last executing test programs: 40.791654617s ago: executing program 3 (id=1003): socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x80a, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x7c, 0x10, 0x401, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x3}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x43}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1f}, @IFLA_MACSEC_WINDOW={0x8}, @IFLA_MACSEC_PROTECT={0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xfc}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xffff}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x4}]}}}]}, 0x7c}}, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x806, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f045}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) 40.089710858s ago: executing program 3 (id=1006): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000010140)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x278da7, 0x2}) 39.267991311s ago: executing program 3 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 36.342927166s ago: executing program 3 (id=1012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 35.790215054s ago: executing program 3 (id=1018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xbd, &(0x7f00000002c0)=""/189}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d2000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x39}, 0x60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x52000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4}, 0x48) 11.840302393s ago: executing program 2 (id=1064): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mlock(&(0x7f00004c2000/0x2000)=nil, 0x2000) timerfd_create(0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/196, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) timer_create(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 11.645445944s ago: executing program 2 (id=1066): bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100a20035000000560000022500000019000a00100000ad07fd17e5ffff080c38005100000000000a", 0x39}], 0xc) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000940)="0aeb8c89629a8f1747dd1801131de75f307d2f7c5e5782b44b15fc47bf0c329f4b290a000000000000142ef6b6bc098d401de3bb89378b8c021ab810e05ef8a92bb74bcc0ea986247bd43e4c9a", 0x4d}, {&(0x7f00000000c0)="752582be730822f532231d3a9ef58abee2c30a1f0a434c95961bb1e7f30a00e424aa67b1c95b", 0x26}, {&(0x7f0000000280)="7ba72ba60212bbb39f62", 0xa}, {&(0x7f0000000300)="03ee1e1822b7b7990976b878c54e57449e180db4300d03acdcde558c5be9effcb84d443e7faddf26a5eace58efedfefd90f0ec03208b6c48290c2cd0c545efc22e49dfde911f161b1f25a1b7dec08b27d4ab8c83f9e01072aa322c042baa466d18764c142bbf038eb8c2", 0x6a}, {&(0x7f0000000380)="5c1bc5e8a81eec513a", 0x9}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f00000003c0)="f88bcdb4d256085f22b74162fc8c7d8e2c2f4b92b78423a5d0f50e5990540289cf4ebda14738792e2d72f0c736c631a75f1ec4eef20b1862a906f1425cbdfcf55b22f10670705c427a617855849579580cc2b0ad2249e248f07f0166bf506e4bebfa80a02acad6cd56db33", 0x6b}], 0x7) pipe(0x0) dup(r0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @remote, 0xa03}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81004e200e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b194ca705db9f98793e9775f67d385f10a5236e4d7c4e390ae130de74d1126ba0d6276e860fabefbbbc15d428bff85be0aac444cd7b034536dce6b691bde0882f504", @ANYRES16, @ANYBLOB="01082dbd7000fedbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000900000006001100000800000800150000000000000001007063690000000200303030303a30303a31302e3000000000080003000000000008000b000800000006001100000000000800150004000000"], 0x94}, 0x1, 0x0, 0x0, 0x20004081}, 0x20040814) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1a0100000000ffffffffffff0000000000000000aaaaaaaaaa0000"], 0x1d) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x8004550f, &(0x7f0000000140)={0x60, 0x9, 0x0, 0x7d, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 9.975452552s ago: executing program 2 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) poll(&(0x7f0000000200)=[{r2}], 0x1, 0xb43) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffffffe1, 0x0) 7.337358395s ago: executing program 4 (id=1071): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 6.989560145s ago: executing program 4 (id=1074): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x7fffffffffffffff}) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f000000000008000a", @ANYRES8=r1, @ANYBLOB="99dc622f1c28ae0828fffc042603937e2bac81b90379891fdcb4e8af1d3cead11a48c4d72dc160ac8df61e7e9932eee7118c862193ecbc6f2dac2ae67e6556271a0b726c460b514d492041a8a0a34cac12f25edd072597df0aadbf"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, r7}) sendto$inet6(r4, 0x0, 0x0, 0x22044004, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fda45ff810540010000000058000b480400945f64001400050038925a01ffffff7f0000000004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x9ba90a6400db33a6}], 0x1) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000340)=@v={0x93, 0xb, 0x90, 0x8, @generic=0x6, 0x0, 0x4}) r8 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000010004280012800a00010076786c616e", @ANYBLOB="4800000010005f3f770005000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) 6.361701064s ago: executing program 2 (id=1077): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000980)={0x30, 0x7}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f010203010902120001000000000904"], 0x0) socket(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x232242, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000000000), 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x9, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) gettid() r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.941625149s ago: executing program 4 (id=1078): syz_init_net_socket$rose(0xb, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f0000000840), 0xc, 0x0}, 0x4010) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x40c004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper}) 5.677320307s ago: executing program 4 (id=1080): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000480)="0000000000000005ff6943b800000008ffeaa101b28a9c68ee21c757e2152994ccca053afb1f67dd65dd530700a28f28bf86f474fad8cb594ed9fabe", 0x3c, r1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 4.539581923s ago: executing program 1 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000003c0)="3f030e00031b12000000000089e9aaa911d7c2290f00810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="009a00"}, 0x14) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, 0x0, 0x0, 0x0, &(0x7f00000044c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) getpeername(r4, 0x0, 0x0) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.359690134s ago: executing program 0 (id=1083): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 4.01784138s ago: executing program 0 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) 3.720214623s ago: executing program 0 (id=1085): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)=""/30, &(0x7f0000000340)=0x1e) r1 = dup2(r0, r0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, r2, {0x2}}, 0x18) 3.488642913s ago: executing program 0 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20}, 0xfdef) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) poll(&(0x7f0000000200)=[{r3}], 0x1, 0xb43) splice(r1, 0x0, r3, 0x0, 0xffffffe1, 0x0) 3.204247397s ago: executing program 1 (id=1087): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) r2 = fsopen(&(0x7f0000000140)='omfs\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x11, r2, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0xa079fcfb1f055bf2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x4, 0x7fe2}, 0x48) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000280), 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) open(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38) 2.903704237s ago: executing program 2 (id=1088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r1 = syz_usbip_server_init(0x3) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x309, 0x0, 0x5, 0x0, 0x0, @remote}, 0x10) write$usbip_server(r1, &(0x7f0000000980)=@ret_submit={{0x3, 0x3, 0x0, 0x1, 0x1}, 0x10000, 0xc5, 0x107, 0x17, 0x2, 0x0, "d9ea674cb745f1030ee2135d07ef8da5916b1a3650a15dec672c3b254efc6809b973784cc31f4486f8331acde30b7866643ed73955b6949f82a02182fd6ce9b5b9f27eb889dfd6de034c7862365a46a75c199e680c6b32929cfb93a21f710354bd1dd8124f4660d6179a4dce7c5a9fc05fad3451e852ac0747da2c25508c0db13eefa3d6da1f42a44bbdaaec8841151e5af587790101e3a77a9a60b0417788e765f42a8652406f6174bd9a076e9f0c973006406aff127de33767fae5ff2d4eb580847ee4fc", [{0x4, 0x2, 0x1, 0x1ff}, {0x7, 0x5}, {0x1, 0xffff, 0x8, 0x3}, {0xc0, 0xfff, 0x2, 0x7ff}, {0x17cc, 0xffffffc1, 0x6, 0x1}, {0x4dab, 0x1, 0xa3d, 0x49}, {0x8000, 0x8, 0x7, 0x5c}, {0x10001, 0x20, 0xbd, 0x100}, {0x90c9, 0x1, 0x52c7, 0xfff}, {0x9, 0x0, 0x2, 0x20}, {0xffff, 0x1, 0x0, 0xfffffff9}, {0x9, 0xfff, 0x9, 0x9}, {0x8, 0x9, 0x1cf, 0x6}, {0x5b6, 0x4, 0x10100, 0x10000}, {0xfff, 0xd7, 0x40, 0xf14}, {0xe8d7, 0x20, 0x0, 0x9}, {0x4, 0xd46d, 0x1c, 0x8}, {0xfff, 0x8, 0x6, 0x3f}, {0xffffffff, 0x0, 0x8000, 0x1000}, {0xfffffffc, 0x1, 0x361, 0x6}, {0xfffffffd, 0x7, 0x2, 0x1}, {0x0, 0x9, 0x4, 0x101}, {0x7, 0x89c, 0x5f2c220d, 0x5}]}, 0x265) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000011c0)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220100000004164a5c954f829439e9c538cd"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0x0, 0xffdfffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="14", 0x1, 0x4011000bffd) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 2.524887925s ago: executing program 4 (id=1089): prctl$PR_SET_MM_MAP_SIZE(0x10, 0x7ffffffff000, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000003000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000002c0001800c00010062697477697365001c0002800800034000000000080002400000000008000140000000000900010073797a3000000000140000001100010000000000000000000000000af36de06153d186f652df19539bd445103dbf73ec6e7305222dea6d3a36de0ba91f85e19204bcbeee47a6cc2ac22ff70ed6829f4347d69a8d0385a924ad"], 0xfc}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r3, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r3}, 0x4) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRES8=r2, @ANYRES8, @ANYRES8=r0, @ANYBLOB="333ba03d06882ad6947c5c35f83eb9faac8c58cf612b581401ff66500230eb2a44733283836f010860e38c591b3b749776d8909949e42ee0efc56b022ba6efd2a834d655ab9e86ced321a34121058573405b3d85d7d9223a2c38e1473a8f01347cef914d40a338c89e4824eb18d1f6748bce2b720b7261ea307d4ad367ee17ac4e0745fc6c340d68909b704a59d10c7eea61ae794a20621bc1eeb2fd7bb68d18ede2d0467fdd", @ANYRES64=r4, @ANYRESDEC=r5], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) io_submit(r7, 0x2, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000300)="75195fee5485450bb367b6944c66aee40a47e04907bac8dbdc908a8f86cd000491f109d0cfa052795059861fd56904f505f32799baca3eb50c5a425b0cfce1caa3af5a55", 0x44, 0xdf, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x3, r4, &(0x7f0000000480)="50c5ad38a9df024b463967fff801bbdf72b8af4aceb1586f2ef01806433f681badacafded835c8095bf3fc5b1bf8ee990f64e842fad20edac1afddcede6c370d4eb3ef9f49f2271c23fd0513a579c71db970e2bf88b9e0145c999c69bb40c05d59af5be4214233ceac6284b56c406f40e2d5572ebd17f80a8502145cac93d49d2f61f32be0e383c043da0e7c0e846be43083ca1c6e76df0d0a218903c4c5740086fa83c6aefe62c761937c5f5c5a8892ae9b4fd801ed1e722dcf6bf65993281de39ccb42880b3d5b18f174c24f50adf344e6b6346f51ff235c0d475f5279ff7db3bb5714cb5dfde73fd874b9cbe59c031b", 0xf1, 0x4800000000000000, 0x0, 0x2}]) 2.405676329s ago: executing program 0 (id=1090): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000001040)={'tunl0\x00', 0x0, 0x8, 0x0, 0x0, 0x6, {{0x2d, 0x4, 0x0, 0x2, 0xb4, 0x2064, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp={0x44, 0x20, 0x45, 0x0, 0x6, [0x200, 0x608, 0xfffffc00, 0x8, 0xfffffffa, 0x9, 0x0]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x2, 0xb, "187c2b2cddb18dab2e"}, {0x6, 0x2}, {0x6, 0xc, "9f21af61b95cd1965b45"}, {0x1, 0x9, "b6b5e727a6ba47"}, {0x2, 0x2}, {0x7, 0x7, "b368a8f8a9"}]}, @lsrr={0x83, 0x13, 0x17, [@local, @multicast2, @broadcast, @empty]}, @end, @end, @timestamp_prespec={0x44, 0x24, 0xb8, 0x3, 0x6, [{@loopback, 0x5}, {@remote, 0xfffffffb}, {@empty, 0x9fab}, {@multicast2, 0x4906}]}, @generic={0x83, 0x4, "42d6"}, @timestamp_prespec={0x44, 0x4, 0x7b, 0x3, 0x6}, @timestamp_prespec={0x44, 0xc, 0x46, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x4}, 0x98}]}]}}}}}) 1.720336706s ago: executing program 1 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000008fa000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000005300000000210000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff08000000000800006700b7030000000700008500000071004000950000000000000015733782b4b744f121531211b68a12fb6ccf9c0459c74e5863cfda65779fae213d9af9178777cc22f3c123f55c8a76"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000004a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000034c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x410203, 0x0) dup2(r7, r7) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000005c0)) sendmmsg$inet_sctp(r5, &(0x7f0000001780), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) close(r3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0xa}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) 1.467666989s ago: executing program 0 (id=1092): r0 = socket$inet6(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {0x53}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x4001, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @loopback, 0x200000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_free_inode\x00', r4}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_io_uring_setup(0x82e, 0x0, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) mmap(&(0x7f0000a23000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) r7 = dup(r6) sendfile(r7, r7, 0x0, 0x81ba) 936.549851ms ago: executing program 1 (id=1093): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1a, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r2, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 620.818644ms ago: executing program 1 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 255.121979ms ago: executing program 1 (id=1095): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0xf8, 0x1}}}}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x9c) socket(0x0, 0x0, 0x0) (async) socket(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x600}, 0x10) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000080)=',', 0x1) (async) write$char_usb(r6, &(0x7f0000000080)=',', 0x1) 253.779359ms ago: executing program 4 (id=1096): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) 201.64219ms ago: executing program 2 (id=1097): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_io_uring_setup(0x1f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000440), &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r3 = syz_io_uring_setup(0x9c3, &(0x7f0000000380), &(0x7f0000000040)=0x0, &(0x7f0000000840)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000340)={0x50, 0xffff, 0x7, {}, {0x1ff, 0x8}, @rumble={0xfffe, 0x8}}) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="2b706572665f6576656e74207d6e6574202d637075242d696f202d64657669636573202d696f202b637075856574202d626c6b696f20"], 0x36) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_op={0x1, 0xf}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045002, &(0x7f0000000000)) r8 = syz_io_uring_setup(0x32b8, &(0x7f0000000480)={0x0, 