last executing test programs: 28m18.096893694s ago: executing program 32 (id=85): r0 = syz_io_uring_setup(0x34b5, &(0x7f0000000540)={0x0, 0x2730, 0x0, 0x201, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000005c0)={{&(0x7f0000d1e000/0x4000)=nil, 0x4000}, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffe}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="e30b83b0d58ff2cd81c649f2a46f1da8733f50d24631a3d14ae40677978feb37ff51e2a40483e005aa404bc59951f53932b3c4ece4f31ecd541b1958cc67bf8e59c2c4795e930a015c87c8c22c6acde554bb93248ab7df4d5d5f0b73", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) 26m32.941462832s ago: executing program 33 (id=206): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c0007800800064000000040050005000200000005"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r2, 0x0, 0x0, 0x20000044) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16m33.996691597s ago: executing program 34 (id=985): socket$inet(0x2, 0x3, 0x2) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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"/4094, 0xffe}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001a40)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503) r2 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001b80)={{r2, &(0x7f0000000300)='\x95\x99\x1d\xb6N\x91\\\x8b\x00\x00\x00_lis\x8d\x0f\xd0\x1f\xe9\xc1/\xf9\xe6\xb4\x00', 0x2000, &(0x7f0000001c00)={@align=0x5, {0x53, 0xc3, 0x100, 0x7fffffffffffffff}}, 0xef95e4c, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000003c0)=0x7}, 0x5, &(0x7f0000001c40)=[{0x1, 0x3, &(0x7f0000000480)='/dev/cpu/#/msr\x00', &(0x7f00000004c0), 0x0, 0x19}, {0x3, 0x5f1, &(0x7f00000005c0)='%\x00', &(0x7f0000000600)="41e3a84cb33bb469520e007169d9f78bc9d6b76526f1d5bdb1c062691ddaaee8e0674b99e1bbbac6b866d3f39e5e9c08382b88072eb447c791fc408cf4dc1b4ac0d0e793c59a5d893baf15db650423590fc48889d28983a0adb6f11d9e60c18db13714a3400babb0c39854c09c0e560b7a0aba5e0e180b138af35f7a65700610739596aa4fa38a2b7faf63c0832b597d595fef3576", 0x95}, {0x3, 0x1, &(0x7f00000007c0)='[{-\x00', &(0x7f0000000800)="906852c43eea031cb5b7f36b2bf715579ee2d716bd82aa068b5412e8ea46313fe4f1633a14df04f47361be612835594ac3b5bbdecbb8da6a110236949b5a706c2cbb78196f223f46a92e89629fe6ea38ae987dc5969b9835bb0949a55c24d93a2051f46d5435456b6229888f6a9f2a2b56b6d63a18ab0347bd80f4245338af031133d1f550275beee44a0532055f25ccab413f55eb9f648641374e3febf5a2cb279df28528a2e0729d", 0xa9, 0x8}, {0x1, 0x1, &(0x7f0000000900)='/dev/nullb0\x00', 0x0, 0x0, 0x1a}, {0x4, 0x10, 0x0, 0x0, 0x0, 0x1a}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000019c0)={0xc}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001980)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000008002000000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) 13m5.464188065s ago: executing program 35 (id=1321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 10m54.512833849s ago: executing program 36 (id=2320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000480)={0x0, 0x55, &(0x7f0000000440)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x440c4) 9m9.09640524s ago: executing program 0 (id=3180): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m7.931830145s ago: executing program 0 (id=3184): r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x0, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 9m7.829812964s ago: executing program 0 (id=3186): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000776000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0xc000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) syz_emit_ethernet(0x110d, &(0x7f0000000000)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, 0x0}, 0x94) 9m6.312218887s ago: executing program 0 (id=3200): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delqdisc={0x40, 0x25, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {0xe, 0x8}, {0xa, 0x8}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0xf8, 0x8}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4d884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10002, 0x1000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x1, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 9m3.883395619s ago: executing program 0 (id=3209): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_stats}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x80, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000001}, 0x200040c4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) shutdown(0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{0x0}], 0x1) 9m3.603489055s ago: executing program 0 (id=3212): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @raw_data="2fbf5894c7be4437db72c2ddf4a7e4856f8e1029b54de5af1f76d153e4b7d987dc87b80fbfdaff0ef97d68e1331a1b6bdd41d9678ece5e2bdb665299f86db2a0a3191e9772a0b52c210e189f8af5e511ff4db387e1e5cb9f98d4cc8582905a5b970d3c96a7573931cebba19ebef99102b9a2167188d33a3c5899a089df98c6a886fb5797bf6a95f9dc34c6421ac5194636e8a92f8793860c7e7777c49489713681f8f6c8e5cf0f8cf85b4448026b19757c60f36ad09733a2eff36d584699fa5cd51a5ca02ec46849"}, 0x6}) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f000500000000000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) close(0x3) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x100) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSBRK(r6, 0x5427) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x8001, @rand_addr=0x64010101}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) close(0xffffffffffffffff) 8m48.567871234s ago: executing program 37 (id=3212): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @raw_data="2fbf5894c7be4437db72c2ddf4a7e4856f8e1029b54de5af1f76d153e4b7d987dc87b80fbfdaff0ef97d68e1331a1b6bdd41d9678ece5e2bdb665299f86db2a0a3191e9772a0b52c210e189f8af5e511ff4db387e1e5cb9f98d4cc8582905a5b970d3c96a7573931cebba19ebef99102b9a2167188d33a3c5899a089df98c6a886fb5797bf6a95f9dc34c6421ac5194636e8a92f8793860c7e7777c49489713681f8f6c8e5cf0f8cf85b4448026b19757c60f36ad09733a2eff36d584699fa5cd51a5ca02ec46849"}, 0x6}) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = epoll_create(0x5) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x1}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f000500000000000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) close(0x3) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x100) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSBRK(r6, 0x5427) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x8001, @rand_addr=0x64010101}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) close(0xffffffffffffffff) 8m35.557589876s ago: executing program 4 (id=3361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 8m35.205921606s ago: executing program 4 (id=3363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff020000000000000000000104000001ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000006000000000004003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500000000000000000000000000000000010000000032"], 0xfc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 8m34.241138467s ago: executing program 4 (id=3366): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20841, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0xfffffff7, 0x1, 0x15, "00f792e2b4ffff63040000000900"}) r1 = syz_open_pts(r0, 0x80) dup3(r1, r0, 0x80000) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 8m32.999728109s ago: executing program 4 (id=3371): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) r3 = dup2(r2, r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) syz_usbip_server_init(0x6) 8m32.178739009s ago: executing program 4 (id=3374): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 8m31.899435598s ago: executing program 4 (id=3375): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000340), 0xb47, r4}, 0x38) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1, 0x4}}) 8m16.792737888s ago: executing program 38 (id=3375): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000340), 0xb47, r4}, 0x38) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1, 0x4}}) 6m44.586458913s ago: executing program 7 (id=3936): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x4, 0x2000) ioctl$VIDIOC_ENUMSTD(r1, 0xc0405619, &(0x7f0000000180)={0x7, 0x0, "2e5c2828ebda05a455939e92fdc463d8545ad0e8b3718167", {0x8, 0x3}, 0x5}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) 6m42.648179141s ago: executing program 7 (id=3950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80800) 6m41.893025963s ago: executing program 7 (id=3954): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m39.410636607s ago: executing program 7 (id=3971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 6m39.354237001s ago: executing program 7 (id=3973): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x2000006, 0x4010, 0xffffffffffffffff, 0x20000000) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r7 = mmap$IORING_OFF_SQES(0x0, 0xa03f, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, r7, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x45, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x2, 0x1, {0x0, r8}}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r10, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 6m35.919783656s ago: executing program 7 (id=3993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3fff, 0x2714, @dev={0xfe, 0x80, '\x00', 0x14}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) 6m20.473533089s ago: executing program 39 (id=3993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3fff, 0x2714, @dev={0xfe, 0x80, '\x00', 0x14}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) 5m39.387063262s ago: executing program 9 (id=4473): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5m39.256331384s