered allmulticast mode [ 425.110318][ T5750] usb 5-1: USB disconnect, device number 28 [ 425.128411][ T9273] vlan0: entered promiscuous mode [ 425.162344][ T9273] team0: Port device vlan0 added [ 425.195470][ T9290] bridge_slave_0: left allmulticast mode [ 425.208679][ T9290] bridge_slave_0: left promiscuous mode [ 425.241401][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.257435][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 425.289170][ T9290] bridge_slave_1: left allmulticast mode [ 425.295181][ T9290] bridge_slave_1: left promiscuous mode [ 425.300976][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.380694][ T9296] fuse: Bad value for 'fd' [ 425.406781][ T9290] bond0: (slave bond_slave_0): Releasing backup interface [ 425.507066][ T9290] bond0: (slave bond_slave_1): Releasing backup interface [ 425.658120][ T9290] team0: Port device team_slave_0 removed [ 426.071764][ T9290] team0: Port device team_slave_1 removed [ 426.245007][ T9290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.397192][ T9290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.412436][ T9290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.424011][ T9290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.446151][ T9290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 426.476499][ T9303] No control pipe specified [ 426.608601][ T9306] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 426.615157][ T9306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 426.688666][ T9306] vhci_hcd vhci_hcd.0: Device attached [ 426.830183][ T9308] vhci_hcd: connection closed [ 426.830545][ T36] vhci_hcd vhci_hcd.1: stop threads [ 427.004191][ T9] usb 36-1: SetAddress Request (5) to port 0 [ 427.012479][ T9] usb 36-1: new SuperSpeed USB device number 5 using vhci_hcd [ 427.553872][ T36] vhci_hcd vhci_hcd.1: release socket [ 427.559398][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 428.809400][ T30] audit: type=1400 audit(1780467862.199:391): avc: denied { read } for pid=9326 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 428.863762][ T9330] fuse: Unknown parameter '0x0000000000000007' [ 428.870058][ T30] audit: type=1400 audit(1780467862.259:392): avc: denied { mounton } for pid=9326 comm="syz.0.930" path="/194/file0" dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 429.242942][ T9336] loop5: detected capacity change from 0 to 2640 [ 429.253491][ T9336] buffer_io_error: 336 callbacks suppressed [ 429.253523][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.268185][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.276761][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.285252][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.293770][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.302306][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.311068][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.319609][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.327885][ T9336] ldm_validate_partition_table(): Disk read failed. [ 429.335361][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.353787][ T9336] Buffer I/O error on dev loop5, logical block 0, async page read [ 429.362990][ T9336] Dev loop5: unable to read RDB block 0 [ 429.371021][ T9336] loop5: unable to read partition table [ 429.377768][ T9336] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 430.394138][ T29] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 430.565569][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 430.582589][ T29] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 430.597575][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.619105][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.638024][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.657805][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.686266][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.706450][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.981435][ T29] usb 2-1: GET_CAPABILITIES returned 0 [ 430.993661][ T29] usbtmc 2-1:16.0: can't read capabilities [ 431.251192][ T5615] usb 2-1: USB disconnect, device number 24 [ 432.162327][ T9] usb 36-1: device descriptor read/8, error -110 [ 432.571078][ T9] usb usb36-port1: attempt power cycle [ 433.164961][ T9] usb usb36-port1: unable to enumerate USB device [ 433.535337][ T9291] team0: Mode changed to "broadcast" [ 433.542244][ T9292] tipc: Enabled bearer , priority 0 [ 435.093066][ T9] tipc: Node number set to 2420852243 [ 436.219294][ T9366] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 436.225813][ T9366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 436.245929][ T9366] vhci_hcd vhci_hcd.0: Device attached [ 436.584909][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 436.693782][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 437.323952][ T30] audit: type=1400 audit(1780467870.719:393): avc: denied { create } for pid=9381 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 437.348145][ T9368] vhci_hcd: connection reset by peer [ 437.370130][ T13] vhci_hcd vhci_hcd.5: stop threads [ 437.395722][ T13] vhci_hcd vhci_hcd.5: release socket [ 437.408059][ T9376] syzkaller0: entered promiscuous mode [ 437.416129][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 437.427237][ T9376] syzkaller0: entered allmulticast mode [ 437.438299][ T30] audit: type=1400 audit(1780467870.829:394): avc: denied { create } for pid=9386 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 437.462225][ T30] audit: type=1400 audit(1780467870.849:395): avc: denied { relabelfrom } for pid=9381 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 437.482806][ T30] audit: type=1400 audit(1780467870.849:396): avc: denied { relabelto } for pid=9381 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 438.142186][ T5718] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 438.306220][ T5718] usb 6-1: Using ep0 maxpacket: 32 [ 438.323186][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 438.348592][ T5718] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 438.356976][ T5718] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 438.365327][ T5718] usb 6-1: config 14 has no interface number 0 [ 438.371553][ T5718] usb 6-1: config 14 has no interface number 1 [ 438.396704][ T5718] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 438.407882][ T5718] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 438.429341][ T5718] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 438.440923][ T5718] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 438.453339][ T5718] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 438.464871][ T5718] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.478179][ T5718] usb 6-1: config 14 interface 57 has no altsetting 0 [ 438.485031][ T5718] usb 6-1: config 14 interface 228 has no altsetting 0 [ 438.494038][ T5718] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 438.503393][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.511416][ T5718] usb 6-1: Product: syz [ 438.516162][ T5718] usb 6-1: Manufacturer: syz [ 438.520811][ T5718] usb 6-1: SerialNumber: syz [ 438.958967][ T5718] legousbtower 6-1:14.57: interrupt endpoints not found [ 439.370914][ T5718] legousbtower 6-1:14.228: get version request failed: -121 [ 439.378595][ T5718] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 