0x78e3, 0x4, 0x3, 0xdd, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000000680)={0x1, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/220, 0xdc}], &(0x7f0000000640)=[0x8, 0xfff]}, 0x20) 0s ago: executing program 3 (id=1019): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="71010000", @ANYRES16=r4, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="a4"], 0x10) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[], 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x64}}, 0x90) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket(0x15, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r11, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)=0x28) connect$pppl2tp(r10, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername$l2tp6(r8, 0x0, &(0x7f0000000340)) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f0000000140)={0xa, 0x4e62, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x1c, 0x0}}], 0x1, 0x81) kernel console output (not intermixed with test programs): s mode [ 262.937975][ T5138] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 263.026544][ T62] hsr_slave_1: left promiscuous mode [ 263.042728][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.056282][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.085295][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.101004][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.165998][ T62] veth1_macvtap: left promiscuous mode [ 263.178648][ T62] veth0_macvtap: left promiscuous mode [ 263.196117][ T62] veth1_vlan: left promiscuous mode [ 263.219474][ T62] veth0_vlan: left promiscuous mode [ 263.316835][ T5215] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 264.595012][ T5101] Bluetooth: hci1: command tx timeout [ 264.662339][ T5215] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 265.136742][ T5215] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 265.165038][ T5215] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.182231][ T5215] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 265.201161][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.216581][ T5215] usb 2-1: Product: syz [ 265.223482][ T5215] usb 2-1: Manufacturer: syz [ 265.233253][ T5215] usb 2-1: SerialNumber: syz [ 265.248497][ T5215] usb 2-1: config 0 descriptor?? [ 265.273766][ T5215] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 265.426306][ T5101] Bluetooth: hci5: unexpected subevent 0x01 length: 25 > 18 [ 265.444108][ T5101] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 265.581852][ T7217] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.306489][ T62] team0 (unregistering): Port device team_slave_1 removed [ 266.442906][ T62] team0 (unregistering): Port device team_slave_0 removed [ 268.554666][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.570736][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.572090][ T7244] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=7244 comm=syz.4.470 [ 268.581754][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.623584][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.623682][ T5137] usb 2-1: USB disconnect, device number 11 [ 268.674102][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.685188][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.727993][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.810409][ T7240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.078555][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.143863][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.186529][ T7098] bridge_slave_0: entered allmulticast mode [ 269.230988][ T7098] bridge_slave_0: entered promiscuous mode [ 269.269372][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.282582][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.297212][ T7098] bridge_slave_1: entered allmulticast mode [ 269.313665][ T7098] bridge_slave_1: entered promiscuous mode [ 269.424395][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.449550][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.483020][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.510112][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.546912][ T6798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.589019][ T6798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.601415][ T53] Bluetooth: hci5: unexpected cc 0x0403 length: 65 > 1 [ 269.609354][ T53] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 269.637830][ T29] audit: type=1400 audit(1719959960.091:889): avc: denied { setopt } for pid=7258 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 269.649804][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.681162][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 269.848077][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.921894][ T6798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.941225][ T6798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.974047][ T6798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.002656][ T6798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.043812][ T7257] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 270.110292][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.549745][ T7098] team0: Port device team_slave_0 added [ 270.610807][ T7098] team0: Port device team_slave_1 added [ 270.960724][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.988596][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.064329][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.397856][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.414473][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.448029][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.269215][ T7098] hsr_slave_0: entered promiscuous mode [ 272.287157][ T7098] hsr_slave_1: entered promiscuous mode [ 272.317092][ T7098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.325030][ T7098] Cannot create hsr debugfs directory [ 272.369989][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.385616][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.658095][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.704555][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.204793][ T53] Bluetooth: hci5: unexpected cc 0x0403 length: 65 > 1 [ 273.212100][ T53] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 273.495442][ T7321] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.513249][ T7321] vhci_hcd: invalid port number 9 [ 273.519450][ T7321] vhci_hcd: invalid port number 9 [ 273.638657][ T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 273.647668][ T53] Bluetooth: hci5: Injecting HCI hardware error event [ 273.656322][ T53] Bluetooth: hci5: hardware error 0x00 [ 275.256319][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 275.473058][ T5101] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10 [ 275.797504][ T53] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 277.476977][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 279.256803][ T29] audit: type=1400 audit(1719959969.421:890): avc: denied { mounton } for pid=7366 comm="syz.4.495" path="/proc/240/task" dev="proc" ino=16110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 280.546418][ T7098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.711500][ T7098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.808344][ T7098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.897851][ T7098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.337705][ T7394] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 283.577000][ T7380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'. [ 283.651567][ T29] audit: type=1326 audit(1719959974.121:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65acd75f19 code=0x7ffc0000 [ 283.746782][ T29] audit: type=1326 audit(1719959974.161:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65acd75f19 code=0x7ffc0000 [ 283.884556][ T29] audit: type=1326 audit(1719959974.181:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f65acd75f19 code=0x7ffc0000 [ 284.073037][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.879579][ T29] audit: type=1326 audit(1719959974.181:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65acd75f19 code=0x7ffc0000 [ 284.920898][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.008991][ T29] audit: type=1326 audit(1719959974.181:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65acd75f19 code=0x7ffc0000 [ 285.054238][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.061580][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.140085][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.147335][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.157712][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 287.399189][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 287.576809][ T7462] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 287.846600][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 288.159209][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.429519][ T7098] veth0_vlan: entered promiscuous mode [ 289.530285][ T7098] veth1_vlan: entered promiscuous mode [ 290.611398][ T7098] veth0_macvtap: entered promiscuous mode [ 290.672252][ T7098] veth1_macvtap: entered promiscuous mode [ 290.758073][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.789320][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.811467][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.908193][ T7492] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 290.928995][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.972853][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.049340][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.111103][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.154919][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.237756][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.301443][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 291.323441][ T7493] netlink: 'syz.1.518': attribute type 10 has an invalid length. [ 291.352007][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.506800][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.556397][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.052050][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.269572][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.346730][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.356601][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.369333][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.381587][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.415220][ T7098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.435741][ T7098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.534563][ T7098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.554317][ T29] audit: type=1400 audit(1719959984.981:896): avc: denied { mount } for pid=7513 comm="syz.3.524" name="/" dev="rpc_pipefs" ino=17179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 294.583845][ T7098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.693418][ T29] audit: type=1400 audit(1719959984.981:897): avc: denied { watch } for pid=7513 comm="syz.3.524" path="/75/file0" dev="rpc_pipefs" ino=17179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 294.856114][ T29] audit: type=1400 audit(1719959985.121:898): avc: denied { unmount } for pid=5392 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 294.883516][ T7521] netlink: 100 bytes leftover after parsing attributes in process `syz.3.525'. [ 294.927200][ T7521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 294.933777][ T7521] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 294.992251][ T7521] vhci_hcd vhci_hcd.0: Device attached [ 295.306792][ T5136] usb 15-1: new high-speed USB device number 4 using vhci_hcd [ 296.121718][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.141649][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 296.164720][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.261903][ T29] audit: type=1400 audit(1719959986.731:899): avc: denied { append } for pid=7537 comm="syz.1.528" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.334948][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.338973][ T5139] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.371267][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.380611][ T7546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.529'. [ 296.425105][ T7546] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 296.608402][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 296.627644][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 296.641189][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 296.654299][ T5139] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.664945][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.722872][ T5139] usb 4-1: config 0 descriptor?? [ 296.746110][ T7521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.772232][ T5139] hub 4-1:0.0: USB hub found [ 296.862843][ T7551] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 296.975863][ T5139] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 297.219299][ T7556] netlink: 'syz.4.531': attribute type 2 has an invalid length. [ 297.253035][ T7555] netlink: 'syz.1.530': attribute type 10 has an invalid length. [ 297.284705][ T5139] usbhid 4-1:0.0: can't add hid device: -71 [ 297.297022][ T7556] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 297.298826][ T5139] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.311619][ T7523] vhci_hcd: connection reset by peer [ 297.339849][ T1098] vhci_hcd: stop threads [ 297.368141][ T1098] vhci_hcd: release socket [ 297.374907][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.531'. [ 297.398737][ T1098] vhci_hcd: disconnect device [ 297.449651][ T5139] usb 4-1: USB disconnect, device number 12 [ 301.566820][ T5136] vhci_hcd: vhci_device speed not set [ 301.574588][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 302.267368][ T5139] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 302.826748][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 302.898538][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.913037][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.927140][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.938257][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.988682][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.023132][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 303.084914][ T7600] ieee802154 phy0 wpan0: encryption failed: -90 [ 303.103754][ T29] audit: type=1400 audit(1719959993.571:900): avc: denied { mount } for pid=7599 comm="syz.2.542" name="/" dev="autofs" ino=18448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 303.187237][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.248361][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.276304][ T5139] usb 4-1: Product: syz [ 303.286439][ T5139] usb 4-1: Manufacturer: syz [ 303.304431][ T5139] usb 4-1: SerialNumber: syz [ 303.695900][ T7608] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 303.800416][ T5139] cdc_ncm 4-1:1.0: bind() failure [ 303.840842][ T5139] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 303.860318][ T5139] cdc_ncm 4-1:1.1: bind() failure [ 303.882438][ T5139] usb 4-1: USB disconnect, device number 13 [ 303.995917][ T29] audit: type=1400 audit(1719959994.461:901): avc: denied { unmount } for pid=6798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 304.017135][ T7611] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 304.089196][ T7614] netlink: 100 bytes leftover after parsing attributes in process `syz.2.546'. [ 