ago: executing program 9 (id=4475): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 5m38.862479827s ago: executing program 9 (id=4480): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x13, 0x0, "e83ae75240d9d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0208df8e61740b7cf2d4e499d586ed9fcf0fa0ce1f930c3079cffcfd0000000000db7291f100"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5m37.479311271s ago: executing program 9 (id=4489): shmctl$IPC_RMID(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002ac0)={{0x1, 0x1, 0x53, 0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r3, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) 5m36.994944107s ago: executing program 9 (id=4495): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m36.772000198s ago: executing program 9 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 5m21.568861033s ago: executing program 40 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m43.900887915s ago: executing program 2 (id=6035): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0xd) 2m43.726899914s ago: executing program 2 (id=6037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x20240, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m43.651631748s ago: executing program 2 (id=6038): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) syz_io_uring_setup(0x5103, &(0x7f0000000180)={0x0, 0x1370, 0x11000, 0x2, 0x2cf}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2m43.331047063s ago: executing program 2 (id=6045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000030c0)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000040a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000fdffffffff32000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000025a00000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a01a00c72f6c90d3c3cca2d9a9321c26253647d0fb7680f5d51adadcb5d1725986bc26456f7fa3781bb073bcfcf8fda120b3a11aea9d26d96fa638ed4074d1b53f9ae3571995f1"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) 2m43.163694057s ago: executing program 2 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2m41.655877955s ago: executing program 2 (id=6055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) 2m26.571852143s ago: executing program 41 (id=6055): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) 10.342784409s ago: executing program 5 (id=6713): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 9.604244617s ago: executing program 5 (id=6717): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 7.217246504s ago: executing program 1 (id=6726): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x41000, 0xeeef0000, {}, 0x0, 0x5}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.929098557s ago: executing program 1 (id=6727): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(0xffffffffffffffff, 0xea283) dup3(r2, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 6.925154423s ago: executing program 5 (id=6728): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.541624494s ago: executing program 5 (id=6730): clock_gettime(0x0, &(0x7f0000001180)) openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6.31926052s ago: executing program 6 (id=6731): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) 5.363268165s ago: executing program 5 (id=6737): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x5, 0xc01) r0 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) 5.200127985s ago: executing program 6 (id=6740): capset(0x0, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) 3.611560475s ago: executing program 6 (id=6742): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df"], &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x80186803, 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x7, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{}, {0x8, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0xf, 0x3}, {0x5, 0x2}, {}, {0x7, 0x2}, {0xf, 0x3}, {}]}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/238, 0x87, 0xee, 0x0, 0x1}, 0x28) chroot(0x0) 3.596057496s ago: executing program 5 (id=6743): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00') lseek(r0, 0x8020100001, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x0, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000001880), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0x1000001ff, 0xffffffff], [0xffffff00], 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x6, 0x6, 0x48}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x9}}}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0xff000000, 0xffffff00], [0xff, 0xff000000, 0xffffff00, 0xffffffff], 'hsr0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"e7fd", 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0x9e3}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'wg2\x00', 'veth1_to_bridge\x00', 0x51, 0x3, 0xdf, 0x5, 0x7, 0x1, {0x6}, {0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x4, 0x1}, {0xffffffffffffffff, 0x2, 0x1}, 0xffff, 0x425}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) 3.183186234s ago: executing program 3 (id=6745): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/kvm/exits\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 2.466657055s ago: executing program 3 (id=6746): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2.382646597s ago: executing program 1 (id=6747): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') 2.240872559s ago: executing program 8 (id=6748): clock_gettime(0x0, &(0x7f0000001180)) openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.205095743s ago: executing program 1 (id=6749): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="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", 0x141}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="d26747a8f1e9c7a1abe36f42c0c6437ac898908cc1384459305d27e2a02c0a6fd0832a3a9ac3b0740ddd69", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)="5691940c3bbc52b204c0c067dd112fda372a7168cc84dca7cddeef2e38a3ec1afc1bdc2674a408f0d8ccb201cc0981aa", 0x30}, {&(0x7f00000013c0)="fe2e9ea8218d922c3ae9b4277de295548dd3e1039466780f7872c3ce06cdea39e88d6c6dec36d00eae921b66c110657fc12b59c8240a5b1de4d4c46b80e89ffe39908bca4d6bb4def7511f4b5d169cb76e68562eb7ed9b8aca12590e193f068f4991b63f0068d4ceb90ee76bb921429ec14361025d19d1028cdbe7817dcef2cc8a0d95060df8ff21afc328f0e82c10f941509e689c9be18d5b7943cc489b346203a4702507dfbd8f015d6eeea1d35eb6aaef6cfcf0f1fc580a8bb121144e00d529b9f780e630369b847af810ba3111d93e1390294ebea7beac088f2f3fcb231f09c348fabae7474b95a4c77aeafa592418045cc80d89abc60107e86b0a712a013831d1d4d6b3603d8486d71d8931c7f9712de7bde7", 0x115}, {&(0x7f0000000a00)="029ca49e12a766f853a72fd7e03119d037fc01b0325a09007f9e26e5a860d02fb84e5b42883cd87862cfcdbe6ea71ef412b63271be09441516c92ccddd964eea71122afc1ddbc68f3b0016aa6d8a46128ce9148159cc0a22015cfc0d714168928b22e8b2333ffba0b2896fa10b6db4f43ba58d4485e1ee77b4940360fa99907e6cf927836d557a750666cc32dcbdf4eaad432cebc3ac7807007896", 0x9b}, {&(0x7f0000000ac0)="c515ed0016c523fa53fda7bd4d966d8cbfdebbec2a8817b56186862d5a13b1f60d236c93c533ab8a09f9b1319b5c648b14692684d6659b5e90b511b335459f9ff395a9b70424e7c83ed0779699343a727a90bf70a79eb71327dd3dab0e8285dcae62b563058bef99fe3f62909567", 0x6e}, {&(0x7f0000000b40)="8b47e60ce75ed9eae1c1eb37bc99197673009523e3515e6479d003c960806c11453d96b7dc24e1c6dc22e5fc8bda57031ceeb79913c3bea2efe28bcd68061bc8a3bf08599719423fc0d6124a9c76ecc41486e92651e7cacf3beb3baae566ac883dc4d9a8e304908b5522a2d877359e620d6842b47f969841262f9ae44eb7fb4f8f7b1040367d096cdfdcab4f81c2f07b2e65d45118", 0x95}], 0x5}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)="c0d6fe6695864e541b22b2186a7b42502a5ea38b28c1a7412cd4f1e2390b03165881832f7da114e138b09fcd262776e52282668a65af2d15cfb57a8703fead865e4ecbfaa2e52b2a412d91679cc01559fb0d8e637328c5a82dea35aa303249049e4ae273ffcd403766dbfd7123c312eb64d3e21a6eea034a10e8a0a8c6bdf6876514d4f4d98e40cb616ac1ff216a0c1e32598c978c06ddd846c3521c980f555014d71fc97351d74ecb3ea1328b38efb7cb4064a76c3e7f3a926806ea2bce8fbcfb10889a58abf0ca4fda1121", 0xcc}, {&(0x7f0000000dc0)="bfc9264bad56d6d0717e20174c67f2610dac05fc8732de741a430345bbe780e9a20d489df316fa06480fbdf52790660da620cf95b0409102dd55aaa1276e8260a6052a99c6d6fda58307e014146e93b7d46ba2d1e62edfa56628c36d94b1ff7c71c4c3745e65901d9d", 0x69}], 0x2}}], 0x4, 0x2c00cc44) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a47911c24ddc6c9999a7269d93", 0xd}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0xe, @local, 0xdad}, 0x1c, &(0x7f0000000340), 0x0, &(0x7f0000000480)=[@rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x3}}}], 0x18}}], 0x2, 0x40000) 2.181087245s ago: executing program 3 (id=6750): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x4, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 2.0268398s ago: executing program 6 (id=6751): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(0xffffffffffffffff, 0xc0086442, &(0x7f0000000980)) 1.690524156s ago: executing program 1 (id=6752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffb, 0x8, 0x7, 0x8, 0xc, {0x1, 0x8010001, 0x4d4, 0x40d, 0x4, 0x0, 0xed1, 0x2, 0x5, 0x2000, 0x7ff, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x26, 0x5, 0xfffffffff10b1839, 0x0, 0xffff, 0x6, 0x5d2186cc, 0x0, 0x0, 0x5, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 1.530512888s ago: executing program 8 (id=6753): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x5, 0xc01) r0 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) 1.383266082s ago: executing program 3 (id=6754): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xb08}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.098411006s ago: executing program 8 (id=6755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 