439.830731][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.838173][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.108851][ T9389] tipc: Resetting bearer [ 440.118759][ T9389] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.135319][ T9390] team0: Unable to change to the same mode the team is in [ 440.142816][ T9393] vlan0: entered promiscuous mode [ 440.156684][ T9393] team0: Port device vlan0 added [ 440.165078][ T9395] tipc: Enabling of bearer rejected, already enabled [ 440.247830][ T9401] syzkaller0: entered promiscuous mode [ 440.265142][ T9401] syzkaller0: entered allmulticast mode [ 440.300927][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'. [ 440.312739][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'. [ 440.594535][ T804] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 441.407863][ T9] usb 6-1: USB disconnect, device number 7 [ 441.903036][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 442.767885][ T29] usb 44-1: device descriptor read/8, error -110 [ 444.761629][ T804] usb 2-1: device descriptor read/all, error -71 [ 444.871561][ T9429] bridge_slave_0: left allmulticast mode [ 444.880383][ T9429] bridge_slave_0: left promiscuous mode [ 444.890628][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.934896][ T9429] bridge_slave_1: left allmulticast mode [ 444.940566][ T9429] bridge_slave_1: left promiscuous mode [ 444.959046][ T9431] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 444.965589][ T9431] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 444.988072][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.011809][ T9431] vhci_hcd vhci_hcd.0: Device attached [ 445.025247][ T9439] fuse: Bad value for 'user_id' [ 445.032885][ T9429] bond0: (slave bond_slave_0): Releasing backup interface [ 445.049552][ T9435] vhci_hcd: connection closed [ 445.051681][ T9439] fuse: Bad value for 'user_id' [ 445.061463][ T5840] vhci_hcd vhci_hcd.1: stop threads [ 445.075588][ T5840] vhci_hcd vhci_hcd.1: release socket [ 445.088788][ T5840] vhci_hcd vhci_hcd.1: disconnect device [ 445.139068][ T9429] bond0: (slave bond_slave_1): Releasing backup interface [ 445.156476][ T9429] team0: Port device team_slave_0 removed [ 445.167448][ T9429] team0: Port device team_slave_1 removed [ 445.177484][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.187628][ T9429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.199284][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.214037][ T9429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.217001][ T29] usb usb44-port1: attempt power cycle [ 445.259722][ T9429] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.282326][ T9433] team0: Mode changed to "broadcast" [ 445.809460][ T29] usb usb44-port1: unable to enumerate USB device [ 446.351235][ T9437] bridge_slave_0: left allmulticast mode [ 446.386783][ T9437] bridge_slave_0: left promiscuous mode [ 446.424997][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.491866][ T9437] bridge_slave_1: left allmulticast mode [ 446.509683][ T9437] bridge_slave_1: left promiscuous mode [ 446.513054][ T30] audit: type=1400 audit(1780467879.899:397): avc: denied { bind } for pid=9453 comm="syz.4.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 446.525768][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.589576][ T9437] bond0: (slave bond_slave_0): Releasing backup interface [ 446.601293][ T9437] bond0: (slave bond_slave_1): Releasing backup interface [ 446.620887][ T9437] team0: Port device team_slave_0 removed [ 446.648263][ T9437] team0: Port device team_slave_1 removed [ 446.661944][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.680178][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.712051][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.729227][ T9437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.761543][ T9437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.800309][ T9440] vlan0: entered promiscuous mode [ 446.821565][ T9440] team0: Port device vlan0 added [ 446.829048][ T9447] vlan0: entered promiscuous mode [ 446.849993][ T9447] team0: Port device vlan0 added [ 446.861363][ T9446] tipc: Started in network mode [ 446.878770][ T9446] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 446.893330][ T9446] tipc: Enabled bearer , priority 0 [ 446.936279][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.151759][ T9473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.257097][ T9460] syzkaller0: entered promiscuous mode [ 447.273255][ T9460] syzkaller0: entered allmulticast mode [ 447.290065][ T9478] team0: No ports can be present during mode change [ 447.315546][ T6012] tipc: Resetting bearer [ 447.327228][ T9478] tipc: Enabling of bearer rejected, already enabled [ 447.523374][ T5615] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 447.727661][ T5615] usb 1-1: Using ep0 maxpacket: 8 [ 447.791611][ T5615] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 447.850436][ T5615] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.931594][ T5615] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.019777][ T5615] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.101597][ T5615] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.212532][ T5615] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.265558][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.489492][ T9493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 448.496013][ T9493] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 448.577578][ T9493] vhci_hcd vhci_hcd.0: Device attached [ 449.091039][ T5615] usb 1-1: GET_CAPABILITIES returned 0 [ 449.381973][ T993] usb 40-1: SetAddress Request (3) to port 0 [ 449.429362][ T5615] usbtmc 1-1:16.0: can't read capabilities [ 449.479298][ T9494] vhci_hcd: connection closed [ 449.479538][ T5840] vhci_hcd vhci_hcd.3: stop threads [ 449.585503][ T5840] vhci_hcd vhci_hcd.3: release socket [ 449.640943][ T5615] usb 1-1: USB disconnect, device number 27 [ 449.679027][ T5840] vhci_hcd vhci_hcd.3: disconnect device [ 450.318770][ T993] usb 40-1: new SuperSpeed USB device number 3 using vhci_hcd [ 450.344468][ T993] usb 40-1: enqueue for inactive port 0 [ 450.610649][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.970'. [ 450.735132][ T993] usb usb40-port1: attempt power cycle [ 451.298423][ T993] usb usb40-port1: unable to enumerate USB device [ 452.236516][ T1138] tipc: Node number set to 11578026 [ 452.250609][ T9502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.267629][ T9503] team0: No ports can be present during mode change [ 452.295633][ T9511] tipc: Resetting bearer [ 452.323423][ T9511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.358925][ T9512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.391963][ T30] audit: type=1400 audit(1780467885.779:398): avc: denied { read } for pid=9520 comm="syz.1.973" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 452.418063][ T9517] team0: Port device vlan0 removed [ 452.421582][ T30] audit: type=1400 audit(1780467885.779:399): avc: denied { open } for pid=9520 comm="syz.1.973" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 452.426806][ T9513] tipc: Started in network mode [ 452.452748][ T9513] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 452.458625][ T30] audit: type=1400 audit(1780467885.849:400): avc: denied { create } for pid=9520 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 452.462928][ T9513] tipc: Enabled bearer , priority 0 [ 452.641202][ T9526] netlink: 260 bytes leftover after parsing attributes in process `syz.5.976'. [ 453.573281][ T993] tipc: Node number set to 11578026 [ 456.393512][ T9547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 456.400055][ T9547] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 456.408476][ T9547] vhci_hcd vhci_hcd.0: Device attached [ 456.432155][ T9548] vhci_hcd: connection closed [ 456.433025][ T48] vhci_hcd vhci_hcd.1: stop threads [ 456.444948][ T48] vhci_hcd vhci_hcd.1: release socket [ 456.450368][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 456.477156][ T9543] syzkaller0: entered promiscuous mode [ 456.502356][ T9543] syzkaller0: entered allmulticast mode [ 456.593210][ T993] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 456.608113][ T9553] syzkaller0: entered promiscuous mode [ 456.621909][ T9553] syzkaller0: entered allmulticast mode [ 456.700903][ T9556] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.873253][ T993] usb 6-1: Using ep0 maxpacket: 8 [ 456.880690][ T993] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 456.889676][ T993] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.901022][ T993] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.911762][ T993] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.921960][ T993] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.935107][ T993] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.944375][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.189095][ T9564] loop5: detected capacity change from 0 to 2640 [ 457.200785][ T9564] buffer_io_error: 336 callbacks suppressed [ 457.200817][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.216096][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.224813][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.233556][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.242451][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.251320][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.260142][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.268915][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.311001][ T9564] ldm_validate_partition_table(): Disk read failed. [ 457.318162][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.326956][ T9564] Buffer I/O error on dev loop5, logical block 0, async page read [ 457.336688][ T9564] Dev loop5: unable to read RDB block 0 [ 457.345697][ T9564] loop5: unable to read partition table [ 457.352576][ T9564] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 457.993780][ T993] usb 6-1: GET_CAPABILITIES returned 0 [ 458.012819][ T993] usbtmc 6-1:16.0: can't read capabilities [ 458.053499][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 458.542573][ T5615] usb 6-1: USB disconnect, device number 8 [ 459.113496][ T9574] fuse: Bad value for 'fd' [ 461.286710][ T9556] team0: No ports can be present during mode change [ 461.295146][ T9569] tipc: Enabled bearer , priority 0 [ 461.302417][ T9577] netlink: 260 bytes leftover after parsing attributes in process `syz.5.991'. [ 461.393405][ T9562] team0: Port device vlan0 removed [ 461.421934][ T5840] tipc: Resetting bearer [ 461.727965][ T9586] syzkaller0: entered promiscuous mode [ 461.750193][ T9586] syzkaller0: entered allmulticast mode [ 461.771194][ T9594] syzkaller0: entered promiscuous mode [ 461.784082][ T9594] syzkaller0: entered allmulticast mode [ 462.415107][ T29] tipc: Node number set to 4049711670 [ 462.833490][ T9603] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 462.840016][ T9603] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 462.862958][ T9603] vhci_hcd vhci_hcd.0: Device attached [ 462.877326][ T9604] vhci_hcd: connection closed [ 462.877532][ T5840] vhci_hcd vhci_hcd.5: stop threads [ 462.887975][ T5840] vhci_hcd vhci_hcd.5: release socket [ 462.894461][ T5840] vhci_hcd vhci_hcd.5: disconnect device [ 463.339159][ T9616] fuse: Unknown parameter '0x0000000000000007' [ 464.056911][ T9620] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1004'. [ 464.093335][ T9624] netlink: 'syz.5.1006': attribute type 61 has an invalid length. [ 464.101353][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'. [ 464.126186][ T9622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 464.274121][ T9628] syzkaller0: entered promiscuous mode [ 464.279846][ T9628] syzkaller0: entered allmulticast mode [ 464.417015][ T9622] team0: No ports can be present during mode change [ 464.506522][ T9635] syzkaller0: entered promiscuous mode [ 464.525904][ T9635] syzkaller0: entered allmulticast mode [ 464.532232][ T9636] fuse: Unknown parameter '0x0000000000000007' [ 468.916840][ T9651] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 468.923397][ T9651] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 468.944651][ T9651] vhci_hcd vhci_hcd.0: Device attached [ 468.967198][ T9659] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1017'. [ 470.037428][ T9656] vhci_hcd: connection closed [ 470.037682][ T60] vhci_hcd vhci_hcd.4: stop threads [ 470.419200][ T60] vhci_hcd vhci_hcd.4: release socket [ 470.431862][ T29] usb 42-1: SetAddress Request (6) to port 0 [ 470.589696][ T60] vhci_hcd vhci_hcd.4: disconnect device [ 470.595558][ T29] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 470.623704][ T29] usb 42-1: enqueue for inactive port 0 [ 470.808439][ T9672] fuse: Unknown parameter '0x0000000000000007' [ 471.533897][ T29] usb usb42-port1: attempt power cycle [ 472.259554][ T9690] syzkaller0: entered promiscuous mode [ 472.298308][ T9690] syzkaller0: entered allmulticast mode [ 472.737076][ T29] usb usb42-port1: unable to enumerate USB device [ 473.019071][ T9703] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1029'. [ 475.967404][ T30] audit: type=1400 audit(1780467909.359:401): avc: denied { shutdown } for pid=9720 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.086244][ T9723] loop5: detected capacity change from 0 to 2640 [ 476.095813][ T9723] buffer_io_error: 336 callbacks suppressed [ 476.095847][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.110376][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.119007][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.128417][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.137505][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.146169][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.154757][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.163648][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.171915][ T9723] ldm_validate_partition_table(): Disk read failed. [ 476.206916][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.215538][ T9723] Buffer I/O error on dev loop5, logical block 0, async page read [ 476.224844][ T9723] Dev loop5: unable to read RDB block 0 [ 476.234069][ T9723] loop5: unable to read partition table [ 476.240854][ T9723] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 476.963454][ T5725] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 476.972920][ T9713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.551332][ T9727] syzkaller0: entered promiscuous mode [ 477.568950][ T9727] syzkaller0: entered allmulticast mode [ 