304.274815][ T7614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 304.281359][ T7614] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.292559][ T7614] vhci_hcd vhci_hcd.0: Device attached [ 305.191249][ T7617] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 3 [ 305.235515][ T12] vhci_hcd: stop threads [ 305.258942][ T12] vhci_hcd: release socket [ 305.411366][ T5139] usb 13-1: new high-speed USB device number 6 using vhci_hcd [ 305.419005][ T12] vhci_hcd: disconnect device [ 305.426462][ T5139] usb 13-1: enqueue for inactive port 0 [ 308.056143][ T5139] vhci_hcd: vhci_device speed not set [ 308.206813][ T5138] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 308.357883][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 310.118586][ T29] audit: type=1400 audit(1719960000.591:902): avc: denied { getopt } for pid=7652 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.632026][ T7672] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 310.888293][ T7675] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 311.076039][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.560'. [ 311.137775][ T7680] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 311.156005][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 311.213714][ T7684] netlink: 100 bytes leftover after parsing attributes in process `syz.0.564'. [ 313.086751][ T7684] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 313.093320][ T7684] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 313.118759][ T7684] vhci_hcd vhci_hcd.0: Device attached [ 313.606769][ T9] usb 9-1: new high-speed USB device number 3 using vhci_hcd [ 313.614338][ T5166] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 313.976772][ T5166] usb 1-1: Using ep0 maxpacket: 32 [ 315.307567][ T29] audit: type=1400 audit(1719960004.441:903): avc: denied { unlink } for pid=7714 comm="syz.1.570" name="#1" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.375361][ T5166] usb 1-1: device descriptor read/all, error -71 [ 315.384738][ T7687] vhci_hcd: connection reset by peer [ 317.096668][ C0] sched: RT throttling activated [ 317.136773][ T3466] vhci_hcd: stop threads [ 317.141520][ T3466] vhci_hcd: release socket [ 317.146177][ T3466] vhci_hcd: disconnect device [ 317.643002][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.649424][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.094668][ T29] audit: type=1400 audit(1719960005.781:904): avc: denied { mount } for pid=7714 comm="syz.1.570" name="/" dev="overlay" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 321.223524][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 321.451516][ T7739] netlink: 'syz.1.576': attribute type 21 has an invalid length. [ 323.115729][ T7767] netlink: 100 bytes leftover after parsing attributes in process `syz.2.585'. [ 323.229675][ T7767] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 323.236242][ T7767] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 323.298823][ T7767] vhci_hcd vhci_hcd.0: Device attached [ 323.566830][ T931] usb 13-1: new high-speed USB device number 7 using vhci_hcd [ 323.696892][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 323.908011][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 324.088521][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 325.345921][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 325.367555][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 325.376709][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.389035][ T9] usb 3-1: config 0 descriptor?? [ 325.419863][ T7774] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 325.458488][ T9] hub 3-1:0.0: USB hub found [ 325.698269][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 325.944175][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 326.861967][ T7769] vhci_hcd: connection reset by peer [ 326.880038][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 326.895934][ T62] vhci_hcd: stop threads [ 326.907313][ T7793] netlink: 'syz.4.588': attribute type 10 has an invalid length. [ 326.936320][ T62] vhci_hcd: release socket [ 326.937778][ T9] usb 3-1: USB disconnect, device number 12 [ 326.983051][ T62] vhci_hcd: disconnect device [ 327.018657][ T7796] syz.3.589 (7796): attempted to duplicate a private mapping with mremap. This is not supported. [ 327.099789][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 327.666848][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 327.729138][ T5166] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 327.895896][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.917038][ T9] usb 4-1: config 0 has no interfaces? [ 327.928923][ T5166] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.941843][ T9] usb 4-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 327.957746][ T5166] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.973567][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 328.000131][ T5166] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.012816][ T9] usb 4-1: Product: syz [ 328.020036][ T9] usb 4-1: SerialNumber: syz [ 328.026182][ T5166] usb 5-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 328.045102][ T5166] usb 5-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 328.060853][ T9] usb 4-1: config 0 descriptor?? [ 328.076758][ T5166] usb 5-1: config 1 interface 1 has no altsetting 1 [ 328.111944][ T5166] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.133470][ T5166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.155987][ T5166] usb 5-1: Product: syz [ 328.164378][ T5166] usb 5-1: Manufacturer: syz [ 328.171472][ T5166] usb 5-1: SerialNumber: syz [ 328.192333][ T5166] usb 5-1: selecting invalid altsetting 1 [ 328.396601][ T5166] cdc_ncm 5-1:1.0: bind() failure [ 328.490197][ T5166] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 328.509159][ T5166] cdc_ncm 5-1:1.1: bind() failure [ 328.552214][ T5166] usb 5-1: USB disconnect, device number 9 [ 328.569480][ T7830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.757051][ T931] vhci_hcd: vhci_device speed not set [ 328.950184][ T5166] usb 4-1: USB disconnect, device number 14 [ 329.408020][ T7838] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 329.416166][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 330.421127][ T7858] netlink: 100 bytes leftover after parsing attributes in process `syz.1.608'. [ 330.477095][ T7858] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 330.483711][ T7858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 330.531457][ T7858] vhci_hcd vhci_hcd.0: Device attached [ 330.599927][ T7861] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 330.621009][ T1111] vhci_hcd: stop threads [ 330.629566][ T1111] vhci_hcd: release socket [ 330.650542][ T1111] vhci_hcd: disconnect device [ 330.996887][ T5136] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 331.026846][ T5166] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 331.207640][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 331.219296][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 331.234591][ T5166] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.254303][ T5136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 331.278530][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.278569][ T5136] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 331.332448][ T5166] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.342593][ T5166] usb 3-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 331.354225][ T5166] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 331.374998][ T5166] usb 3-1: config 1 interface 1 has no altsetting 1 [ 331.392883][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.422305][ T5166] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.445928][ T5136] usb 2-1: config 0 descriptor?? [ 331.467409][ T5166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.467754][ T7858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 331.475421][ T5166] usb 3-1: Product: syz [ 331.522663][ T5136] hub 2-1:0.0: USB hub found [ 331.542598][ T5166] usb 3-1: Manufacturer: syz [ 331.556318][ T5166] usb 3-1: SerialNumber: syz [ 331.594172][ T5166] usb 3-1: selecting invalid altsetting 1 [ 331.726777][ T5139] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 331.810402][ T5166] cdc_ncm 3-1:1.0: bind() failure [ 331.832906][ T5136] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 331.900506][ T5166] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 331.933607][ T5139] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.939442][ T5166] cdc_ncm 3-1:1.1: bind() failure [ 331.958779][ T5139] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 331.964379][ T5166] usb 3-1: USB disconnect, device number 13 [ 331.999167][ T5139] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.032423][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 332.073423][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 332.134902][ T5139] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.147438][ T7890] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 332.167329][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.193496][ T5136] usbhid 2-1:0.0: can't add hid device: -71 [ 332.217661][ T5136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 332.225869][ T5139] usb 4-1: Product: syz [ 332.232106][ T5139] usb 4-1: Manufacturer: syz [ 332.261955][ T5139] cdc_wdm 4-1:1.0: skipping garbage [ 332.289590][ T5136] usb 2-1: USB disconnect, device number 12 [ 332.296829][ T5139] cdc_wdm 4-1:1.0: skipping garbage [ 332.340879][ T5139] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 332.376348][ T5139] cdc_wdm 4-1:1.0: Unknown control protocol [ 332.705669][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 333.562770][ T5136] usb 4-1: USB disconnect, device number 15 [ 333.804412][ T29] audit: type=1400 audit(1719960024.271:905): avc: denied { ioctl } for pid=7909 comm="syz.0.624" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 333.897830][ T29] audit: type=1400 audit(1719960024.291:906): avc: denied { read } for pid=7909 comm="syz.0.624" name="btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 333.972152][ T29] audit: type=1400 audit(1719960024.291:907): avc: denied { open } for pid=7909 comm="syz.0.624" path="/dev/btrfs-control" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 334.981278][ T7925] netlink: 'syz.3.628': attribute type 10 has an invalid length. [ 336.326489][ T7935] netlink: 100 bytes leftover after parsing attributes in process `syz.3.632'. [ 336.386157][ T7935] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 336.392732][ T7935] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 336.417522][ T7935] vhci_hcd vhci_hcd.0: Device attached [ 336.496100][ T7939] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 2 [ 336.584197][ T12] vhci_hcd: stop threads [ 336.604096][ T12] vhci_hcd: release socket [ 336.627580][ T12] vhci_hcd: disconnect device [ 336.649078][ T5215] vhci_hcd: vhci_device speed not set [ 337.092672][ T7956] fuse: Unknown parameter '€' [ 337.176911][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 337.263101][ T29] audit: type=1400 audit(1719960027.731:908): avc: denied { ioctl } for pid=7955 comm="syz.0.635" path="socket:[18135]" dev="sockfs" ino=18135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.396824][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 337.433471][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 337.477772][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 337.512430][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 337.562841][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.604684][ T9] usb 4-1: config 0 descriptor?? [ 337.622845][ T7935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.640179][ T9] hub 4-1:0.0: USB hub found [ 337.976600][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 338.325750][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 338.408569][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 338.588017][ T9] usb 4-1: USB disconnect, device number 16 [ 338.745989][ T7979] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 338.866770][ T5166] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 339.056736][ T5166] usb 1-1: Using ep0 maxpacket: 16 [ 339.082820][ T5166] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 339.112372][ T5166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.133187][ T5166] usb 1-1: Product: syz [ 339.149160][ T5166] usb 1-1: Manufacturer: syz [ 339.163451][ T5166] usb 1-1: SerialNumber: syz [ 339.192256][ T5166] usb 1-1: config 0 descriptor?? [ 339.220627][ T5166] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 339.243512][ T5166] pctv452e: pctv452e_power_ctrl: 1 [ 339.243512][ T5166] [ 339.258303][ T5166] usb 1-1: selecting invalid altsetting 3 [ 339.270879][ T5166] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 339.270879][ T5166] [ 339.302909][ T5166] dvb-usb: bulk message failed: -22 (5/0) [ 339.329145][ T5166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.351492][ T5166] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 339.365171][ T5166] usb 1-1: media controller created [ 339.530070][ T5166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.063190][ T5166] DVB: Unable to find symbol stb0899_attach() [ 340.069679][ T5166] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 340.636885][ T5166] rc_core: IR keymap rc-dib0700-rc5 not found [ 340.656847][ T5166] Registered IR keymap rc-empty [ 340.977545][ T5167] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 341.002261][ T5166] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 341.555912][ T5166] input: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 341.618096][ T5166] dvb-usb: schedule remote query interval to 100 msecs. [ 341.658963][ T5167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.686795][ T5166] pctv452e: pctv452e_power_ctrl: 0 [ 341.686795][ T5166] [ 341.714645][ T5167] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.739554][ T5166] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 341.777175][ T5167] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.807189][ T5166] dvb-usb: bulk message failed: -22 (4/0) [ 341.814019][ T5139] usb 1-1: USB disconnect, device number 8 [ 341.826157][ T5167] usb 4-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 341.826258][ T5167] usb 4-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 341.826303][ T5167] usb 4-1: config 1 interface 1 has no altsetting 1 [ 341.833132][ T5167] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.833173][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.833203][ T5167] usb 4-1: Product: syz [ 341.833226][ T5167] usb 4-1: Manufacturer: syz [ 341.833251][ T5167] usb 4-1: SerialNumber: syz [ 341.838347][ T5166] dvb-usb: error -22 while querying for an remote control event. [ 341.845917][ T5167] usb 4-1: selecting invalid altsetting 1 [ 342.142318][ T5139] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 342.758744][ T5167] cdc_ncm 4-1:1.0: bind() failure [ 342.871658][ T5167] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 342.873367][ T5167] cdc_ncm 4-1:1.1: bind() failure [ 343.123665][ T5167] usb 4-1: USB disconnect, device number 17 [ 343.677842][ T8034] netlink: 'syz.0.653': attribute type 10 has an invalid length. [ 344.109531][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 346.516833][ T5139] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 346.746717][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 346.786417][ T5139] usb 4-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 