902.159619ms ago: executing program 8 (id=6756): syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 684.452345ms ago: executing program 1 (id=6757): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(0xffffffffffffffff, 0xea283) dup3(r2, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 473.731498ms ago: executing program 3 (id=6758): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) inotify_rm_watch(r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 375.411222ms ago: executing program 3 (id=6759): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 245.856921ms ago: executing program 8 (id=6760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x8004) 126.666486ms ago: executing program 6 (id=6761): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 8.736866ms ago: executing program 8 (id=6762): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)="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", 0x141}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="d26747a8f1e9c7a1abe36f42c0c6437ac898908cc1384459305d27e2a02c0a6fd0832a3a9ac3b0740ddd69", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000400)="5691940c3bbc52b204c0c067dd112fda372a7168cc84dca7cddeef2e38a3ec1afc1bdc2674a408f0d8ccb201cc0981aa", 0x30}, {&(0x7f00000013c0)="fe2e9ea8218d922c3ae9b4277de295548dd3e1039466780f7872c3ce06cdea39e88d6c6dec36d00eae921b66c110657fc12b59c8240a5b1de4d4c46b80e89ffe39908bca4d6bb4def7511f4b5d169cb76e68562eb7ed9b8aca12590e193f068f4991b63f0068d4ceb90ee76bb921429ec14361025d19d1028cdbe7817dcef2cc8a0d95060df8ff21afc328f0e82c10f941509e689c9be18d5b7943cc489b346203a4702507dfbd8f015d6eeea1d35eb6aaef6cfcf0f1fc580a8bb121144e00d529b9f780e630369b847af810ba3111d93e1390294ebea7beac088f2f3fcb231f09c348fabae7474b95a4c77aeafa592418045cc80d89abc60107e86b0a712a013831d1d4d6b3603d8486d71d8931c7f9712de7bde7", 0x115}, {&(0x7f0000000a00)="029ca49e12a766f853a72fd7e03119d037fc01b0325a09007f9e26e5a860d02fb84e5b42883cd87862cfcdbe6ea71ef412b63271be09441516c92ccddd964eea71122afc1ddbc68f3b0016aa6d8a46128ce9148159cc0a22015cfc0d714168928b22e8b2333ffba0b2896fa10b6db4f43ba58d4485e1ee77b4940360fa99907e6cf927836d557a750666cc32dcbdf4eaad432cebc3ac7807007896", 0x9b}, {&(0x7f0000000ac0)="c515ed0016c523fa53fda7bd4d966d8cbfdebbec2a8817b56186862d5a13b1f60d236c93c533ab8a09f9b1319b5c648b14692684d6659b5e90b511b335459f9ff395a9b70424e7c83ed0779699343a727a90bf70a79eb71327dd3dab0e8285dcae62b563058bef99fe3f62909567", 0x6e}, {&(0x7f0000000b40)="8b47e60ce75ed9eae1c1eb37bc99197673009523e3515e6479d003c960806c11453d96b7dc24e1c6dc22e5fc8bda57031ceeb79913c3bea2efe28bcd68061bc8a3bf08599719423fc0d6124a9c76ecc41486e92651e7cacf3beb3baae566ac883dc4d9a8e304908b5522a2d877359e620d6842b47f969841262f9ae44eb7fb4f8f7b1040367d096cdfdcab4f81c2f07b2e65d45118", 0x95}], 0x5}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)="c0d6fe6695864e541b22b2186a7b42502a5ea38b28c1a7412cd4f1e2390b03165881832f7da114e138b09fcd262776e52282668a65af2d15cfb57a8703fead865e4ecbfaa2e52b2a412d91679cc01559fb0d8e637328c5a82dea35aa303249049e4ae273ffcd403766dbfd7123c312eb64d3e21a6eea034a10e8a0a8c6bdf6876514d4f4d98e40cb616ac1ff216a0c1e32598c978c06ddd846c3521c980f555014d71fc97351d74ecb3ea1328b38efb7cb4064a76c3e7f3a926806ea2bce8fbcfb10889a58abf0ca4fda1121", 0xcc}, {&(0x7f0000000dc0)="bfc9264bad56d6d0717e20174c67f2610dac05fc8732de741a430345bbe780e9a20d489df316fa06480fbdf52790660da620cf95b0409102dd55aaa1276e8260a6052a99c6d6fda58307e014146e93b7d46ba2d1e62edfa56628c36d94b1ff7c71c4c3745e65901d9d", 0x69}], 0x2}}], 0x4, 0x2c00cc44) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a47911c24ddc6c9999a7269d93", 0xd}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0xe, @local, 0xdad}, 0x1c, &(0x7f0000000340), 0x0, &(0x7f0000000480)=[@rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x3}}}], 0x18}}], 0x2, 0x40000) 0s ago: executing program 6 (id=6763): clock_gettime(0x0, &(0x7f0000001180)) openat(0xffffffffffffff9c, 0x0, 0x14b041, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x188) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): ][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5941'. [ 1684.928009][T27429] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1685.104925][ T186] usb 2-1: USB disconnect, device number 33 [ 1685.424968][T24705] Bluetooth: hci3: unexpected subevent 0x0a length: 57 > 30 [ 1685.998494][T27447] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5947'. [ 1686.221393][T27452] nbd: must specify at least one socket [ 1686.809504][T27479] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1687.325232][T24705] Bluetooth: hci3: unexpected subevent 0x0a length: 57 > 30 [ 1687.583987][T24705] Bluetooth: hci2: Unable to find connection for big 0x00 [ 1688.531816][T19596] syz_tun (unregistering): left allmulticast mode [ 1688.661943][T15165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1688.681929][T15165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1688.691050][T15165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1688.707109][T15165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1688.717481][T15165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1688.912579][T27548] sctp: [Deprecated]: syz.2.5988 (pid 27548) Use of int in max_burst socket option deprecated. [ 1688.912579][T27548] Use struct sctp_assoc_value instead [ 1689.232480][T27535] lo speed is unknown, defaulting to 1000 [ 1689.346553][T27561] usb usb7: usbfs: process 27561 (syz.1.5992) did not claim interface 0 before use [ 1689.623550][ T5732] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1689.699591][T27535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.713752][T27535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.725385][T27535] bridge_slave_0: entered allmulticast mode [ 1689.739380][T27535] bridge_slave_0: entered promiscuous mode [ 1689.761600][T27535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.780541][T27535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.792169][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 1689.808200][ T5732] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1689.820641][T27535] bridge_slave_1: entered allmulticast mode [ 1689.836768][ T5732] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1689.854871][T27535] bridge_slave_1: entered promiscuous mode [ 1689.868982][ T5732] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1689.910677][ T5732] usb 2-1: Product: syz [ 1689.928259][ T5732] usb 2-1: Manufacturer: syz [ 1689.947887][ T5732] usb 2-1: SerialNumber: syz [ 1689.993189][T27535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.065633][T27535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.188054][ T5732] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1690.199224][T27535] team0: Port device team_slave_0 added [ 1690.224989][ T5732] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1690.242863][T27535] team0: Port device team_slave_1 added [ 1690.262275][ T5732] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1690.292433][ T5732] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1690.308116][T27584] tipc: Enabling of bearer rejected, failed to enable media [ 1690.389765][ T5732] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1690.417186][T27535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.427443][ T5732] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1690.448619][T27535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.496318][ T5732] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1690.530770][T27535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.543136][ T5732] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1690.566721][T27535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.575718][ T5732] usb 2-1: USB disconnect, device number 34 [ 1690.605133][T27535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.638731][ T5732] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1690.652302][ T5732] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1690.666443][T27535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.679079][ T5732] visor 2-1:1.0: device disconnected [ 1690.743960][T15165] Bluetooth: hci1: command tx timeout [ 1690.902907][T27535] hsr_slave_0: entered promiscuous mode [ 1690.932589][T27535] hsr_slave_1: entered promiscuous mode [ 1690.958070][T27535] debugfs: 'hsr0' already exists in 'hsr' [ 1690.968300][T27535] Cannot create hsr debugfs directory [ 1691.457742][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6005'. [ 1691.533850][T27535] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.820748][T27535] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.052346][T27535] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.172508][T27535] bridge0: port 1(netdevsim0) entered disabled state [ 1692.227191][T27619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4819 sclass=netlink_route_socket pid=27619 comm=syz.5.6012 [ 1692.235909][T27535] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1692.251093][T16126] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1692.271449][T27535] bridge0: port 1(netdevsim0) entered disabled state [ 1692.306587][T27535] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.427051][T16126] usb 2-1: Using ep0 maxpacket: 8 [ 1692.444333][T16126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.466901][T16126] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1692.494198][T16126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1692.525855][T16126] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1692.544429][T16126] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1692.555864][T27535] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1692.562877][T16126] usb 2-1: Product: syz [ 