477.595555][ T9728] syzkaller0: entered promiscuous mode [ 477.621098][ T9728] syzkaller0: entered allmulticast mode [ 477.783334][ T30] audit: type=1400 audit(1780467911.129:402): avc: denied { listen } for pid=9733 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.827756][ T30] audit: type=1400 audit(1780467911.149:403): avc: denied { setopt } for pid=9733 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.861120][ T30] audit: type=1400 audit(1780467911.149:404): avc: denied { accept } for pid=9733 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.720686][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 478.976126][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 480.402979][ T9757] loop5: detected capacity change from 0 to 2640 [ 480.474958][ T9757] ldm_validate_partition_table(): Disk read failed. [ 480.485329][ T9757] Dev loop5: unable to read RDB block 0 [ 480.495046][ T9757] loop5: unable to read partition table [ 480.502672][ T9757] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 481.458510][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.881083][ T1138] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 483.178149][ T1138] usb 6-1: Using ep0 maxpacket: 8 [ 483.270531][ T1138] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 483.368659][ T1138] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.472241][ T1138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.561199][ T1138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.624817][ T1138] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.649503][ T9776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.664862][ T1138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 483.682703][ T9770] syzkaller0: entered promiscuous mode [ 483.688693][ T1138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.697591][ T9770] syzkaller0: entered allmulticast mode [ 484.662220][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 484.851278][ T1138] usb 6-1: GET_CAPABILITIES returned 0 [ 484.858153][ T1138] usbtmc 6-1:16.0: can't read capabilities [ 484.951660][ T9797] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 485.276266][ T5718] usb 6-1: USB disconnect, device number 9 [ 486.125983][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 486.321473][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 486.330638][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.342250][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 486.353385][ T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.370710][ T9] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 486.379961][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.388046][ T9] usb 6-1: Product: syz [ 486.392312][ T9] usb 6-1: Manufacturer: syz [ 486.396991][ T9] usb 6-1: SerialNumber: syz [ 486.754310][ T9803] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 486.838806][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 486.897652][ T9] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 487.119112][ T9] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 487.131576][ T9] usb 6-1: USB disconnect, device number 10 [ 487.146544][ T8920] udevd[8920]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.367009][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 488.595698][ T9812] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 488.706677][ T9816] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 489.373522][ T5718] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 489.815794][ T9825] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 489.822432][ T9825] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.831950][ T9825] vhci_hcd vhci_hcd.0: Device attached [ 490.397677][ T5718] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 490.419011][ T5718] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 490.430266][ T5718] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 490.440129][ T5718] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 490.453314][ T5718] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 490.453416][ T9] usb 36-1: SetAddress Request (9) to port 0 [ 490.466870][ T5718] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.480574][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.492891][ T5718] usb 6-1: Product: syz [ 490.503304][ T5718] usb 6-1: Manufacturer: syz [ 490.555666][ T5718] cdc_wdm 6-1:1.0: skipping garbage [ 490.563801][ T5718] cdc_wdm 6-1:1.0: skipping garbage [ 491.161026][ T9] usb 36-1: new SuperSpeed USB device number 9 using vhci_hcd [ 493.272614][ T5718] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 493.386597][ T5718] cdc_wdm 6-1:1.0: Unknown control protocol [ 493.645549][ T9826] vhci_hcd: connection closed [ 493.666122][ T6012] vhci_hcd vhci_hcd.1: stop threads [ 493.677959][ T6012] vhci_hcd vhci_hcd.1: release socket [ 493.684273][ T6012] vhci_hcd vhci_hcd.1: disconnect device [ 493.705678][ T5718] usb 6-1: USB disconnect, device number 11 [ 493.872115][ T9846] tipc: Resetting bearer [ 493.907792][ T9846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 493.927666][ T9849] team0: No ports can be present during mode change [ 493.962432][ T9844] syzkaller0: entered promiscuous mode [ 493.991107][ T9844] syzkaller0: entered allmulticast mode [ 494.108898][ T9842] syzkaller0: entered promiscuous mode [ 494.170156][ T9842] syzkaller0: entered allmulticast mode [ 494.694972][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 494.736919][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 494.924025][ T9849] tipc: Enabling of bearer rejected, already enabled [ 497.327971][ T30] audit: type=1400 audit(1780467930.719:405): avc: denied { write } for pid=9864 comm="syz.3.1079" name="kcm" dev="proc" ino=4026533438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 497.559662][ T30] audit: type=1400 audit(1780467930.749:406): avc: denied { block_suspend } for pid=9860 comm="syz.5.1076" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.367291][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.703850][ T9] usb 36-1: device descriptor read/8, error -110 [ 499.137584][ T9] usb usb36-port1: attempt power cycle [ 499.347499][ T9873] tipc: Resetting bearer [ 500.460291][ T9] usb usb36-port1: unable to enumerate USB device [ 500.956439][ T9873] vlan0: left promiscuous mode [ 501.007471][ T9899] input: syz1 as /devices/virtual/input/input34 [ 501.017809][ T9899] input: failed to attach handler leds to device input34, error: -6 [ 501.030746][ T30] audit: type=1400 audit(1780467934.429:407): avc: denied { read } for pid=4968 comm="acpid" name="event4" dev="devtmpfs" ino=3274 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.082588][ T30] audit: type=1400 audit(1780467934.429:408): avc: denied { open } for pid=4968 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3274 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.147680][ T30] audit: type=1400 audit(1780467934.429:409): avc: denied { ioctl } for pid=4968 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3274 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.305170][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.313063][ T6292] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.335019][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.386587][ T6292] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.456312][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.531408][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.529451][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1091'. [ 503.550981][ T9919] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 503.557534][ T9919] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 503.566529][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 503.643982][ T9919] vhci_hcd vhci_hcd.0: Device attached [ 503.726297][ T9920] vhci_hcd: connection closed [ 503.726537][ T156] vhci_hcd vhci_hcd.3: stop threads [ 503.820579][ T156] vhci_hcd vhci_hcd.3: release socket [ 503.867622][ T156] vhci_hcd vhci_hcd.3: disconnect device [ 503.913200][ T29] usb 40-1: SetAddress Request (7) to port 0 [ 504.296263][ T29] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 504.813579][ T29] usb 40-1: enqueue for inactive port 0 [ 505.380765][ T29] usb usb40-port1: attempt power cycle [ 505.450465][ T9929] tipc: Resetting bearer [ 505.681563][ T9929] vlan0: left promiscuous mode [ 505.976851][ T29] usb usb40-port1: unable to enumerate USB device [ 506.212850][ T9937] warning: `syz.3.1098' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 506.237572][ T156] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.275009][ T156] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.314477][ T156] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.349463][ T156] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.520317][ T9967] loop5: detected capacity change from 0 to 2640 [ 506.533567][ T9967] buffer_io_error: 687 callbacks suppressed [ 506.533583][ T9967] Buffer I/O error on dev loop5, logical block 0, async page read [ 506.709333][ T9967] Buffer I/O error on dev loop5, logical block 0, async page read [ 506.901195][ T9967] loop5: unable to read partition table [ 506.956842][ T9970] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 506.957148][ T9967] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 506.965528][ T9970] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 506.982764][ T9970] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 506.991929][ T9970] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 507.000796][ T9970] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 507.012206][ T9970] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 507.022519][ T9970] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 507.036397][ T9970] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 513.018496][T10022] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 513.025027][T10022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 513.050221][T10022] vhci_hcd vhci_hcd.0: Device attached [ 513.102378][T10023] vhci_hcd: connection closed [ 513.102587][ T156] vhci_hcd vhci_hcd.0: stop threads [ 513.114152][ T156] vhci_hcd vhci_hcd.0: release socket [ 513.120831][ T156] vhci_hcd vhci_hcd.0: disconnect device [ 513.173151][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 513.963196][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 514.427195][ T29] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 514.435671][ T29] usb 4-1: config 179 has no interface number 0 [ 514.441983][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 514.474800][T10029] syzkaller0: entered promiscuous mode [ 514.483322][T10029] syzkaller0: entered allmulticast mode [ 514.502670][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 515.474589][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 515.490150][ T29] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 515.503324][ T29] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 515.517155][ T29] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 515.527260][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.543496][T10014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 517.031181][T10051] syzkaller0: entered promiscuous mode [ 517.036768][T10051] syzkaller0: entered allmulticast mode [ 517.116454][T10056] syzkaller0: entered promiscuous mode [ 517.122059][T10056] syzkaller0: entered allmulticast mode [ 517.702403][ T5718] usb 4-1: USB disconnect, device number 31 [ 517.708406][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 517.708461][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 517.782593][ T5615] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 518.903179][ T5615] usb 1-1: Using ep0 maxpacket: 32 [ 518.937795][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.948932][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.959557][ T5615] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 519.076059][T10081] loop5: detected capacity change from 0 to 2640 [ 519.094510][T10081] buffer_io_error: 322 callbacks suppressed [ 519.094542][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.109007][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.117576][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.126323][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.134560][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.143330][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.151943][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.160494][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.168784][T10081] ldm_validate_partition_table(): Disk read failed. [ 519.175713][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.184474][T10081] Buffer I/O error on dev loop5, logical block 0, async page read [ 519.193770][T10081] Dev loop5: unable to read RDB block 0 [ 519.201888][T10081] loop5: unable to read partition table [ 519.236557][T10081] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 519.918273][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 519.954357][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.045991][ T5615] usb 1-1: config 0 descriptor?? [ 520.599950][ T5615] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 520.611014][ T5615] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 520.690569][T10093] random: crng reseeded on system resumption [ 521.086143][ T30] audit: type=1400 audit(1780467954.079:410): avc: denied { write } for pid=10084 comm="syz.5.1140" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 521.115757][ T30] audit: type=1400 audit(1780467954.159:411): avc: denied { create } for pid=10084 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 521.168690][ T5615] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 521.337382][T10101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.413573][ T5615] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 521.473562][T10102] dlm: no local IP address has been set [ 521.479788][T10102] dlm: cannot start dlm midcomms -107 [ 521.485465][ T5750] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 521.628482][ T5615] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 521.683580][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 521.889988][ T5615] usb 1-1: USB disconnect, device number 28 [ 521.918368][T10106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.053489][T10107] dlm: no local IP address has been set [ 522.061710][T10107] dlm: cannot start dlm midcomms -107 [ 523.014979][T10109] syzkaller0: entered promiscuous mode [ 523.031628][T10109] syzkaller0: entered allmulticast mode [ 523.081510][ T5750] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.197581][ T5750] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 523.331132][T10115] 9pnet_virtio: no channels available for device syz [ 524.184588][ T5750] usb 2-1: can't read configurations, error -71 [ 525.123009][ T5718] IPVS: starting estimator thread 0... [ 525.134201][T10125] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 525.213276][T10126] IPVS: using max 36 ests per chain, 86400 per kthread [ 525.222476][T10128] input: syz1 as /devices/virtual/input/input35 [ 525.229045][T10128] input: failed to attach handler leds to device input35, error: -6 [ 525.257790][T10132] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 525.264335][T10132] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 525.322618][T10132] vhci_hcd vhci_hcd.0: Device attached [ 525.445507][T10142] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 525.452055][T10142] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 525.466607][T10133] vhci_hcd: connection closed [ 525.468445][ T7098] vhci_hcd vhci_hcd.1: stop threads [ 525.480637][T10142] vhci_hcd vhci_hcd.0: Device attached [ 525.495379][ T7098] vhci_hcd vhci_hcd.1: release socket [ 525.502451][T10146] fuse: Unknown parameter '0x0000000000000007' [ 525.521578][ T7098] vhci_hcd vhci_hcd.1: disconnect device [ 525.536306][T10143] vhci_hcd: connection closed [ 525.536656][ T7098] vhci_hcd vhci_hcd.0: stop threads [ 525.547943][ T7098] vhci_hcd vhci_hcd.0: release socket [ 525.553562][ T7098] vhci_hcd vhci_hcd.0: disconnect device [ 525.643178][ T5827] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 525.794864][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 525.810086][ T5827] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 525.820546][ T5827] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.832142][ T5827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.846095][ T5827] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 525.860130][ T5827] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.876515][ T5827] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 525.887193][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.947127][ T5827] usbtmc 4-1:16.0: bulk endpoints not found [ 527.696353][T10165] syzkaller0: entered promiscuous mode [ 527.780399][T10175] loop5: detected capacity change from 0 to 2640 [ 527.789441][T10175] buffer_io_error: 336 callbacks suppressed [ 527.789472][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.803944][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.812341][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.820844][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.829272][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.837809][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.846609][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.855017][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.889689][T10175] ldm_validate_partition_table(): Disk read failed. [ 527.896651][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.905089][T10175] Buffer I/O error on dev loop5, logical block 0, async page read [ 527.914248][T10175] Dev loop5: unable to read RDB block 0 [ 527.922135][T10175] loop5: unable to read partition table [ 527.928880][T10175] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 527.965953][T10165] syzkaller0: entered allmulticast mode [ 528.789905][ T5718] usb 4-1: USB disconnect, device number 32 [ 529.047045][T10183] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 529.053595][T10183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 529.085362][T10183] vhci_hcd vhci_hcd.0: Device attached [ 529.109226][T10184] loop5: detected capacity change from 0 to 2640 [ 529.117455][T10184] ldm_validate_partition_table(): Disk read failed. [ 529.124272][T10184] Dev loop5: unable to read RDB block 0 [ 529.130092][T10184] loop5: unable to read partition table [ 529.135875][T10184] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 529.297199][T10191] fuse: Bad value for 'fd' [ 529.403568][ T29] usb 34-1: SetAddress Request (6) to port 0 [ 529.443655][ T29] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 530.113979][T10186] vhci_hcd: connection reset by peer [ 530.125329][ T5840] vhci_hcd vhci_hcd.0: stop threads [ 530.132500][ T5840] vhci_hcd vhci_hcd.0: release socket [ 530.139218][ T5840] vhci_hcd vhci_hcd.0: disconnect device [ 533.886572][T10239] fuse: Unknown parameter 'user_id00000000000000000000' [ 534.623273][ T29] usb 34-1: device descriptor read/8, error -110 [ 535.014434][ T29] usb usb34-port1: attempt power cycle [ 535.548205][T10247] pim6reg: entered allmulticast mode [ 535.548493][T10250] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 535.560023][T10250] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 535.624415][ T29] usb usb34-port1: unable to enumerate USB device [ 535.653680][T10250] vhci_hcd vhci_hcd.0: Device attached [ 535.750386][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.923607][ T5827] usb 40-1: SetAddress Request (11) to port 0 [ 535.939303][ T5827] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 536.076644][T10251] vhci_hcd: connection reset by peer [ 536.109999][ T1014] vhci_hcd vhci_hcd.3: stop threads [ 536.140054][ T1014] vhci_hcd vhci_hcd.3: release socket [ 536.168103][ T1014] vhci_hcd vhci_hcd.3: disconnect device [ 541.098699][ T5827] usb 40-1: device descriptor read/8, error -110 [ 541.673597][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1196'. [ 541.804465][ T5827] usb usb40-port1: attempt power cycle [ 541.874743][T10280] syzkaller0: entered promiscuous mode [ 541.892488][T10280] syzkaller0: entered allmulticast mode [ 541.989339][T10286] syzkaller0: entered promiscuous mode [ 541.995450][T10286] syzkaller0: entered allmulticast mode [ 542.095262][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 542.127031][ T30] audit: type=1400 audit(1780467975.509:412): avc: denied { setopt } for pid=10277 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 542.224123][ T30] audit: type=1400 audit(1780467975.609:413): avc: denied { write } for pid=10277 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 542.294250][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 542.364282][ T5827] usb usb40-port1: unable to enumerate USB device [ 542.966369][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 543.514471][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 543.522765][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.533031][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.542956][ T9] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.554114][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.567359][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.576534][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.576623][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 543.601363][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 543.604253][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 543.626799][ T29] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 543.646196][ T29] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 543.673377][ T29] usb 6-1: config 14 has no interface number 0 [ 543.683138][ T29] usb 6-1: config 14 has no interface number 1 [ 543.707455][ T29] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 543.743581][ T29] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 543.779572][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 543.805021][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 543.836446][ T29] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 543.861100][ T29] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.890319][ T29] usb 6-1: config 14 interface 57 has no altsetting 0 [ 543.899850][ T29] usb 6-1: config 14 interface 228 has no altsetting 0 [ 543.910970][ T29] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 543.925483][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.933866][ T29] usb 6-1: Product: syz [ 543.938077][ T29] usb 6-1: Manufacturer: syz [ 543.942675][ T29] usb 6-1: SerialNumber: syz [ 545.593520][T10311] syzkaller0: entered promiscuous mode [ 545.609471][T10311] syzkaller0: entered allmulticast mode [ 545.629341][ T29] legousbtower 6-1:14.57: interrupt endpoints not found [ 546.095895][ T29] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 546.104512][T10318] tipc: Resetting bearer [ 546.119019][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 547.109102][ T9] usb 2-1: USB disconnect, device number 30 [ 547.593313][ T29] usb 6-1: USB disconnect, device number 12 [ 547.670898][ T29] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 547.679835][T10330] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 547.772313][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1212'. [ 547.809153][T10318] vlan0: left promiscuous mode [ 547.949413][T10333] team0: Unable to change to the same mode the team is in [ 547.976542][T10340] tipc: Enabling of bearer rejected, already enabled [ 548.029428][T10334] team0: Port device vlan0 added [ 548.041950][ T1014] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.097860][T10329] syzkaller0: entered promiscuous mode [ 548.103680][T10329] syzkaller0: entered allmulticast mode [ 548.110907][ T1014] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.141513][ T7099] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.215279][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.486897][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 553.532267][T10391] random: crng reseeded on system resumption [ 553.759752][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 555.233246][ T5827] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 555.441200][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 555.472335][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.484014][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.495828][ T5827] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 555.504996][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.520679][ T5827] usb 5-1: config 0 descriptor?? [ 555.642897][T10408] netlink: 'syz.5.1232': attribute type 28 has an invalid length. [ 555.879381][ T7099] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.949698][ T5827] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 555.967043][ T5827] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 556.153949][ T5827] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 556.284736][T10419] random: crng reseeded on system resumption [ 556.911253][ T29] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 557.060479][ T5827] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 557.129822][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 557.190515][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 557.322890][ T29] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 557.352789][ T29] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 557.375002][T10425] loop5: detected capacity change from 0 to 2640 [ 557.381646][T10425] buffer_io_error: 352 callbacks suppressed [ 557.381657][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.395420][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.403286][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.411116][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.418986][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.426896][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.435294][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.443233][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.451066][T10425] ldm_validate_partition_table(): Disk read failed. [ 557.457719][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.465650][T10425] Buffer I/O error on dev loop5, logical block 0, async page read [ 557.473604][T10425] Dev loop5: unable to read RDB block 0 [ 557.479388][T10425] loop5: unable to read partition table [ 557.485140][T10425] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 557.530554][ T29] usb 1-1: config 14 has no interface number 0 [ 557.567048][ T29] usb 1-1: config 14 has no interface number 1 [ 557.595721][ T29] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 557.605990][ T5827] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 557.666560][ T29] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 557.696903][ T29] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 557.711060][ T29] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 557.729890][ T29] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 557.743168][ T29] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.773586][ T29] usb 1-1: config 14 interface 57 has no altsetting 0 [ 557.780899][ T29] usb 1-1: config 14 interface 228 has no altsetting 0 [ 557.798762][ T4983] ldm_validate_partition_table(): Disk read failed. [ 557.812760][ T4983] Dev loop5: unable to read RDB block 0 [ 557.819715][ T4983] loop5: unable to read partition table [ 557.839036][ T29] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 557.851825][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.872608][ T29] usb 1-1: Product: syz [ 557.881979][ T29] usb 1-1: Manufacturer: syz [ 557.887707][T10429] input: syz1 as /devices/virtual/input/input36 [ 557.887742][T10429] input: failed to attach handler leds to device input36, error: -6 [ 557.897776][T10431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 557.913794][ T5615] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 557.924283][ T29] usb 1-1: SerialNumber: syz [ 558.028027][T10431] vlan0: entered promiscuous mode [ 558.435464][ T29] legousbtower 1-1:14.57: interrupt endpoints not found [ 558.490292][ T30] audit: type=1400 audit(1780467991.859:414): avc: denied { write } for pid=10436 comm="syz.1.