346.855869][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.284626][ T5139] usb 4-1: Product: syz [ 348.312628][ T5139] usb 4-1: Manufacturer: syz [ 348.349551][ T5139] usb 4-1: SerialNumber: syz [ 348.445836][ T5139] usb 4-1: config 0 descriptor?? [ 348.636101][ T5139] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 348.656438][ T5139] pctv452e: pctv452e_power_ctrl: 1 [ 348.656438][ T5139] [ 348.685400][ T5139] usb 4-1: selecting invalid altsetting 3 [ 348.713583][ T5139] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 348.713583][ T5139] [ 348.740092][ T8086] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 348.756792][ T5139] dvb-usb: bulk message failed: -22 (5/0) [ 348.791754][ T5139] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.843717][ T5139] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 348.885274][ T5139] usb 4-1: media controller created [ 349.012696][ T5139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.270365][ T5139] DVB: Unable to find symbol stb0899_attach() [ 349.292815][ T5139] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 349.344565][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 349.517199][ T5139] rc_core: IR keymap rc-dib0700-rc5 not found [ 349.541094][ T5139] Registered IR keymap rc-empty [ 349.569373][ T5139] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 349.625547][ T5139] input: PCTV HDTV USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13 [ 349.675055][ T5139] dvb-usb: schedule remote query interval to 100 msecs. [ 349.701618][ T5139] pctv452e: pctv452e_power_ctrl: 0 [ 349.701618][ T5139] [ 349.735455][ T5139] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 349.806825][ T5139] dvb-usb: bulk message failed: -22 (4/0) [ 349.819081][ T5139] dvb-usb: error -22 while querying for an remote control event. [ 349.845046][ T5137] usb 4-1: USB disconnect, device number 18 [ 350.118104][ T5137] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 350.437165][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 350.564981][ T8109] xt_hashlimit: invalid interval [ 351.466880][ T5166] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 351.573583][ T5215] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 351.679218][ T5166] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 351.680706][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.680766][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.680806][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.682165][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.682239][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.682280][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.683829][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.683921][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.683968][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.685387][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.685457][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.685498][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.691016][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.691092][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.691133][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.692853][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.692921][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.692968][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.694448][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.694519][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.694560][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.696771][ T5166] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.696843][ T5166] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.696884][ T5166] usb 3-1: config 0 interface 0 has no altsetting 0 [ 351.702422][ T5166] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.702463][ T5166] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 351.702495][ T5166] usb 3-1: Product: syz [ 351.702518][ T5166] usb 3-1: Manufacturer: syz [ 351.702541][ T5166] usb 3-1: SerialNumber: syz [ 351.719442][ T5166] usb 3-1: config 0 descriptor?? [ 351.789843][ T5215] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.789928][ T5215] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 351.789963][ T5215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.790032][ T5215] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 351.790165][ T5215] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 351.793150][ T5215] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.793193][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.793224][ T5215] usb 5-1: Product: syz [ 351.793247][ T5215] usb 5-1: Manufacturer: syz [ 351.795460][ T5166] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 351.823640][ T5215] cdc_wdm 5-1:1.0: skipping garbage [ 351.823670][ T5215] cdc_wdm 5-1:1.0: skipping garbage [ 351.831581][ T8137] netlink: 'syz.3.680': attribute type 10 has an invalid length. [ 351.852001][ T5215] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 351.852033][ T5215] cdc_wdm 5-1:1.0: Unknown control protocol [ 352.041916][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 352.042545][ T5137] usb 3-1: USB disconnect, device number 14 [ 352.082528][ T5137] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 352.279787][ T29] audit: type=1400 audit(1719960042.701:909): avc: denied { map } for pid=8140 comm="syz.1.681" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 352.625209][ T8153] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 353.181414][ T5137] usb 5-1: USB disconnect, device number 10 [ 353.277265][ T53] Bluetooth: hci0: unexpected subevent 0x01 length: 25 > 18 [ 353.427375][ T29] audit: type=1400 audit(1719960043.901:910): avc: denied { connect } for pid=8161 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.462872][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 353.462911][ T8163] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 353.486586][ T8159] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 354.676812][ T5137] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 355.318317][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 355.347068][ T8181] netlink: 'syz.4.692': attribute type 10 has an invalid length. [ 355.386896][ T5137] usb 2-1: Using ep0 maxpacket: 16 [ 355.445718][ T5137] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 355.478070][ T5137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.486128][ T5137] usb 2-1: Product: syz [ 355.509567][ T5137] usb 2-1: Manufacturer: syz [ 355.514214][ T5137] usb 2-1: SerialNumber: syz [ 355.522052][ T5137] usb 2-1: config 0 descriptor?? [ 355.535725][ T5137] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 355.546004][ T8185] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 355.554599][ T5137] pctv452e: pctv452e_power_ctrl: 1 [ 355.554599][ T5137] [ 355.563193][ T5137] usb 2-1: selecting invalid altsetting 3 [ 355.580163][ T5137] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 355.580163][ T5137] [ 355.609148][ T5137] dvb-usb: bulk message failed: -22 (5/0) [ 355.633574][ T5137] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 355.645086][ T5137] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 355.669542][ T5137] usb 2-1: media controller created [ 355.732726][ T8192] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 355.849244][ T5137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.634364][ T5137] DVB: Unable to find symbol stb0899_attach() [ 357.640934][ T5137] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 357.670738][ T8210] netlink: 100 bytes leftover after parsing attributes in process `syz.4.700'. [ 357.760558][ T5137] rc_core: IR keymap rc-dib0700-rc5 not found [ 357.771207][ T8214] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 357.777769][ T8214] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 357.785741][ T5137] Registered IR keymap rc-empty [ 357.799856][ T5137] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 357.833532][ T5137] input: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 357.849002][ T8214] vhci_hcd vhci_hcd.0: Device attached [ 357.871709][ T5137] dvb-usb: schedule remote query interval to 100 msecs. [ 357.926029][ T5137] pctv452e: pctv452e_power_ctrl: 0 [ 357.926029][ T5137] [ 357.964169][ T5137] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 358.027870][ T5137] dvb-usb: bulk message failed: -22 (4/0) [ 358.070080][ T5137] dvb-usb: error -22 while querying for an remote control event. [ 358.126800][ T5138] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 358.176748][ T5166] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 358.188363][ T5137] usb 2-1: USB disconnect, device number 13 [ 358.439500][ T5166] usb 5-1: Using ep0 maxpacket: 32 [ 358.464148][ T5166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 358.514646][ T5166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 358.555558][ T5166] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 358.591812][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.647541][ T5166] usb 5-1: config 0 descriptor?? [ 358.664693][ T8210] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 358.675274][ T53] Bluetooth: hci4: unexpected subevent 0x01 length: 25 > 18 [ 358.682772][ T53] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 358.702197][ T5137] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 358.702474][ T5166] hub 5-1:0.0: USB hub found [ 358.746412][ T8228] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.920267][ T5166] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 359.213846][ T8215] vhci_hcd: connection reset by peer [ 359.215220][ T5166] usbhid 5-1:0.0: can't add hid device: -71 [ 359.261840][ T1098] vhci_hcd: stop threads [ 359.283925][ T1098] vhci_hcd: release socket [ 359.290005][ T5166] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 359.307272][ T1098] vhci_hcd: disconnect device [ 359.440402][ T5166] usb 5-1: USB disconnect, device number 11 [ 360.232714][ T8247] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 362.297330][ T8267] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 362.961660][ T8273] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.989005][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 363.459101][ T5138] vhci_hcd: vhci_device speed not set [ 364.334232][ T8297] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 365.791679][ T8308] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 369.130663][ T8352] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 370.630157][ T29] audit: type=1400 audit(1719960061.101:911): avc: denied { getopt } for pid=8360 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 370.739794][ T29] audit: type=1326 audit(1719960061.131:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.0.735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9b75f19 code=0x0 [ 370.913516][ T8369] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 375.959473][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.878347][ T8390] fuse: Bad value for 'fd' [ 378.415290][ T8415] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 379.412005][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.418649][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.455944][ T29] audit: type=1400 audit(1719960069.921:913): avc: denied { create } for pid=8414 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 379.610726][ T8418] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 379.615105][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 379.628970][ T29] audit: type=1400 audit(1719960069.981:914): avc: denied { bind } for pid=8414 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.839859][ T29] audit: type=1400 audit(1719960070.291:915): avc: denied { write } for pid=8414 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 379.896909][ T8419] netlink: 'syz.2.749': attribute type 5 has an invalid length. [ 382.235146][ T8462] fuse: Bad value for 'fd' [ 383.729853][ T8475] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 384.150857][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 384.332206][ T8489] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 384.478709][ T8486] VFS: unable to find oldfs superblock on device nullb0 [ 384.600961][ T5166] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 384.836840][ T5166] usb 5-1: Using ep0 maxpacket: 8 [ 384.844336][ T5166] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 384.877387][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.935160][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 384.991792][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 385.037161][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 385.039444][ T5166] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 385.063383][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 385.107644][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 385.155154][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 385.194906][ T5166] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 385.214517][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 385.260677][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 385.287050][ T5166] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 385.338487][ T5166] usb 5-1: string descriptor 0 read error: -22 [ 385.384570][ T5166] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 385.597332][ T5166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.670590][ T8513] netlink: 100 bytes leftover after parsing attributes in process `syz.1.774'. [ 385.680461][ T5166] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 385.722414][ T8514] netlink: 'syz.0.773': attribute type 10 has an invalid length. [ 385.771112][ T8513] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 385.777681][ T8513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.847008][ T8513] vhci_hcd vhci_hcd.0: Device attached [ 386.117300][ T5166] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 386.264509][ T29] audit: type=1326 audit(1719960076.731:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9b75f19 code=0x0 [ 386.340902][ T29] audit: type=1400 audit(1719960076.811:917): avc: denied { accept } for pid=8487 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 386.446764][ T5215] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 386.667013][ T5215] usb 2-1: Using ep0 maxpacket: 32 [ 386.691950][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 386.735829][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 386.749141][ T5215] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 386.763631][ T5215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.053599][ T5215] usb 2-1: config 0 descriptor?? [ 387.067307][ T8513] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 387.087497][ T5215] hub 2-1:0.0: USB hub found [ 387.903704][ T5215] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 388.274543][ T8516] vhci_hcd: connection reset by peer [ 388.322123][ T6848] vhci_hcd: stop threads [ 388.326109][ T5215] usbhid 2-1:0.0: can't add hid device: -71 [ 388.339507][ T6848] vhci_hcd: release socket [ 388.345092][ T5215] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.354637][ T6848] vhci_hcd: disconnect device [ 388.408115][ T5215] usb 2-1: USB disconnect, device number 14 [ 388.973304][ T5167] usb 5-1: USB disconnect, device number 12 [ 389.159980][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 389.398413][ T8549] netlink: 'syz.3.781': attribute type 12 has an invalid length. [ 389.432533][ T8549] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.781'. [ 389.465803][ T8549] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 389.675063][ T8546] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 390.277315][ T8568] netlink: 'syz.3.785': attribute type 10 has an invalid length. [ 390.776721][ T29] audit: type=1326 audit(1719960081.241:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8575 comm="syz.1.