1692.567922][T16126] usb 2-1: Manufacturer: syz [ 1692.576341][T27535] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1692.583788][T16126] usb 2-1: SerialNumber: syz [ 1692.589428][T27535] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1692.599590][T16126] usb 2-1: config 0 descriptor?? [ 1692.609657][T27535] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1692.622106][T27535] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1692.635228][T27535] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1692.646444][T27535] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1692.658002][T27535] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1692.683482][T16126] rc_core: IR keymap rc-imon-rsc not found [ 1692.691274][T16126] Registered IR keymap rc-empty [ 1692.703816][T16126] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1692.728361][T16126] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 1692.747846][T27535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.776332][T27535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.804139][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.811294][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.821883][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.829019][ T6589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1692.836694][T15165] Bluetooth: hci1: command tx timeout [ 1692.888778][T16126] usb 2-1: USB disconnect, device number 35 [ 1692.997521][T27535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1693.223806][T27654] tipc: Enabling of bearer rejected, failed to enable media [ 1693.451787][T27664] raw_sendmsg: syz.5.6023 forgot to set AF_INET. Fix it! [ 1693.689278][T27535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1694.099604][T27696] sctp: [Deprecated]: syz.5.6034 (pid 27696) Use of int in max_burst socket option deprecated. [ 1694.099604][T27696] Use struct sctp_assoc_value instead [ 1694.214282][T27535] veth0_vlan: entered promiscuous mode [ 1694.227318][T27535] veth1_vlan: entered promiscuous mode [ 1694.261675][T27535] veth0_macvtap: entered promiscuous mode [ 1694.279527][T27535] veth1_macvtap: entered promiscuous mode [ 1694.297273][T27535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.313625][T27535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1694.328617][ T1126] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.338335][ T1126] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.358145][ T1126] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.368243][ T1126] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.572703][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.583696][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.635615][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.654207][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.905214][T15165] Bluetooth: hci1: command tx timeout [ 1695.374034][T16181] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1695.553452][T16181] usb 7-1: Using ep0 maxpacket: 8 [ 1695.569402][T16181] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.598990][T16126] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1695.613879][T16181] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1695.645324][T16181] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1695.680755][T16181] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1695.704714][T16181] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1695.726757][T16181] usb 7-1: Product: syz [ 1695.735374][T16181] usb 7-1: Manufacturer: syz [ 1695.754165][T16181] usb 7-1: SerialNumber: syz [ 1695.765857][T16181] usb 7-1: config 0 descriptor?? [ 1695.784346][T16126] usb 2-1: Using ep0 maxpacket: 8 [ 1695.806008][T16126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1695.824811][T16126] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 1695.842049][T16126] usb 2-1: config 2 has no interface number 0 [ 1695.861863][T16126] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1695.904429][T16126] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1695.927470][T16126] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1695.939265][T16181] rc_core: IR keymap rc-imon-rsc not found [ 1695.953465][T16181] Registered IR keymap rc-empty [ 1695.959027][T16126] usb 2-1: config 2 interface 99 has no altsetting 0 [ 1695.975422][T16181] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1695.990091][T27738] sctp: [Deprecated]: syz.5.6050 (pid 27738) Use of int in max_burst socket option deprecated. [ 1695.990091][T27738] Use struct sctp_assoc_value instead [ 1696.001396][T16126] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 1696.031776][T16181] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 1696.058352][T16126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.079554][T16126] usb 2-1: Product: syz [ 1696.102790][T16126] usb 2-1: Manufacturer: syz [ 1696.108662][T16126] usb 2-1: SerialNumber: syz [ 1696.158495][T16181] usb 7-1: USB disconnect, device number 20 [ 1696.354755][T16126] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input26 [ 1696.578345][T16174] usb 2-1: USB disconnect, device number 36 [ 1696.841634][T27744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1696.856999][T27750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=27750 comm=syz.5.6053 [ 1696.982150][T27757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1696.996556][T15165] Bluetooth: hci1: command tx timeout [ 1697.323472][T16126] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1697.486786][T16126] usb 7-1: Using ep0 maxpacket: 32 [ 1697.507454][T16126] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1697.517401][T16126] usb 7-1: config 0 has no interface number 0 [ 1697.527952][T16126] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1697.544071][T16126] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1697.554754][T16126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.564261][T16126] usb 7-1: Product: syz [ 1697.568426][T16126] usb 7-1: Manufacturer: syz [ 1697.573017][T16126] usb 7-1: SerialNumber: syz [ 1697.582950][T16126] usb 7-1: config 0 descriptor?? [ 1697.590198][T27762] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1697.590409][T27773] sctp: [Deprecated]: syz.5.6063 (pid 27773) Use of int in max_burst socket option deprecated. [ 1697.590409][T27773] Use struct sctp_assoc_value instead [ 1697.815047][T27762] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1698.168162][T27782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1698.491642][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1699.013790][T27808] afs: Unknown parameter '' [ 1699.986339][T16126] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1700.024258][T16126] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1700.049910][T16126] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1700.094733][T16126] usb 7-1: USB disconnect, device number 21 [ 1701.034386][T16174] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1701.193399][T16174] usb 7-1: Using ep0 maxpacket: 8 [ 1701.200010][T16174] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1701.210948][T16174] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1701.222930][T16174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1701.238709][T16174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1701.252221][T16174] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1701.261706][T16174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.269954][T16174] usb 7-1: Product: syz [ 1701.279023][T16174] usb 7-1: Manufacturer: syz [ 1701.285906][T16174] usb 7-1: SerialNumber: syz [ 1701.293280][T16174] usb 7-1: config 0 descriptor?? [ 1701.299269][T27827] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1701.503181][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6091'. [ 1701.524804][T16174] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1701.542643][T16174] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input28 [ 1701.574586][ C1] powermate: config urb returned -71 [ 1701.580144][ C1] powermate: config urb returned -71 [ 1701.585689][ C1] powermate: config urb returned -71 [ 1701.591776][ C1] powermate: config urb returned -71 [ 1701.623834][T16174] usb 7-1: USB disconnect, device number 22 [ 1701.629805][ C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1701.664403][ T5739] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1701.834038][ T5739] usb 2-1: Using ep0 maxpacket: 8 [ 1701.843087][ T5739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.857693][ T5739] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1701.872309][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1701.890649][ T5739] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1701.900602][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1701.909786][ T5739] usb 2-1: Product: syz [ 1701.914791][ T5739] usb 2-1: Manufacturer: syz [ 1701.919416][ T5739] usb 2-1: SerialNumber: syz [ 1701.931649][ T5739] usb 2-1: config 0 descriptor?? [ 1702.113843][ T5739] rc_core: IR keymap rc-imon-rsc not found [ 1702.133697][ T5739] Registered IR keymap rc-empty [ 1702.149407][ T5739] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1702.190490][ T5739] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 1702.216880][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6096'. [ 1702.247274][ T5739] usb 2-1: USB disconnect, device number 37 [ 1702.258843][T27870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.549208][T27870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.903547][T15165] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 1702.904477][T24705] Bluetooth: hci4: command 0x0406 tx timeout [ 