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 558.835223][ T5827] usb 5-1: USB disconnect, device number 29 [ 559.127144][T10443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10443 comm=syz.3.1243 [ 559.178425][T10443] 9pnet_virtio: no channels available for device syz [ 561.370881][ T29] legousbtower 1-1:14.228: get version request failed: -71 [ 561.379162][ T29] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 561.395296][ T29] usb 1-1: USB disconnect, device number 29 [ 561.671106][T10456] fuse: Bad value for 'rootmode' [ 562.709474][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.716559][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.858740][ T1313] ------------[ cut here ]------------ [ 562.865292][ T1313] !skb_transport_header_was_set(skb) [ 562.865317][ T1313] WARNING: ./include/linux/skbuff.h:3244 at lowpan_xmit+0xe84/0x1150, CPU#1: aoe_tx0/1313 [ 562.880553][ T1313] Modules linked in: [ 562.885515][ T1313] CPU: 1 UID: 0 PID: 1313 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.896128][ T1313] Tainted: [L]=SOFTLOCKUP [ 562.900439][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.910520][ T1313] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 562.915845][ T1313] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 77 12 17 fe e9 7c fc ff ff e8 3d f5 c5 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 2f f5 c5 f6 90 0f 0b 90 e9 af f5 ff ff [ 562.935479][ T1313] RSP: 0000:ffffc90005a2f8a0 EFLAGS: 00010293 [ 562.941556][ T1313] RAX: 0000000000000000 RBX: ffffc90005a2f930 RCX: ffffffff8b42b1c6 [ 562.949540][ T1313] RDX: ffff88802ad48000 RSI: ffffffff8b42bb23 RDI: ffff88802ad48000 [ 562.957523][ T1313] RBP: ffffc90005a2fa40 R08: 0000000000000003 R09: 000000000000ffff [ 562.965513][ T1313] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880750140b6 [ 562.973499][ T1313] R13: ffffc90005a2f940 R14: ffff88802a018e50 R15: ffff888075014000 [ 562.981464][ T1313] FS: 0000000000000000(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 562.990418][ T1313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.997015][ T1313] CR2: 000000110c3065cc CR3: 000000003883c000 CR4: 00000000003526f0 [ 563.005003][ T1313] Call Trace: [ 563.008273][ T1313] [ 563.011204][ T1313] ? __pfx_lowpan_xmit+0x10/0x10 [ 563.016189][ T1313] ? skb_network_protocol+0x2ce/0x3d0 [ 563.021567][ T1313] ? lockdep_unlock+0x5a/0xc0 [ 563.026281][ T1313] ? dev_hard_start_xmit+0x128/0x7a0 [ 563.031571][ T1313] dev_hard_start_xmit+0x128/0x7a0 [ 563.036710][ T1313] __dev_queue_xmit+0x1baa/0x4950 [ 563.041742][ T1313] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 563.047662][ T1313] ? __pfx___dev_queue_xmit+0x10/0x10 [ 563.053042][ T1313] ? __lock_acquire+0x4a5/0x2630 [ 563.058001][ T1313] ? ref_tracker_free+0x37e/0x6c0 [ 563.063034][ T1313] ? do_raw_spin_lock+0x128/0x260 [ 563.068091][ T1313] ? find_held_lock+0x2b/0x80 [ 563.072764][ T1313] ? skb_dequeue+0x126/0x180 [ 563.077382][ T1313] ? skb_dequeue+0x126/0x180 [ 563.081973][ T1313] ? find_held_lock+0x2b/0x80 [ 563.086666][ T1313] ? tx+0xa4/0x130 [ 563.090392][ T1313] ? rcu_is_watching+0x12/0xc0 [ 563.095182][ T1313] ? __pfx_tx+0x10/0x10 [ 563.099339][ T1313] tx+0xc4/0x130 [ 563.102917][ T1313] kthread+0x1d8/0x3c0 [ 563.107013][ T1313] ? __kthread_parkme+0xbb/0x230 [ 563.111958][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.116569][ T1313] ? rcu_is_watching+0x12/0xc0 [ 563.121339][ T1313] ? __pfx_default_wake_function+0x10/0x10 [ 563.127179][ T1313] ? __kthread_parkme+0x18c/0x230 [ 563.132214][ T1313] ? kthread+0x13a/0x450 [ 563.136476][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.141063][ T1313] kthread+0x370/0x450 [ 563.145151][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.149741][ T1313] ret_from_fork+0x72b/0xd50 [ 563.154350][ T1313] ? __pfx_ret_from_fork+0x10/0x10 [ 563.159475][ T1313] ? __switch_to+0x800/0x1100 [ 563.164174][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.168767][ T1313] ret_from_fork_asm+0x1a/0x30 [ 563.173577][ T1313] [ 563.176587][ T1313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 563.183859][ T1313] CPU: 1 UID: 0 PID: 1313 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.194442][ T1313] Tainted: [L]=SOFTLOCKUP [ 563.198759][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.208801][ T1313] Call Trace: [ 563.212071][ T1313] [ 563.214994][ T1313] dump_stack_lvl+0x100/0x190 [ 563.219680][ T1313] vpanic+0x552/0x970 [ 563.223657][ T1313] ? __pfx_vpanic+0x10/0x10 [ 563.228195][ T1313] panic+0xd1/0xe0 [ 563.231914][ T1313] ? __pfx_panic+0x10/0x10 [ 563.236334][ T1313] ? check_panic_on_warn+0x1f/0x90 [ 563.241450][ T1313] check_panic_on_warn.cold+0x19/0x34 [ 563.246822][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 563.251502][ T1313] __warn.cold+0x191/0x328 [ 563.255918][ T1313] __report_bug+0x296/0x3d0 [ 563.260421][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 563.265100][ T1313] ? __pfx___report_bug+0x10/0x10 [ 563.270127][ T1313] ? rcu_is_watching+0x12/0xc0 [ 563.274940][ T1313] ? trace_contention_end.constprop.0+0x141/0x1a0 [ 563.281375][ T1313] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 563.287643][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 563.292335][ T1313] report_bug+0xb2/0x220 [ 563.296592][ T1313] ? lowpan_xmit+0xe84/0x1150 [ 563.301272][ T1313] handle_bug+0x16a/0x2a0 [ 563.305611][ T1313] exc_invalid_op+0x17/0x50 [ 563.310123][ T1313] asm_exc_invalid_op+0x1a/0x20 [ 563.314970][ T1313] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 563.320257][ T1313] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 77 12 17 fe e9 7c fc ff ff e8 3d f5 c5 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 2f f5 c5 f6 90 0f 0b 90 e9 af f5 ff ff [ 563.339927][ T1313] RSP: 0000:ffffc90005a2f8a0 EFLAGS: 00010293 [ 563.345998][ T1313] RAX: 0000000000000000 RBX: ffffc90005a2f930 RCX: ffffffff8b42b1c6 [ 563.353971][ T1313] RDX: ffff88802ad48000 RSI: ffffffff8b42bb23 RDI: ffff88802ad48000 [ 563.361946][ T1313] RBP: ffffc90005a2fa40 R08: 0000000000000003 R09: 000000000000ffff [ 563.369921][ T1313] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880750140b6 [ 563.377910][ T1313] R13: ffffc90005a2f940 R14: ffff88802a018e50 R15: ffff888075014000 [ 563.385897][ T1313] ? lowpan_xmit+0x526/0x1150 [ 563.390591][ T1313] ? lowpan_xmit+0xe83/0x1150 [ 563.395285][ T1313] ? __pfx_lowpan_xmit+0x10/0x10 [ 563.400236][ T1313] ? skb_network_protocol+0x2ce/0x3d0 [ 563.405614][ T1313] ? lockdep_unlock+0x5a/0xc0 [ 563.410312][ T1313] ? dev_hard_start_xmit+0x128/0x7a0 [ 563.415606][ T1313] dev_hard_start_xmit+0x128/0x7a0 [ 563.420743][ T1313] __dev_queue_xmit+0x1baa/0x4950 [ 563.425775][ T1313] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 563.431679][ T1313] ? __pfx___dev_queue_xmit+0x10/0x10 [ 563.437068][ T1313] ? __lock_acquire+0x4a5/0x2630 [ 563.442023][ T1313] ? ref_tracker_free+0x37e/0x6c0 [ 563.447069][ T1313] ? do_raw_spin_lock+0x128/0x260 [ 563.452107][ T1313] ? find_held_lock+0x2b/0x80 [ 563.456784][ T1313] ? skb_dequeue+0x126/0x180 [ 563.461374][ T1313] ? skb_dequeue+0x126/0x180 [ 563.465965][ T1313] ? find_held_lock+0x2b/0x80 [ 563.470639][ T1313] ? tx+0xa4/0x130 [ 563.474367][ T1313] ? rcu_is_watching+0x12/0xc0 [ 563.479147][ T1313] ? __pfx_tx+0x10/0x10 [ 563.483307][ T1313] tx+0xc4/0x130 [ 563.486861][ T1313] kthread+0x1d8/0x3c0 [ 563.490931][ T1313] ? __kthread_parkme+0xbb/0x230 [ 563.495876][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.500463][ T1313] ? rcu_is_watching+0x12/0xc0 [ 563.505240][ T1313] ? __pfx_default_wake_function+0x10/0x10 [ 563.511048][ T1313] ? __kthread_parkme+0x18c/0x230 [ 563.516086][ T1313] ? kthread+0x13a/0x450 [ 563.520328][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.524918][ T1313] kthread+0x370/0x450 [ 563.528992][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.533595][ T1313] ret_from_fork+0x72b/0xd50 [ 563.538190][ T1313] ? __pfx_ret_from_fork+0x10/0x10 [ 563.543305][ T1313] ? __switch_to+0x800/0x1100 [ 563.547986][ T1313] ? __pfx_kthread+0x10/0x10 [ 563.552577][ T1313] ret_from_fork_asm+0x1a/0x30 [ 563.557360][ T1313] [ 563.560616][ T1313] Kernel Offset: disabled [ 563.564925][ T1313] Rebooting in 86400 seconds..