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6f1575f19 code=0x0 [ 391.336544][ T5166] vhci_hcd: vhci_device speed not set [ 392.241977][ T8585] netlink: 100 bytes leftover after parsing attributes in process `syz.1.790'. [ 392.423171][ T29] audit: type=1400 audit(1719960082.891:919): avc: denied { connect } for pid=8587 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 392.463054][ T29] audit: type=1400 audit(1719960082.921:920): avc: denied { getopt } for pid=8587 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 392.468336][ T8585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 392.489150][ T8585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 392.536879][ T8585] vhci_hcd vhci_hcd.0: Device attached [ 392.972106][ T5166] usb 11-1: device descriptor read/64, error -110 [ 393.209070][ T5215] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 393.249341][ T8605] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 393.366859][ T5166] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 393.528851][ T5215] usb 2-1: Using ep0 maxpacket: 32 [ 393.540067][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 393.574477][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 395.768939][ T5215] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 395.851320][ T5215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.919839][ T5215] usb 2-1: config 0 descriptor?? [ 395.999846][ T8589] vhci_hcd: connection reset by peer [ 396.017623][ T35] vhci_hcd: stop threads [ 396.021899][ T35] vhci_hcd: release socket [ 396.038539][ T5215] usb 2-1: can't set config #0, error -71 [ 396.091424][ T35] vhci_hcd: disconnect device [ 396.129216][ T5215] usb 2-1: USB disconnect, device number 15 [ 396.152723][ T8618] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 396.332439][ T29] audit: type=1400 audit(1719960086.801:921): avc: denied { shutdown } for pid=8619 comm="syz.0.799" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.525379][ T5166] vhci_hcd: vhci_device speed not set [ 398.813757][ T8663] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 401.758732][ T8684] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 406.062076][ T8720] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 406.999006][ T8733] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 407.037817][ T8735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.829'. [ 407.094197][ T8735] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 408.449500][ T8751] overlayfs: failed to resolve './bus/file0': -2 [ 409.056246][ T8761] netlink: 'syz.3.837': attribute type 10 has an invalid length. [ 409.980203][ T8781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 410.019893][ T8781] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 410.923237][ T5167] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 411.169373][ T5167] usb 5-1: Using ep0 maxpacket: 32 [ 411.196026][ T5167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.239039][ T5167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.281001][ T5167] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.326686][ T5167] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 411.360762][ T5167] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.411719][ T5167] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 411.461825][ T5167] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.481353][ T5167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.496920][ T5167] usb 5-1: Product: syz [ 411.531028][ T5167] usb 5-1: Manufacturer: syz [ 411.558643][ T5167] usb 5-1: SerialNumber: syz [ 411.965289][ T8803] netlink: 'syz.1.849': attribute type 10 has an invalid length. [ 412.038882][ T5167] cdc_ncm 5-1:1.0: bind() failure [ 412.091134][ T5167] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 412.143278][ T5167] cdc_ncm 5-1:1.1: bind() failure [ 412.182359][ T5167] usb 5-1: USB disconnect, device number 13 [ 412.239253][ T6038] udevd[6038]: setting mode of /dev/bus/usb/005/013 to 020664 failed: No such file or directory [ 412.283821][ T6038] udevd[6038]: setting owner of /dev/bus/usb/005/013 to uid=0, gid=0 failed: No such file or directory [ 412.898319][ T8813] ======================================================= [ 412.898319][ T8813] WARNING: The mand mount option has been deprecated and [ 412.898319][ T8813] and is ignored by this kernel. Remove the mand [ 412.898319][ T8813] option from the mount to silence this warning. [ 412.898319][ T8813] ======================================================= [ 413.232676][ T29] audit: type=1400 audit(1719960103.701:922): avc: denied { unmount } for pid=7098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 413.899153][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.857'. [ 413.942784][ T8831] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 414.027900][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 415.426536][ T8850] netlink: 'syz.3.861': attribute type 10 has an invalid length. [ 416.268658][ T8858] netlink: 100 bytes leftover after parsing attributes in process `syz.4.865'. [ 416.301088][ T8858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 416.307664][ T8858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 416.333780][ T8858] vhci_hcd vhci_hcd.0: Device attached [ 416.417145][ T8860] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 2 [ 416.434965][ T62] vhci_hcd: stop threads [ 416.439915][ T62] vhci_hcd: release socket [ 416.444369][ T62] vhci_hcd: disconnect device [ 416.866926][ T5167] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 416.916857][ T5166] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 417.081943][ T5167] usb 5-1: Using ep0 maxpacket: 32 [ 417.104357][ T5167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 417.137348][ T5166] usb 2-1: Using ep0 maxpacket: 16 [ 417.157430][ T5167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 417.181688][ T5166] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 417.203195][ T5167] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 417.212626][ T5166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.238081][ T5167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.262884][ T5166] usb 2-1: Product: syz [ 417.267318][ T5166] usb 2-1: Manufacturer: syz [ 417.271912][ T5166] usb 2-1: SerialNumber: syz [ 417.293678][ T5167] usb 5-1: config 0 descriptor?? [ 417.309546][ T5166] usb 2-1: config 0 descriptor?? [ 417.328520][ T8858] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 417.349285][ T5166] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 417.365969][ T5167] hub 5-1:0.0: USB hub found [ 417.376810][ T5166] pctv452e: pctv452e_power_ctrl: 1 [ 417.376810][ T5166] [ 417.403679][ T5166] usb 2-1: selecting invalid altsetting 3 [ 417.420340][ T5166] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 417.420340][ T5166] [ 417.455336][ T5166] dvb-usb: bulk message failed: -22 (5/0) [ 417.493484][ T5166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.532107][ T5166] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 417.575972][ T5166] usb 2-1: media controller created [ 417.665569][ T5167] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 417.701795][ T5166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.861953][ T5166] DVB: Unable to find symbol stb0899_attach() [ 417.876790][ T5166] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 418.013098][ T5167] hid-generic 0003:046D:C314.0008: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 418.076814][ T5166] rc_core: IR keymap rc-dib0700-rc5 not found [ 418.094807][ T5166] Registered IR keymap rc-empty [ 418.114633][ T5166] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 418.191923][ T5166] input: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 418.265346][ T5166] dvb-usb: schedule remote query interval to 100 msecs. [ 418.430104][ T5166] pctv452e: pctv452e_power_ctrl: 0 [ 418.430104][ T5166] [ 418.456856][ T5166] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 418.538037][ T5166] dvb-usb: bulk message failed: -22 (4/0) [ 418.543835][ T5166] dvb-usb: error -22 while querying for an remote control event. [ 418.707939][ T5166] dvb-usb: bulk message failed: -22 (4/0) [ 418.713753][ T5166] dvb-usb: error -22 while querying for an remote control event. [ 419.004751][ T5166] dvb-usb: bulk message failed: -22 (4/0) [ 419.022144][ T5166] dvb-usb: error -22 while querying for an remote control event. [ 419.032118][ T25] usb 5-1: USB disconnect, device number 14 [ 420.110209][ T5166] dvb-usb: bulk message failed: -22 (4/0) [ 420.123586][ T5166] dvb-usb: error -22 while querying for an remote control event. [ 420.319128][ T5167] dvb-usb: bulk message failed: -22 (4/0) [ 420.342532][ T5167] dvb-usb: error -22 while querying for an remote control event. [ 420.527042][ T5166] dvb-usb: bulk message failed: -22 (4/0) [ 420.532839][ T5166] dvb-usb: error -22 while querying for an remote control event. [ 420.600843][ T5166] usb 2-1: USB disconnect, device number 16 [ 420.710760][ T5167] dvb-usb: bulk message failed: -22 (4/0) [ 420.737815][ T5167] dvb-usb: error -22 while querying for an remote control event. [ 421.050931][ T5166] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 421.927816][ T8902] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 422.558027][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 422.626896][ T29] audit: type=1400 audit(1719960113.071:923): avc: denied { watch watch_reads } for pid=8918 comm="syz.0.881" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 424.546738][ T29] audit: type=1400 audit(1719960115.011:924): avc: denied { write } for pid=8928 comm="syz.4.883" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 427.784373][ T5138] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 429.049912][ T8957] netlink: 'syz.4.889': attribute type 10 has an invalid length. [ 432.626221][ T8984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.929279][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 435.946885][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.956088][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.965088][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.973890][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 435.981475][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.450809][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 436.460808][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.472390][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.485859][ T9000] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 436.489993][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.532018][ T29] audit: type=1326 audit(1719960127.001:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.1.899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6f1575f19 code=0x0 [ 436.555014][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 436.585491][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.037466][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 438.196832][ T53] Bluetooth: hci2: command tx timeout [ 438.674478][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.689918][ T53] Bluetooth: hci6: command tx timeout [ 438.796431][ T9013] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 438.908078][ T9019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.903'. [ 439.004334][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.319414][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.434061][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 439.701086][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.006427][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 440.031938][ T9040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.228848][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 440.277339][ T53] Bluetooth: hci2: command tx timeout [ 440.519772][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.547982][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.769369][ T53] Bluetooth: hci6: command tx timeout [ 441.186441][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.208821][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.220492][ T8992] bridge_slave_0: entered allmulticast mode [ 441.280445][ T8992] bridge_slave_0: entered promiscuous mode [ 441.292726][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.301712][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.312377][ T8992] bridge_slave_1: entered allmulticast mode [ 441.332232][ T8992] bridge_slave_1: entered promiscuous mode [ 441.381961][ T8999] chnl_net:caif_netlink_parms(): no params data found [ 441.474009][ T62] bridge_slave_1: left allmulticast mode [ 441.490169][ T62] bridge_slave_1: left promiscuous mode [ 441.517407][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.555061][ T62] bridge_slave_0: left allmulticast mode [ 441.567788][ T62] bridge_slave_0: left promiscuous mode [ 441.594758][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.123943][ T53] Bluetooth: Frame is too long (len 16, expected len 15) [ 442.686827][ T53] Bluetooth: hci2: command tx timeout [ 442.836760][ T53] Bluetooth: hci6: command tx timeout [ 444.882503][ T53] Bluetooth: hci2: command tx timeout [ 445.261534][ T53] Bluetooth: hci6: command tx timeout [ 445.443707][ T9076] netlink: 100 bytes leftover after parsing attributes in process `syz.4.916'. [ 445.464024][ T9076] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 445.470602][ T9076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.492676][ T9076] vhci_hcd vhci_hcd.0: Device attached [ 445.505033][ T9078] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 2 [ 445.518269][ T3875] vhci_hcd: stop threads [ 445.522625][ T3875] vhci_hcd: release socket [ 445.527586][ T3875] vhci_hcd: disconnect device [ 445.857014][ T5138] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 445.871166][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.887153][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.899835][ T62] bond0 (unregistering): Released all slaves [ 446.021423][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.038418][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.056944][ T5138] usb 5-1: Using ep0 maxpacket: 32 [ 446.099652][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 446.129642][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 446.159672][ T5138] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 446.176844][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.197876][ T5138] usb 5-1: config 0 descriptor?? [ 446.204947][ T9076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.206816][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 446.227586][ T5138] hub 5-1:0.0: USB hub found [ 446.431084][ T5138] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 446.475853][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.507209][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.514636][ T8999] bridge_slave_0: entered allmulticast mode [ 446.542424][ T8999] bridge_slave_0: entered promiscuous mode [ 446.562528][ T8992] team0: Port device team_slave_0 added [ 446.673646][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.693828][ T5138] hid-generic 0003:046D:C314.0009: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 