1703.015393][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1703.027353][T27889] syzkaller0: entered promiscuous mode [ 1703.027376][T27889] syzkaller0: entered allmulticast mode [ 1703.032744][T27889] tipc: Started in network mode [ 1703.058670][T27889] tipc: Node identity aae91c1b863c, cluster identity 4711 [ 1703.064571][T27889] tipc: Enabled bearer , priority 0 [ 1703.125364][T27889] tipc: Resetting bearer [ 1703.131241][T27888] tipc: Resetting bearer [ 1703.187931][T27888] tipc: Disabling bearer [ 1703.302080][T24705] Bluetooth: hci1: Unable to find connection for big 0x00 [ 1703.483194][T27901] siw: device registration error -23 [ 1703.792288][ T50] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 1703.863708][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1704.420584][T27908] fuse: fd is not a fuse device [ 1704.455442][T27909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6110'. [ 1704.873511][T27921] afs: Unknown parameter '' [ 1706.104402][T27937] siw: device registration error -23 [ 1706.754744][T27940] dns_resolver: Unsupported content type (89) [ 1706.829095][T27943] random: crng reseeded on system resumption [ 1706.857216][T27941] Restarting kernel threads ... [ 1706.867921][T27941] Done restarting kernel threads. [ 1706.928547][T27941] sctp: [Deprecated]: syz.6.6121 (pid 27941) Use of int in max_burst socket option deprecated. [ 1706.928547][T27941] Use struct sctp_assoc_value instead [ 1707.523407][T16174] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1707.693426][T16174] usb 7-1: Using ep0 maxpacket: 16 [ 1707.709386][T16174] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1707.741286][T16174] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1707.767872][T16174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.795136][T16174] usb 7-1: Product: syz [ 1707.806222][T16174] usb 7-1: Manufacturer: syz [ 1707.819387][T16174] usb 7-1: SerialNumber: syz [ 1707.838388][T16174] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1707.858991][T16174] r8152-cfgselector 7-1: config 0 descriptor?? [ 1708.431527][T27960] afs: Unknown parameter 'dy' [ 1709.704285][T16174] r8152-cfgselector 7-1: USB disconnect, device number 23 [ 1709.737591][T27968] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1710.164479][T27975] siw: device registration error -23 [ 1710.303444][T16174] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1710.461057][ T50] Bluetooth: hci3: unexpected subevent 0x1a length: 30 > 6 [ 1710.472049][T16174] usb 2-1: Using ep0 maxpacket: 8 [ 1710.479629][T16174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.497691][T16174] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1710.509760][T16174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1710.523032][T16174] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1710.536268][T16174] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1710.546360][T16174] usb 2-1: Product: syz [ 1710.550751][T16174] usb 2-1: Manufacturer: syz [ 1710.556200][T16174] usb 2-1: SerialNumber: syz [ 1710.563975][T16174] usb 2-1: config 0 descriptor?? [ 1710.646112][T16174] rc_core: IR keymap rc-imon-rsc not found [ 1710.653244][T16174] Registered IR keymap rc-empty [ 1710.665881][T16174] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1710.688733][T16174] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 1710.833896][ T5746] usb 2-1: USB disconnect, device number 38 [ 1710.900079][T28002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28002 comm=syz.5.6146 [ 1711.015669][T28006] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6148'. [ 1711.327962][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1711.327992][ T29] audit: type=1400 audit(1785117705.004:5119): avc: denied { ioctl } for pid=28005 comm="syz.6.6148" path="/dev/usbmon7" dev="devtmpfs" ino=742 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1711.435938][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6149'. [ 1711.753265][T28021] fuse: fd is not a fuse device [ 1711.783759][ T5732] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1711.954920][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 1711.985611][ T5732] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1712.004156][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.022330][ T5732] usb 2-1: Product: syz [ 1712.032255][ T5732] usb 2-1: Manufacturer: syz [ 1712.043880][ T5732] usb 2-1: SerialNumber: syz [ 1712.062082][ T5732] usb 2-1: config 0 descriptor?? [ 1712.080079][T24705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1712.097987][T24705] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1712.099763][ T5732] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1712.112778][T24705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1712.123482][T24705] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1712.137018][T24705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1712.545356][T28029] lo speed is unknown, defaulting to 1000 [ 1712.879194][T28055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28055 comm=syz.3.6161 [ 1712.922744][T28029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.930289][T28029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.938103][T28029] bridge_slave_0: entered allmulticast mode [ 1712.946269][T28029] bridge_slave_0: entered promiscuous mode [ 1712.955603][T28029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.962808][T28029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.970179][T28029] bridge_slave_1: entered allmulticast mode [ 1712.978150][T28029] bridge_slave_1: entered promiscuous mode [ 1713.017040][T28029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.029638][T28029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1713.069091][T28029] team0: Port device team_slave_0 added [ 1713.077911][T28029] team0: Port device team_slave_1 added [ 1713.112073][T28029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.119106][T28029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.146473][T28029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.159566][T28029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.166842][T28029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.194017][T28029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.252076][T28029] hsr_slave_0: entered promiscuous mode [ 1713.258961][T28029] hsr_slave_1: entered promiscuous mode [ 1713.265464][T28029] debugfs: 'hsr0' already exists in 'hsr' [ 1713.271230][T28029] Cannot create hsr debugfs directory [ 1713.523880][ T5732] gspca_sonixj: i2c_w8 err -71 [ 1713.615791][ T5732] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1713.651782][ T5732] usb 2-1: USB disconnect, device number 39 [ 1714.003675][ T29] audit: type=1400 audit(1785117707.654:5120): avc: denied { write } for pid=28057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.293977][ T50] Bluetooth: hci6: command tx timeout [ 1714.701137][ T29] audit: type=1400 audit(1785117708.374:5121): avc: denied { write } for pid=28076 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.413447][ T5732] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1715.799124][T28095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28095 comm=syz.3.6171 [ 1715.979656][ T5732] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1715.989167][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.022312][ T5732] usb 7-1: Product: syz [ 1716.049101][ T5732] usb 7-1: Manufacturer: syz [ 1716.055491][ T5732] usb 7-1: SerialNumber: syz [ 1716.343692][ T50] Bluetooth: hci6: command tx timeout [ 1716.385653][ T29] audit: type=1400 audit(1785117710.064:5122): avc: denied { write } for pid=28096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.532823][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1716.659574][ T29] audit: type=1400 audit(1785117710.244:5123): avc: denied { write } for pid=28113 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.719166][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1716.752800][T28110] fuse: Unknown parameter '' [ 1717.570995][T28029] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1717.619786][T28029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1717.640445][T28029] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1717.714497][T28029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1717.723637][ T29] audit: type=1400 audit(1785117711.374:5124): avc: denied { set_context_mgr } for pid=28123 comm="syz.1.6176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1717.759808][T28029] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1717.809054][T28029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1717.826021][T28029] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1717.869677][T28029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1717.953708][ T29] audit: type=1400 audit(1785117711.624:5125): avc: denied { write } for pid=28123 comm="syz.1.6176" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1718.258442][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1718.302091][T28029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1718.311000][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1718.369557][T28029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.394502][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.401669][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.424226][ T50] Bluetooth: hci6: command tx timeout [ 1718.451418][ T29] audit: type=1400 audit(1785117712.124:5126): avc: denied { write } for pid=28122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.451997][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.481718][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.592145][T28029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1718.887305][ T29] audit: type=1400 audit(1785117712.564:5127): avc: denied { write } for pid=28152 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.961237][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 1719.009169][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1719.076199][ T5732] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1719.167929][ T5732] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1719.226478][ T5732] usb 7-1: USB disconnect, device number 24 [ 1719.725688][T28029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.504142][ T50] Bluetooth: hci6: command tx timeout [ 1720.522915][T28029] veth0_vlan: entered promiscuous mode [ 1720.539624][T28029] veth1_vlan: entered promiscuous mode [ 1720.606981][T28029] veth0_macvtap: entered promiscuous mode [ 1720.641000][T28029] veth1_macvtap: entered promiscuous mode [ 1720.709701][T28029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.772495][T28029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.879619][ T6589] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.909634][T28193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28193 comm=syz.3.6184 [ 1720.927644][ T6589] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.944900][ T6589] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.974372][ T6589] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.019776][ T29] audit: type=1400 audit(1785117714.694:5128): avc: denied { write } for pid=28164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.441150][ T6589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.463587][ T6589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.473530][ T29] audit: type=1400 audit(1785117715.144:5129): avc: denied { write } for pid=28200 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.745193][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.770653][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.847877][T16126] IPVS: starting estimator thread 0... [ 1722.263626][T28209] IPVS: using max 37 ests per chain, 88800 per kthread [ 1722.547402][T28212] dns_resolver: Unsupported content type (89) [ 1722.896593][T16126] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1723.084585][T16126] usb 2-1: Using ep0 maxpacket: 8 [ 1723.108053][ T29] audit: type=1400 audit(1785117716.774:5130): avc: denied { read } for pid=28224 comm="syz.6.6191" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1723.159594][T28233] netlink: 'syz.6.6191': attribute type 9 has an invalid length. [ 1723.173485][T16126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1723.215827][T16126] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1723.234324][ T29] audit: type=1400 audit(1785117716.774:5131): avc: denied { open } for pid=28224 comm="syz.6.6191" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1723.262563][T16126] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1723.274154][T28233] netlink: 'syz.6.6191': attribute type 7 has an invalid length. [ 1723.289623][T16126] usb 2-1: Product: syz [ 1723.299002][T16126] usb 2-1: Manufacturer: syz [ 1723.305228][T16126] usb 2-1: SerialNumber: syz [ 1723.389768][ T29] audit: type=1400 audit(1785117716.824:5132): avc: denied { ioctl } for pid=28224 comm="syz.6.6191" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1723.444859][T28233] netlink: 'syz.6.6191': attribute type 8 has an invalid length. [ 1723.622159][ T29] audit: type=1400 audit(1785117717.294:5133): avc: denied { write } for pid=28210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.682514][T16126] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1723.716734][T16126] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1723.740876][T16126] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1723.767493][T16126] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1723.885266][T16126] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1723.907418][T16126] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1723.975383][T16126] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1724.147996][T16126] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1724.178880][ T29] audit: type=1400 audit(1785117717.854:5134): avc: denied { write } for pid=28248 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1724.232644][T16126] usb 2-1: USB disconnect, device number 40 [ 1724.297176][T16126] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1724.409035][T16126] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1724.444892][T16126] visor 2-1:1.0: device disconnected [ 1724.577859][ T5724] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1724.630024][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1724.916291][T28250] dvmrp0: entered allmulticast mode [ 1726.701239][T28283] fuse: fd is not a fuse device [ 1727.025481][ T29] audit: type=1400 audit(1785117720.704:5135): avc: denied { write } for pid=28255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.133472][ T46] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1727.212065][ T29] audit: type=1400 audit(1785117720.884:5136): avc: denied { write } for pid=28297 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.328763][ T46] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1727.352715][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.380435][ T46] usb 2-1: Product: syz [ 1727.403030][ T46] usb 2-1: Manufacturer: syz [ 1727.428632][ T46] usb 2-1: SerialNumber: syz [ 1727.437755][T28303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1727.452525][ T46] usb 2-1: config 0 descriptor?? [ 1727.892748][ T46] usb 2-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 1727.901725][T28317] netlink: 130 bytes leftover after parsing attributes in process `syz.6.6211'. [ 1728.129168][ T46] usb 2-1: Firmware: build [ 1728.209962][ T29] audit: type=1400 audit(1785117721.874:5137): avc: denied { write } for pid=28302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.331875][ T46] usb 2-1: no permanent extended address found, random address set [ 1728.360803][ T5724] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1728.377685][ T46] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1728.408974][ T5724] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1728.431054][ T46] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1728.457988][ T5724] usb 9-1: can't read configurations, error -71 [ 1728.628978][ T46] usb 2-1: USB disconnect, device number 41 [ 1728.841365][ T29] audit: type=1400 audit(1785117722.514:5138): avc: denied { write } for pid=28334 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.106070][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.120645][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.122841][ T29] audit: type=1400 audit(1785117724.794:5139): avc: denied { write } for pid=28346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.385078][ T50] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 1731.452134][ T29] audit: type=1400 audit(1785117725.124:5140): avc: denied { write } for pid=28380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.613041][T28388] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6230'. [ 1731.642601][T28388] 0{X功: renamed from gretap0 (while UP) [ 1731.679470][T28388] 0{X功: entered allmulticast mode [ 1731.698120][T28388] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1732.510822][ T29] audit: type=1400 audit(1785117726.184:5141): avc: denied { write } for pid=28410 comm="syz.5.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1732.575203][ T29] audit: type=1400 audit(1785117726.244:5142): avc: denied { read } for pid=28410 comm="syz.5.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1732.652071][ T29] audit: type=1400 audit(1785117726.294:5143): avc: denied { write } for pid=28390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.849792][ T29] audit: type=1400 audit(1785117726.524:5144): avc: denied { write } for pid=28421 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1733.147818][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1733.882600][ T29] audit: type=1400 audit(1785117727.554:5145): avc: denied { write } for pid=28432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.016198][ T29] audit: type=1400 audit(1785117727.694:5146): avc: denied { write } for pid=28461 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.023580][T28465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28465 comm=syz.5.6250 [ 1734.427326][ T29] audit: type=1400 audit(1785117728.104:5147): avc: denied { write } for pid=28467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.779449][ T29] audit: type=1400 audit(1785117728.454:5148): avc: denied { write } for pid=28484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1736.900245][T15165] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 1736.906511][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1739.040493][ T50] Bluetooth: hci2: unexpected subevent 0x0a length: 57 > 30 [ 1739.923848][ T29] audit: type=1400 audit(1785117733.594:5149): avc: denied { write } for pid=28503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1740.013523][T15165] Bluetooth: hci6: Unable to find connection for big 0x00 [ 1740.293450][T16126] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1740.370190][ T29] audit: type=1400 audit(1785117734.044:5150): avc: denied { write } for pid=28540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1740.433763][T16126] usb 7-1: device descriptor read/64, error -71 [ 1740.477850][ T29] audit: type=1400 audit(1785117734.104:5151): avc: denied { read } for pid=28544 comm="syz.5.6267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1740.497385][ T5739] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1740.683975][T16126] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1740.685469][ T5739] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1740.732891][ T5739] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1740.747300][ T5739] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1740.763366][ T5739] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1740.785903][ T5739] usb 9-1: Product: syz [ 1740.798413][ T5739] usb 9-1: Manufacturer: syz [ 1740.809851][ T5739] usb 9-1: SerialNumber: syz [ 1740.837024][T16126] usb 7-1: device descriptor read/64, error -71 [ 1740.840931][ T5739] usb 9-1: config 0 descriptor?? [ 1740.886685][ T5739] usb 9-1: selecting invalid altsetting 0 [ 1740.955023][T16126] usb usb7-port1: attempt power cycle [ 1741.117571][T28542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28542 comm=syz.8.6266 [ 1741.201075][ T5739] usb 9-1: USB disconnect, device number 11 [ 1741.303889][T16126] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1741.355992][T16126] usb 7-1: device descriptor read/8, error -71 [ 1741.490602][ T29] audit: type=1400 audit(1785117735.164:5152): avc: denied { write } for pid=28548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.579367][T28570] dns_resolver: Unsupported content type (89) [ 1741.603500][T16126] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1741.645898][T16126] usb 7-1: device descriptor read/8, error -71 [ 1741.793884][T16126] usb usb7-port1: unable to enumerate USB device [ 1741.862639][ T29] audit: type=1400 audit(1785117735.534:5153): avc: denied { write } for pid=28571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.974803][T15165] Bluetooth: hci6: unexpected subevent 0x0a length: 57 > 30 [ 1742.431493][ T50] Bluetooth: hci6: Unable to find connection for big 0x00 [ 1743.683949][ T29] audit: type=1400 audit(1785117737.354:5154): avc: denied { map } for pid=28601 comm="syz.6.6281" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1744.374110][ T5746] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1744.562305][ T5746] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1744.596682][ T5746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.638855][ T5746] usb 7-1: Product: syz [ 1744.666243][ T5746] usb 7-1: Manufacturer: syz [ 1744.687817][ T5746] usb 7-1: SerialNumber: syz [ 1745.147198][ T29] audit: type=1400 audit(1785117738.824:5155): avc: denied { ioctl } for pid=28631 comm="syz.3.6288" path="socket:[88700]" dev="sockfs" ino=88700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1745.214075][ T5746] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1745.236389][ T5746] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1745.263923][T16181] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1745.447946][T16181] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1745.476064][T16181] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.500345][T16181] usb 9-1: Product: syz [ 1745.510152][T16181] usb 9-1: Manufacturer: syz [ 1745.516441][T16181] usb 9-1: SerialNumber: syz [ 1745.538754][T16181] usb 9-1: config 0 descriptor?? [ 1745.617254][T28650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6293'. [ 1746.029995][T28659] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6295'. [ 1746.043934][T28659] 0{X功: renamed from gretap0 [ 1746.063803][T28659] 0{X功: entered allmulticast mode [ 1746.080542][T28659] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1746.271969][T28655] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 1746.315249][ T5746] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1746.429513][ T5746] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1746.461641][ T29] audit: type=1400 audit(1785117740.124:5156): avc: denied { map } for pid=28653 comm="syz.1.6294" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1746.532488][ T29] audit: type=1400 audit(1785117740.154:5157): avc: denied { execute } for pid=28653 comm="syz.1.6294" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1746.574931][ T5746] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1746.639573][ T5746] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1747.031176][T16181] usb 9-1: f81604_read: reg: 200f failed: -EPROTO [ 1747.075623][T16181] usb 9-1: USB disconnect, device number 12 [ 1747.198705][T16181] usb 9-1: f81604_read: reg: 100f failed: -ENODEV [ 1747.590259][ T5273] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1747.621629][ T46] usb 7-1: USB disconnect, device number 29 [ 1747.647907][ T5273] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1747.684766][T16181] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1748.036163][T28685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6306'. [ 1749.406953][T28701] lo speed is unknown, defaulting to 1000 [ 1749.681512][ T50] Bluetooth: hci3: unexpected subevent 0x0a length: 57 > 30 [ 1749.893429][ T46] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1749.928404][T28720] random: crng reseeded on system resumption [ 1749.959690][T28720] Restarting kernel threads ... [ 1749.983274][T28720] Done restarting kernel threads. [ 1750.012815][T28720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6320'. [ 1750.048131][T28720] sctp: [Deprecated]: syz.6.6320 (pid 28720) Use of int in max_burst socket option deprecated. [ 1750.048131][T28720] Use struct sctp_assoc_value instead [ 1750.065044][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1750.074217][ T46] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1750.107284][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.136540][ T46] usb 2-1: Product: syz [ 1750.158086][ T46] usb 2-1: Manufacturer: syz [ 1750.172630][ T46] usb 2-1: SerialNumber: syz [ 1750.371297][T28729] fuse: fd is not a fuse device [ 1750.379608][ T46] usb 2-1: config 0 descriptor?? [ 1750.398124][ T46] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1750.432861][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 1750.492960][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1750.564338][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 1750.624042][ T5724] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1750.679880][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1750.853855][ T5724] usb 7-1: Using ep0 maxpacket: 8 [ 1750.888836][ T5724] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.144442][ T5724] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.177575][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1751.200891][ T5724] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1751.218104][ T46] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1751.234102][ T5724] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1751.257084][ T46] usb 2-1: media controller created [ 1751.267485][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.290377][ T5724] usb 7-1: config 0 descriptor?? [ 1751.302015][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1751.396196][ T46] usb 2-1: selecting invalid altsetting 3 [ 1751.412953][ T46] ttusb2: set interface to alts=3 failed [ 1751.484995][ T5739] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1751.505777][ T46] DVB: Unable to find symbol tda10086_attach() [ 1751.514258][ T46] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1751.537463][ T46] dvb-usb: bulk message failed: -22 (4/0) [ 1751.550236][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1751.577862][ T46] dvb-usb: bulk message failed: -22 (5/0) [ 1751.595252][ T46] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1751.612593][ T46] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1751.626353][ T46] usb 2-1: USB disconnect, device number 42 [ 1751.653455][ T5739] usb 9-1: Using ep0 maxpacket: 8 [ 1751.667231][ T5739] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1751.708482][ T5739] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1751.742547][ T5739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.760590][ T5724] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 0/5 [ 1751.770188][ T46] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1751.797050][ T5724] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 1751.810297][ T5724] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 1751.832859][ T5739] usb 9-1: config 0 descriptor?? [ 1752.080206][T16181] usb 7-1: USB disconnect, device number 30 [ 1752.244676][ T5739] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1752.719467][T16181] usb 9-1: USB disconnect, device number 13 [ 1752.792446][T28761] random: crng reseeded on system resumption [ 1752.831397][T28761] Restarting kernel threads ... [ 1752.838585][T28761] Done restarting kernel threads. [ 1752.861540][T28761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6334'. [ 1752.874688][T28761] sctp: [Deprecated]: syz.1.6334 (pid 28761) Use of int in max_burst socket option deprecated. [ 1752.874688][T28761] Use struct sctp_assoc_value instead [ 1754.326421][ T29] audit: type=1800 audit(1785117747.994:5158): pid=28778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.6338" name="file0" dev="overlay" ino=286 res=0 errno=0 [ 1755.459905][ T29] audit: type=1400 audit(1785117749.134:5159): avc: denied { write } for pid=28792 comm="syz.6.6344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1755.660639][T28799] i2c i2c-0: new_device: Invalid device name [ 1755.815943][T28804] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1757.516036][T28823] dns_resolver: Unsupported content type (89) [ 1758.057115][ T29] audit: type=1400 audit(1785117751.734:5160): avc: denied { map } for pid=28839 comm="syz.1.6360" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1758.210313][ T29] audit: type=1400 