446.698306][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.728776][ T8999] bridge_slave_1: entered allmulticast mode [ 446.770294][ T8999] bridge_slave_1: entered promiscuous mode [ 446.891819][ T8992] team0: Port device team_slave_1 added [ 447.138829][ T5138] usb 5-1: USB disconnect, device number 15 [ 449.896854][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 451.715445][ T62] hsr_slave_0: left promiscuous mode [ 454.076450][ T62] hsr_slave_1: left promiscuous mode [ 454.697310][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.704877][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.747467][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.754931][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.903536][ T62] veth1_macvtap: left promiscuous mode [ 454.928548][ T62] veth0_macvtap: left promiscuous mode [ 454.934323][ T62] veth1_vlan: left promiscuous mode [ 454.959293][ T62] veth0_vlan: left promiscuous mode [ 455.959586][ T62] team0 (unregistering): Port device team_slave_1 removed [ 456.020882][ T62] team0 (unregistering): Port device team_slave_0 removed [ 456.639607][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.671156][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.780628][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.788775][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.837393][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.103107][ T8999] team0: Port device team_slave_0 added [ 457.128697][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.135697][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.226115][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.392301][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.418128][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.428715][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.438351][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.461082][ T8999] team0: Port device team_slave_1 added [ 457.470301][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 457.483969][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.454225][ T8992] hsr_slave_0: entered promiscuous mode [ 458.645909][ T8992] hsr_slave_1: entered promiscuous mode [ 458.679679][ T8992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.766677][ T53] Bluetooth: hci0: command tx timeout [ 459.852943][ T8992] Cannot create hsr debugfs directory [ 460.344540][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.369239][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.396965][ T29] audit: type=1400 audit(1719960150.861:926): avc: denied { getattr } for pid=9168 comm="syz.4.932" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 460.399805][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.459805][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.468417][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.468454][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.477673][ T29] audit: type=1326 audit(1719960150.951:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa163775f19 code=0x7ffc0000 [ 460.478033][ T29] audit: type=1326 audit(1719960150.951:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa163775f19 code=0x7ffc0000 [ 460.653968][ T29] audit: type=1326 audit(1719960151.121:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa163774950 code=0x7ffc0000 [ 460.726780][ T29] audit: type=1326 audit(1719960151.121:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa1637776a7 code=0x7ffc0000 [ 460.791366][ T29] audit: type=1326 audit(1719960151.121:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa163775f19 code=0x7ffc0000 [ 460.827264][ T29] audit: type=1326 audit(1719960151.121:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa1637776a7 code=0x7ffc0000 [ 460.856882][ T29] audit: type=1326 audit(1719960151.121:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa163774c4a code=0x7ffc0000 [ 460.882694][ T29] audit: type=1326 audit(1719960151.121:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa163775f19 code=0x7ffc0000 [ 460.907437][ T29] audit: type=1326 audit(1719960151.121:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa163775f19 code=0x7ffc0000 [ 461.032661][ T8999] hsr_slave_0: entered promiscuous mode [ 461.073651][ T8999] hsr_slave_1: entered promiscuous mode [ 461.147771][ T8999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.167167][ T8999] Cannot create hsr debugfs directory [ 461.270665][ T9189] netlink: 156 bytes leftover after parsing attributes in process `syz.0.937'. [ 461.446969][ T9201] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 461.862288][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.877642][ T53] Bluetooth: hci0: command tx timeout [ 461.906750][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.093478][ T8992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.606831][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.629920][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.800004][ T8992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.905145][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.936253][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.957187][ T53] Bluetooth: hci0: command tx timeout [ 464.100384][ T8992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.175373][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.185860][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.270324][ T8992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.465553][ T9156] chnl_net:caif_netlink_parms(): no params data found [ 464.665401][ T62] bridge_slave_1: left allmulticast mode [ 464.672761][ T62] bridge_slave_1: left promiscuous mode [ 464.686227][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.701278][ T62] bridge_slave_0: left allmulticast mode [ 464.707428][ T62] bridge_slave_0: left promiscuous mode [ 464.713372][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.731395][ T62] bridge_slave_1: left allmulticast mode [ 464.737190][ T62] bridge_slave_1: left promiscuous mode [ 464.743152][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.756161][ T62] bridge_slave_0: left allmulticast mode [ 464.762651][ T62] bridge_slave_0: left promiscuous mode [ 464.781465][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.599798][ T9268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=9268 comm=syz.4.952 [ 466.059338][ T53] Bluetooth: hci0: command tx timeout [ 466.380136][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.393371][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.404864][ T62] bond0 (unregistering): Released all slaves [ 466.564082][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.576881][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.588251][ T62] bond0 (unregistering): Released all slaves [ 466.677121][ T9270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.916771][ T8992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.965442][ T8992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.104876][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.119549][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.133597][ T9156] bridge_slave_0: entered allmulticast mode [ 467.160929][ T9156] bridge_slave_0: entered promiscuous mode [ 467.185656][ T8992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.214242][ T8992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.484611][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.494918][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.511044][ T9156] bridge_slave_1: entered allmulticast mode [ 467.540268][ T9156] bridge_slave_1: entered promiscuous mode [ 467.619384][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.754176][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.171294][ T5215] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 468.242706][ T9156] team0: Port device team_slave_0 added [ 468.263024][ T9156] team0: Port device team_slave_1 added [ 468.406816][ T5215] usb 1-1: Using ep0 maxpacket: 8 [ 468.440678][ T5215] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 468.468200][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.475195][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.502182][ T5215] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.528353][ T5215] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.538842][ T5215] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.549745][ T9156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.561012][ T5215] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.577792][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.584767][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.611815][ T5215] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 468.621160][ T5215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.633066][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.783587][ T62] hsr_slave_0: left promiscuous mode [ 468.790359][ T62] hsr_slave_1: left promiscuous mode [ 468.798199][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.807455][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.815900][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.830339][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.854537][ T5215] usb 1-1: usb_control_msg returned -32 [ 468.860975][ T5215] usbtmc 1-1:16.0: can't read capabilities [ 468.868114][ T62] hsr_slave_0: left promiscuous mode [ 468.877722][ T62] hsr_slave_1: left promiscuous mode [ 468.889738][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.898203][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.907354][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.914958][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.965129][ T62] veth1_macvtap: left promiscuous mode [ 468.971107][ T62] veth0_macvtap: left promiscuous mode [ 468.976916][ T62] veth1_vlan: left promiscuous mode [ 468.983164][ T62] veth0_vlan: left promiscuous mode [ 468.990793][ T62] veth1_macvtap: left promiscuous mode [ 468.996463][ T62] veth0_macvtap: left promiscuous mode [ 469.003405][ T62] veth1_vlan: left promiscuous mode [ 469.009148][ T62] veth0_vlan: left promiscuous mode [ 469.542916][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.959'. [ 469.710492][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 469.710514][ T29] audit: type=1400 audit(1719960160.181:989): avc: denied { read } for pid=9299 comm="syz.4.959" name="/" dev="configfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 469.751864][ T29] audit: type=1400 audit(1719960160.181:990): avc: denied { open } for pid=9299 comm="syz.4.959" path="/sys/kernel/config" dev="configfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 469.810312][ T29] audit: type=1326 audit(1719960160.281:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.4.959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa163775f19 code=0x0 [ 470.097368][ T62] team0 (unregistering): Port device team_slave_1 removed [ 470.169252][ T62] team0 (unregistering): Port device team_slave_0 removed [ 470.857052][ T5138] usb 1-1: USB disconnect, device number 9 [ 471.628932][ T62] team0 (unregistering): Port device team_slave_1 removed [ 471.711942][ T62] team0 (unregistering): Port device team_slave_0 removed [ 472.548945][ T9302] netlink: 'syz.4.959': attribute type 10 has an invalid length. [ 472.564790][ T9302] batman_adv: batadv0: Adding interface: team0 [ 472.571066][ T9302] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.596359][ T9302] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 472.709963][ T9156] hsr_slave_0: entered promiscuous mode [ 472.726932][ T9156] hsr_slave_1: entered promiscuous mode [ 472.750254][ T9156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.759434][ T9156] Cannot create hsr debugfs directory [ 473.259213][ T8999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.321445][ T8999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.406009][ T8999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.533296][ T8999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.639172][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.008830][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.140732][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.148134][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.196796][ T9344] netlink: 100 bytes leftover after parsing attributes in process `syz.4.970'. [ 474.209764][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.217021][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.286705][ T9344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 474.293288][ T9344] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.373950][ T9344] vhci_hcd vhci_hcd.0: Device attached [ 474.396365][ T53] Bluetooth: Frame is too long (len 16, expected len 15) [ 475.231772][ T5167] usb 17-1: new high-speed USB device number 4 using vhci_hcd [ 475.307247][ T5215] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 475.567339][ T5215] usb 5-1: Using ep0 maxpacket: 32 [ 475.589701][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 475.688558][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 475.705700][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.714045][ T5215] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 475.728790][ T5215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.768782][ T5215] usb 5-1: config 0 descriptor?? [ 475.806900][ T9344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.828776][ T5215] hub 5-1:0.0: USB hub found [ 475.945917][ T8999] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.996327][ T9156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.041941][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.049246][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.061697][ T5215] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 476.091051][ T9156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.131784][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.139223][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.168364][ T9156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.240703][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.250596][ T9156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.343928][ T5215] hid-generic 0003:046D:C314.000A: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 476.677699][ T8992] veth0_vlan: entered promiscuous mode [ 476.743470][ T9345] vhci_hcd: connection reset by peer [ 476.748830][ T8992] veth1_vlan: entered promiscuous mode [ 476.759009][ T9] usb 5-1: USB disconnect, device number 16 [ 476.813897][ T1098] vhci_hcd: stop threads [ 476.820010][ T1098] vhci_hcd: release socket [ 476.843437][ T1098] vhci_hcd: disconnect device [ 476.915117][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.034539][ T9383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.076087][ T9386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=9386 comm=syz.0.974 [ 477.080452][ T8992] veth0_macvtap: entered promiscuous mode [ 477.174844][ T9156] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.209391][ T8992] veth1_macvtap: entered promiscuous mode [ 477.313661][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.320930][ T9377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.375303][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.382846][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.483321][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.514871][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.525775][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.551736][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.579711][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.644027][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.674299][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.698894][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.710307][ T8992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.877330][ T8992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.895303][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.000800][ T8992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.012811][ T8992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.032965][ T8992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.064298][ T8992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.482786][ T8999] veth0_vlan: entered promiscuous mode [ 478.600956][ T8999] veth1_vlan: entered promiscuous mode [ 478.640353][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.675522][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.883146][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.900496][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.924803][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.052374][ T8999] veth0_macvtap: entered promiscuous mode [ 479.127087][ T8999] veth1_macvtap: entered promiscuous mode [ 479.364154][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.409090][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.446999][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.478299][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.506970][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.547107][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.609582][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.685031][ T9156] veth0_vlan: entered promiscuous mode [ 479.735527][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.747643][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.758255][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.768873][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.784181][ T8999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.807313][ T8999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.818260][ T9453] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 479.847977][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.884528][ T9156] veth1_vlan: entered promiscuous mode [ 479.922612][ T8999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.963570][ T8999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.266653][ T8999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.275419][ T8999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.467836][ T5167] vhci_hcd: vhci_device speed not set [ 480.488941][ T53] Bluetooth: hci2: unexpected subevent 0x01 length: 25 > 18 [ 480.769593][ T9156] veth0_macvtap: entered promiscuous mode [ 480.880680][ T9156] veth1_macvtap: entered promiscuous mode [ 480.948963][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.991617][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.062544][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.107236][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.132127][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.154544][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.175997][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.212197][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.225493][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.237163][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.290094][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.409074][ T3875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.409908][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.437040][ T3875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.479113][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.510945][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.576920][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.595887][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.612066][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.645023][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.701245][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.737816][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.803822][ T9156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.836668][ T9156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.868459][ T9156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.888853][ T9156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.517061][ T5101] Bluetooth: hci2: command tx timeout [ 482.558021][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.565846][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.806301][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.842754][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.216078][ T9526] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 483.233018][ T5137] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 483.359436][ T5101] Bluetooth: hci6: unexpected subevent 0x01 length: 25 > 18 [ 483.786669][ T5137] usb 3-1: Using ep0 maxpacket: 32 [ 483.921322][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.944454][ T5137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.006745][ T5137] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.051290][ T5137] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 484.061191][ T5137] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.086445][ T5137] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 484.105870][ T5137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.120424][ T5137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.140946][ T5137] usb 3-1: Product: syz [ 484.165751][ T5137] usb 3-1: Manufacturer: syz [ 484.170529][ T5137] usb 3-1: SerialNumber: syz [ 484.289917][ T29] audit: type=1400 audit(1719960174.761:992): avc: denied { append } for pid=9542 comm="syz.3.999" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 484.431962][ T29] audit: type=1400 audit(1719960174.761:993): avc: denied { create } for pid=9542 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 484.745066][ T5137] cdc_ncm 3-1:1.0: bind() failure [ 484.814956][ T5137] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 484.855313][ T5137] cdc_ncm 3-1:1.1: bind() failure [ 484.874225][ T9565] fuse: Unknown parameter 'fd0x0000000000000004' [ 484.928415][ T5137] usb 3-1: USB disconnect, device number 15 [ 485.311924][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 485.396791][ T5101] Bluetooth: hci6: command tx timeout [ 486.180646][ T5101] Bluetooth: Frame is too long (len 16, expected len 15) [ 487.456250][ T29] audit: type=1400 audit(1719960177.921:994): avc: denied { mount } for pid=9611 comm="syz.3.1010" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 489.124492][ T29] audit: type=1400 audit(1719960179.561:995): avc: denied { unmount } for pid=8999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 489.639363][ T9624] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 490.375411][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.804563][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.888623][ T9653] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 491.324236][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.346132][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.392562][ T53] Bluetooth: Frame is too long (len 16, expected len 15) [ 491.427145][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.438914][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.451813][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 491.463313][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.992475][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.080950][ T53] Bluetooth: hci3: command tx timeout [ 494.409685][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.156716][ T53] Bluetooth: hci3: command tx timeout [ 496.738182][ T61] bridge_slave_1: left allmulticast mode [ 496.743903][ T61] bridge_slave_1: left promiscuous mode [ 496.804634][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.861043][ T61] bridge_slave_0: left allmulticast mode [ 496.896366][ T61] bridge_slave_0: left promiscuous mode [ 496.907763][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.093067][ T53] Bluetooth: Frame is too long (len 16, expected len 15) [ 498.197378][ T53] Bluetooth: hci3: command tx timeout [ 499.120658][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.149461][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.191948][ T61] bond0 (unregistering): Released all slaves [ 499.271188][ T9707] batadv0: entered promiscuous mode [ 499.298894][ T9707] batadv_slave_0: entered promiscuous mode [ 499.355455][ T9707] batadv_slave_0: left promiscuous mode [ 499.398175][ T9707] batadv0: left promiscuous mode [ 499.455978][ T9729] usb usb9: usbfs: process 9729 (syz.2.1040) did not claim interface 0 before use [ 500.322839][ T53] Bluetooth: hci3: command tx timeout [ 501.366905][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 501.972095][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.981353][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.768110][ T5136] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 503.667371][ T5136] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.687894][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.720251][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.740096][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.749257][ T5136] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.767368][ T9660] bridge_slave_0: entered allmulticast mode [ 503.775916][ T9660] bridge_slave_0: entered promiscuous mode [ 503.782468][ T5136] usb 5-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 503.811482][ T5136] usb 5-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 503.856903][ T5136] usb 5-1: config 1 interface 1 has no altsetting 1 [ 503.867759][ T61] hsr_slave_0: left promiscuous mode [ 503.885146][ T5136] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.898689][ T61] hsr_slave_1: left promiscuous mode [ 503.909020][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.919864][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.939183][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.966673][ T5136] usb 5-1: Product: syz [ 503.970894][ T5136] usb 5-1: Manufacturer: syz [ 503.975525][ T5136] usb 5-1: SerialNumber: syz [ 503.982135][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.003179][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.023433][ T5136] usb 5-1: selecting invalid altsetting 1 [ 504.100844][ T61] veth1_macvtap: left promiscuous mode [ 504.106536][ T61] veth0_macvtap: left promiscuous mode [ 504.128420][ T61] veth1_vlan: left promiscuous mode [ 504.133911][ T61] veth0_vlan: left promiscuous mode [ 504.222829][ T5136] cdc_ncm 5-1:1.0: bind() failure [ 504.289001][ T5136] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 504.296062][ T5136] cdc_ncm 5-1:1.1: bind() failure [ 504.369773][ T5136] usb 5-1: USB disconnect, device number 17 [ 504.401350][ T5101] Bluetooth: Frame is too long (len 16, expected len 15) [ 505.288205][ T9789] netlink: 8900 bytes leftover after parsing attributes in process `syz.1.1050'. [ 506.078150][ T5138] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 506.375299][ T5138] usb 5-1: Using ep0 maxpacket: 16 [ 507.074649][ T5138] usb 5-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 507.087240][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.106645][ T5138] usb 5-1: Product: syz [ 507.110878][ T5138] usb 5-1: Manufacturer: syz [ 507.125709][ T5138] usb 5-1: SerialNumber: syz [ 507.170030][ T5138] usb 5-1: config 0 descriptor?? [ 507.189417][ T5138] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 507.195952][ T5138] pctv452e: pctv452e_power_ctrl: 1 [ 507.195952][ T5138] [ 507.226992][ T5138] usb 5-1: selecting invalid altsetting 3 [ 507.239593][ T5138] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 507.239593][ T5138] [ 507.280066][ T5138] dvb-usb: bulk message failed: -22 (5/0) [ 507.308226][ T5138] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.327778][ T5138] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 507.345767][ T5138] usb 5-1: media controller created [ 507.689326][ T5138] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.328466][ T5138] DVB: Unable to find symbol stb0899_attach() [ 508.334594][ T5138] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 511.147097][ T5138] rc_core: IR keymap rc-dib0700-rc5 not found [ 511.153231][ T5138] Registered IR keymap rc-empty [ 511.177292][ T61] team0 (unregistering): Port device team_slave_1 removed [ 511.188136][ T5138] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 511.199383][ T5138] input: PCTV HDTV USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input16 [ 511.236493][ T5138] dvb-usb: schedule remote query interval to 100 msecs. [ 511.251538][ T5138] pctv452e: pctv452e_power_ctrl: 0 [ 511.251538][ T5138] [ 511.266674][ T5138] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 511.517803][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 511.524281][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 511.526467][ T61] team0 (unregistering): Port device team_slave_0 removed [ 512.224086][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 512.240348][ T25] dvb-usb: error -22 while querying for an remote control event. [ 512.387383][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 512.396863][ T25] dvb-usb: error -22 while querying for an remote control event. [ 512.508671][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 512.527453][ T25] dvb-usb: error -22 while querying for an remote control event. [ 512.653640][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 512.676672][ T25] dvb-usb: error -22 while querying for an remote control event. [ 512.825016][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 512.831299][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 512.960866][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 512.984124][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 513.158126][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 513.163928][ T25] dvb-usb: error -22 while querying for an remote control event. [ 513.318621][ T5139] dvb-usb: bulk message failed: -22 (4/0) [ 513.334725][ T5139] dvb-usb: error -22 while querying for an remote control event. [ 513.469381][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 513.503213][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 513.625459][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 513.647047][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 513.761637][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 513.777511][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 513.888174][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 513.904287][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 513.996108][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.008671][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.032548][ T5101] Bluetooth: hci2: unexpected subevent 0x01 length: 25 > 18 [ 514.040221][ T5101] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 514.056795][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 514.062655][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 514.108672][ T9660] bridge_slave_1: entered allmulticast mode [ 514.120646][ T9660] bridge_slave_1: entered promiscuous mode [ 514.197241][ T5138] dvb-usb: bulk message failed: -22 (4/0) [ 514.203350][ T5138] dvb-usb: error -22 while querying for an remote control event. [ 514.237477][ T9847] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 514.337522][ T5137] dvb-usb: bulk message failed: -22 (4/0) [ 514.343285][ T5137] dvb-usb: error -22 while querying for an remote control event. [ 514.393302][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.479288][ T5137] dvb-usb: bulk message failed: -22 (4/0) [ 514.486456][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.515193][ T5137] dvb-usb: error -22 while querying for an remote control event. [ 514.532035][ T5138] usb 5-1: USB disconnect, device number 18 [ 514.796488][ T5138] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 515.470837][ T9660] team0: Port device team_slave_0 added [ 518.088375][ T9660] team0: Port device team_slave_1 added [ 518.196682][ T29] audit: type=1400 audit(1719960208.651:996): avc: denied { ioctl } for pid=9870 comm="syz.4.1071" path="socket:[26892]" dev="sockfs" ino=26892 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 518.536961][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.544058][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.614053][ T29] audit: type=1400 audit(1719960209.081:997): avc: denied { bind } for pid=9878 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 518.647511][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.729077][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.736075][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.738595][ T9885] mmap: syz.4.1074 (9885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 518.804425][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.028808][ T9660] hsr_slave_0: entered promiscuous mode [ 519.073076][ T9660] hsr_slave_1: entered promiscuous mode [ 519.099814][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.129763][ T9660] Cannot create hsr debugfs directory [ 519.460053][ T9418] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 519.676953][ T9418] usb 3-1: Using ep0 maxpacket: 16 [ 519.700579][ T9418] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 519.729031][ T9418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.758999][ T9418] usb 3-1: Product: syz [ 519.778615][ T9418] usb 3-1: Manufacturer: syz [ 519.796335][ T9418] usb 3-1: SerialNumber: syz [ 519.823811][ T9418] usb 3-1: config 0 descriptor?? [ 519.850150][ T9418] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 519.865308][ T9418] pctv452e: pctv452e_power_ctrl: 1 [ 519.865308][ T9418] [ 519.886896][ T9418] usb 3-1: selecting invalid altsetting 3 [ 519.913009][ T9418] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 519.913009][ T9418] [ 519.956610][ T9418] dvb-usb: bulk message failed: -22 (5/0) [ 520.010802][ T9418] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.041607][ T9418] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 520.076351][ T9418] usb 3-1: media controller created [ 520.201213][ T9418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.278236][ T9916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.486415][ T9418] DVB: Unable to find symbol stb0899_attach() [ 520.524026][ T9418] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 520.679664][ T9660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.696706][ T9418] rc_core: IR keymap rc-dib0700-rc5 not found [ 520.712121][ T9418] Registered IR keymap rc-empty [ 520.748368][ T9418] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 520.774088][ T9660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.791989][ T9418] input: PCTV HDTV USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 520.818196][ T9660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.831426][ T9418] dvb-usb: schedule remote query interval to 100 msecs. [ 520.851072][ T9418] pctv452e: pctv452e_power_ctrl: 0 [ 520.851072][ T9418] [ 520.877844][ T9660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 520.900649][ T9418] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 520.956674][ T9418] dvb-usb: bulk message failed: -22 (4/0) [ 520.983450][ T9418] dvb-usb: error -22 while querying for an remote control event. [ 521.143669][ T9418] dvb-usb: bulk message failed: -22 (4/0) [ 521.197105][ T9418] dvb-usb: error -22 while querying for an remote control event. [ 521.334257][ T9418] usb 3-1: USB disconnect, device number 16 [ 521.529503][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.580890][ T9418] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 521.681626][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.752778][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.760075][ T9377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.845964][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.853246][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.641619][ T9963] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1088'. [ 522.772365][ T9963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 522.778959][ T9963] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.861171][ T9963] vhci_hcd vhci_hcd.0: Device attached [ 523.053463][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.158125][ T5167] usb 13-1: new high-speed USB device number 8 using vhci_hcd [ 523.227074][ T9377] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 523.237603][ T9660] veth0_vlan: entered promiscuous mode [ 523.323910][ T9660] veth1_vlan: entered promiscuous mode [ 523.465661][ T9377] usb 3-1: Using ep0 maxpacket: 32 [ 523.472381][ T9660] veth0_macvtap: entered promiscuous mode [ 523.484645][ T9377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 523.516801][ T9377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 523.528825][ T9660] veth1_macvtap: entered promiscuous mode [ 523.551989][ T9377] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 523.586621][ T9377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.628239][ T9377] usb 3-1: config 0 descriptor?? [ 523.634333][ T9971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.656997][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.689055][ T9377] hub 3-1:0.0: USB hub found [ 523.706594][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.726052][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.776630][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.812630][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.843938][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.874432][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.900656][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.915915][ T9377] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 523.927985][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.021579][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.065394][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.118140][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.156982][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.176327][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.196681][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.205556][ T9377] hid-generic 0003:046D:C314.000B: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 524.237352][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.271352][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.325300][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.351488][ T9995] netlink: 'syz.1.1091': attribute type 10 has an invalid length. [ 524.387244][ T9660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.424263][ T9660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.475444][ T9660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.514624][ T9660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.569079][ T9377] usb 3-1: USB disconnect, device number 17 [ 524.596491][ T9967] vhci_hcd: connection reset by peer [ 524.607811][ T62] vhci_hcd: stop threads [ 524.612094][ T62] vhci_hcd: release socket [ 524.636762][ T62] vhci_hcd: disconnect device [ 525.043809][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.076876][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.255570][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.282126][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.467152][T10019] input: syz1 as /devices/virtual/input/input18 [ 525.528967][T10022] [ 525.531299][T10022] ====================================================== [ 525.538332][T10022] WARNING: possible circular locking dependency detected [ 525.545328][T10022] 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 Not tainted [ 525.552420][T10022] ------------------------------------------------------ [ 525.559420][T10022] syz.2.1097/10022 is trying to acquire lock: [ 525.565480][T10022] ffff88802d2ab870 (&newdev->mutex){+.+.}-{3:3}, at: uinput_request_submit.part.0+0x25/0x2e0 [ 525.575650][T10022] [ 525.575650][T10022] but task is already holding lock: [ 525.582996][T10022] ffff888060b9c0b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x1dd/0xbf0 [ 525.586612][ T5137] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 525.591766][T10022] [ 525.591766][T10022] which lock already depends on the new lock. [ 525.591766][T10022] [ 525.591779][T10022] [ 525.591779][T10022] the existing dependency chain (in reverse order) is: [ 525.591787][T10022] [ 525.591787][T10022] -> #3 (&ff->mutex){+.+.}-{3:3}: [ 525.626244][T10022] __mutex_lock+0x175/0x9c0 [ 525.631266][T10022] input_ff_flush+0x63/0x170 [ 525.636365][T10022] uinput_dev_flush+0x2a/0x40 [ 525.641548][T10022] input_flush_device+0x97/0xd0 [ 525.646908][T10022] evdev_release+0x343/0x400 [ 525.652010][T10022] __fput+0x408/0xbb0 [ 525.656516][T10022] __fput_sync+0x47/0x50 [ 525.661281][T10022] __x64_sys_close+0x86/0x100 [ 525.666465][T10022] do_syscall_64+0xcd/0x250 [ 525.671481][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.677909][T10022] [ 525.677909][T10022] -> #2 (&dev->mutex#2){+.+.}-{3:3}: [ 525.685382][T10022] __mutex_lock+0x175/0x9c0 [ 525.690406][T10022] input_register_handle+0x71/0x4e0 [ 525.696121][T10022] kbd_connect+0xca/0x160 [ 525.700965][T10022] input_attach_handler.isra.0+0x181/0x260 [ 525.707311][T10022] input_register_device+0xb22/0x1140 [ 525.713206][T10022] acpi_button_add+0x51b/0xb80 [ 525.718522][T10022] acpi_device_probe+0xc6/0x330 [ 525.723914][T10022] really_probe+0x23e/0xa90 [ 525.728973][T10022] __driver_probe_device+0x1de/0x440 [ 525.734803][T10022] driver_probe_device+0x4c/0x1b0 [ 525.740341][T10022] __driver_attach+0x283/0x580 [ 525.745617][T10022] bus_for_each_dev+0x13c/0x1d0 [ 525.750973][T10022] bus_add_driver+0x2e9/0x690 [ 525.756165][T10022] driver_register+0x15c/0x4b0 [ 525.761453][T10022] __acpi_bus_register_driver+0xdf/0x130 [ 525.767607][T10022] acpi_button_driver_init+0x82/0x110 [ 525.773493][T10022] do_one_initcall+0x128/0x700 [ 525.778777][T10022] kernel_init_freeable+0x69d/0xca0 [ 525.784505][T10022] kernel_init+0x1c/0x2b0 [ 525.789361][T10022] ret_from_fork+0x45/0x80 [ 525.794323][T10022] ret_from_fork_asm+0x1a/0x30 [ 525.799606][T10022] [ 525.799606][T10022] -> #1 (input_mutex){+.+.}-{3:3}: [ 525.806891][T10022] __mutex_lock+0x175/0x9c0 [ 525.811908][T10022] input_register_device+0xa2b/0x1140 [ 525.817816][T10022] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 525.824436][T10022] __x64_sys_ioctl+0x193/0x220 [ 525.829760][T10022] do_syscall_64+0xcd/0x250 [ 525.834817][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.841233][T10022] [ 525.841233][T10022] -> #0 (&newdev->mutex){+.+.}-{3:3}: [ 525.848778][T10022] __lock_acquire+0x2478/0x3b30 [ 525.854150][T10022] lock_acquire+0x1b1/0x560 [ 525.859170][T10022] __mutex_lock+0x175/0x9c0 [ 525.864187][T10022] uinput_request_submit.part.0+0x25/0x2e0 [ 525.870518][T10022] uinput_dev_upload_effect+0x175/0x1f0 [ 525.876599][T10022] input_ff_upload+0x55b/0xbf0 [ 525.881895][T10022] evdev_do_ioctl+0xf40/0x1ae0 [ 525.887180][T10022] evdev_ioctl+0x170/0x1a0 [ 525.892111][T10022] __x64_sys_ioctl+0x193/0x220 [ 525.897387][T10022] do_syscall_64+0xcd/0x250 [ 525.902401][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.908809][T10022] [ 525.908809][T10022] other info that might help us debug this: [ 525.908809][T10022] [ 525.919018][T10022] Chain exists of: [ 525.919018][T10022] &newdev->mutex --> &dev->mutex#2 --> &ff->mutex [ 525.919018][T10022] [ 525.931352][T10022] Possible unsafe locking scenario: [ 525.931352][T10022] [ 525.938795][T10022] CPU0 CPU1 [ 525.944169][T10022] ---- ---- [ 525.949539][T10022] lock(&ff->mutex); [ 525.953536][T10022] lock(&dev->mutex#2); [ 525.960326][T10022] lock(&ff->mutex); [ 525.966845][T10022] lock(&newdev->mutex); [ 525.971180][T10022] [ 525.971180][T10022] *** DEADLOCK *** [ 525.971180][T10022] [ 525.979313][T10022] 2 locks held by syz.2.1097/10022: [ 525.984500][T10022] #0: ffff88807fa1b110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_ioctl+0x86/0x1a0 [ 525.993584][T10022] #1: ffff888060b9c0b0 (&ff->mutex){+.+.}-{3:3}, at: input_ff_upload+0x1dd/0xbf0 [ 526.002831][T10022] [ 526.002831][T10022] stack backtrace: [ 526.008708][T10022] CPU: 0 PID: 10022 Comm: syz.2.1097 Not tainted 6.10.0-rc6-syzkaller-00051-g1dfe225e9af5 #0 [ 526.018874][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 526.028942][T10022] Call Trace: [ 526.032219][T10022] [ 526.035147][T10022] dump_stack_lvl+0x116/0x1f0 [ 526.039922][T10022] check_noncircular+0x31a/0x400 [ 526.044875][T10022] ? __pfx_check_noncircular+0x10/0x10 [ 526.050366][T10022] ? stack_trace_save+0x95/0xd0 [ 526.055229][T10022] ? lockdep_lock+0xc6/0x200 [ 526.059825][T10022] ? __pfx_lockdep_lock+0x10/0x10 [ 526.064862][T10022] __lock_acquire+0x2478/0x3b30 [ 526.069732][T10022] ? __pfx___lock_acquire+0x10/0x10 [ 526.074945][T10022] lock_acquire+0x1b1/0x560 [ 526.079463][T10022] ? uinput_request_submit.part.0+0x25/0x2e0 [ 526.085446][T10022] ? __pfx_lock_acquire+0x10/0x10 [ 526.090490][T10022] ? __pfx___might_resched+0x10/0x10 [ 526.095780][T10022] ? __pfx_lock_release+0x10/0x10 [ 526.100822][T10022] __mutex_lock+0x175/0x9c0 [ 526.105376][T10022] ? uinput_request_submit.part.0+0x25/0x2e0 [ 526.111381][T10022] ? __pfx___might_resched+0x10/0x10 [ 526.116671][T10022] ? uinput_request_submit.part.0+0x25/0x2e0 [ 526.122654][T10022] ? __pfx___mutex_lock+0x10/0x10 [ 526.127686][T10022] ? __pfx_uinput_request_reserve_slot+0x10/0x10 [ 526.134015][T10022] ? __pfx___mutex_trylock_common+0x10/0x10 [ 526.139932][T10022] ? uinput_request_submit.part.0+0x25/0x2e0 [ 526.145914][T10022] uinput_request_submit.part.0+0x25/0x2e0 [ 526.151724][T10022] uinput_dev_upload_effect+0x175/0x1f0 [ 526.157276][T10022] ? __pfx_uinput_dev_upload_effect+0x10/0x10 [ 526.163353][T10022] ? __might_fault+0xe3/0x190 [ 526.168040][T10022] input_ff_upload+0x55b/0xbf0 [ 526.172813][T10022] evdev_do_ioctl+0xf40/0x1ae0 [ 526.177590][T10022] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 526.182801][T10022] ? evdev_ioctl+0x86/0x1a0 [ 526.187320][T10022] ? __pfx_evdev_ioctl+0x10/0x10 [ 526.192271][T10022] evdev_ioctl+0x170/0x1a0 [ 526.196710][T10022] ? __pfx_evdev_ioctl+0x10/0x10 [ 526.201663][T10022] __x64_sys_ioctl+0x193/0x220 [ 526.206436][T10022] do_syscall_64+0xcd/0x250 [ 526.210956][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.216866][T10022] RIP: 0033:0x7f3e48d75f19 [ 526.221306][T10022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.240918][T10022] RSP: 002b:00007f3e49b3d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.249334][T10022] RAX: ffffffffffffffda RBX: 00007f3e48f04038 RCX: 00007f3e48d75f19 [ 526.257305][T10022] RDX: 0000000020000340 RSI: 0000000040304580 RDI: 0000000000000007 [ 526.265282][T10022] RBP: 00007f3e48de4bcd R08: 0000000000000000 R09: 0000000000000000 [ 526.273251][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 526.281224][T10022] R13: 000000000000006e R14: 00007f3e48f04038 R15: 00007ffdc0cdc828 [ 526.289224][T10022]