audit(1785117751.884:5161): avc: denied { ioctl } for pid=28839 comm="syz.1.6360" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1760.419261][ T50] Bluetooth: hci6: unexpected subevent 0x0a length: 57 > 30 [ 1761.243738][ T5746] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1761.799145][T28886] tipc: Started in network mode [ 1762.014346][T28886] tipc: Node identity 4ef8c4127dc4, cluster identity 4711 [ 1762.048337][T28886] tipc: Enabled bearer , priority 0 [ 1762.089985][T28889] tipc: Resetting bearer [ 1762.274697][T28885] tipc: Disabling bearer [ 1762.323461][ T5746] usb 7-1: Using ep0 maxpacket: 8 [ 1762.346140][ T5746] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.373816][T15165] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1762.390008][T15165] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1762.390112][ T5746] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.473773][T15165] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1762.481700][T15165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1762.495961][T15165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1762.667904][ T5746] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1762.676918][ T5746] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1762.687929][ T5746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.700924][ T5746] usb 7-1: config 0 descriptor?? [ 1763.332024][ T5746] usbhid 7-1:0.0: can't add hid device: -71 [ 1763.366175][ T5746] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1763.431876][ T5746] usb 7-1: USB disconnect, device number 31 [ 1763.898237][ T50] Bluetooth: hci3: unexpected subevent 0x0a length: 57 > 30 [ 1764.429145][T20125] syz_tun (unregistering): left allmulticast mode [ 1764.448303][T20125] syz_tun (unregistering): left promiscuous mode [ 1764.459644][T20125] bridge0: port 3(syz_tun) entered disabled state [ 1764.583438][ T50] Bluetooth: hci7: command tx timeout [ 1764.857446][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6390'. [ 1764.872586][T28944] siw: device registration error -23 [ 1764.895220][ T5746] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1765.356027][T28895] lo speed is unknown, defaulting to 1000 [ 1765.393697][ T5746] usb 2-1: device descriptor read/64, error -71 [ 1765.654142][ T5746] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1765.807165][ T5746] usb 2-1: device descriptor read/64, error -71 [ 1765.945348][ T5746] usb usb2-port1: attempt power cycle [ 1765.967880][T28895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.979906][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.987499][T28895] bridge_slave_0: entered allmulticast mode [ 1765.995022][T28895] bridge_slave_0: entered promiscuous mode [ 1766.003417][T28895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.010587][T28895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.017924][T28895] bridge_slave_1: entered allmulticast mode [ 1766.028410][T28895] bridge_slave_1: entered promiscuous mode [ 1766.218126][T28895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.232228][T28895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.293304][T28895] team0: Port device team_slave_0 added [ 1766.305809][T28895] team0: Port device team_slave_1 added [ 1766.364340][ T5746] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1766.408734][T28895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.441509][T28895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.466917][ T5746] usb 2-1: device descriptor read/8, error -71 [ 1766.477826][T28895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.491815][T28895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.498751][T28895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.664873][ T50] Bluetooth: hci7: command tx timeout [ 1766.679492][T28895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.814989][ T5746] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1766.883375][T28895] hsr_slave_0: entered promiscuous mode [ 1766.889798][T28895] hsr_slave_1: entered promiscuous mode [ 1766.898336][T28895] debugfs: 'hsr0' already exists in 'hsr' [ 1766.904615][T28895] Cannot create hsr debugfs directory [ 1766.936291][ T5746] usb 2-1: device descriptor read/8, error -71 [ 1767.066426][ T5746] usb usb2-port1: unable to enumerate USB device [ 1767.393679][ T50] Bluetooth: hci1: unexpected subevent 0x0a length: 57 > 30 [ 1767.451838][T28895] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 1767.462349][T28895] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1767.473687][T28895] bridge0: port 4(netdevsim0) entered disabled state [ 1767.636928][T28987] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6400'. [ 1767.667561][T28987] siw: device registration error -23 [ 1768.712557][ T29] audit: type=1400 audit(1785117762.384:5162): avc: denied { accept } for pid=28991 comm="syz.6.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1768.753859][ T50] Bluetooth: hci7: command tx timeout [ 1768.813004][T28895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1768.825863][T28895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1768.833876][T28895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1768.846658][T28895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1768.865877][T28895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1768.884563][ T186] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1768.894329][T28895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1768.895152][T28895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1768.928563][T28895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.094458][ T186] usb 2-1: Using ep0 maxpacket: 8 [ 1769.118177][T28895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.123627][ T186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.153379][ T186] usb 2-1: config 0 has no interfaces? [ 1769.179622][ T186] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1769.201436][T28895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.224448][ T186] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1769.226654][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.239727][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.268864][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.269468][ T186] usb 2-1: Product: syz [ 1769.276047][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.348123][ T186] usb 2-1: Manufacturer: syz [ 1769.369915][ T186] usb 2-1: SerialNumber: syz [ 1769.401728][ T186] usb 2-1: config 0 descriptor?? [ 1769.662721][ T5724] usb 2-1: USB disconnect, device number 47 [ 1770.075899][ T5732] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1770.092694][T28895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1770.236645][ T5732] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.292836][ T5732] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1770.321457][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.350224][ T5732] usb 7-1: Product: syz [ 1770.361415][ T5732] usb 7-1: Manufacturer: syz [ 1770.371990][ T5732] usb 7-1: SerialNumber: syz [ 1770.564226][ T5732] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1770.823489][ T50] Bluetooth: hci7: command tx timeout [ 1771.071839][T16174] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1771.137280][ T5732] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1771.188014][ T5732] usb 7-1: USB disconnect, device number 32 [ 1771.248761][T16174] usb 2-1: device descriptor read/64, error -71 [ 1771.270156][T28895] veth0_vlan: entered promiscuous mode [ 1771.283953][T28895] veth1_vlan: entered promiscuous mode [ 1771.318758][T28895] veth0_macvtap: entered promiscuous mode [ 1771.341036][T28895] veth1_macvtap: entered promiscuous mode [ 1771.442642][T28895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1771.493212][T28895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.520906][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.536608][T29058] random: crng reseeded on system resumption [ 1771.579762][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.594837][T29058] Restarting kernel threads ... [ 1771.615271][T29058] Done restarting kernel threads. [ 1771.624170][T16174] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1771.637655][ T1126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.664314][ T1126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.763903][T16174] usb 2-1: device descriptor read/64, error -71 [ 1771.854155][T29061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1771.988463][T16174] usb usb2-port1: attempt power cycle [ 1772.037531][T29061] team0: Port device team_slave_0 removed [ 1772.076254][T29063] sctp: [Deprecated]: syz.8.6417 (pid 29063) Use of int in max_burst socket option deprecated. [ 1772.076254][T29063] Use struct sctp_assoc_value instead [ 1772.495588][T16174] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1772.529443][ T6875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.557762][T16174] usb 2-1: device descriptor read/8, error -71 [ 1772.579290][ T6875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.715623][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.902921][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.953763][T16174] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1772.984643][T16174] usb 2-1: device descriptor read/8, error -71 [ 1773.109998][T16174] usb usb2-port1: unable to enumerate USB device [ 1773.185980][ T5739] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1773.425130][ T5739] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1773.456828][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.542408][ T5739] usb 7-1: Product: syz [ 1773.783886][ T5739] usb 7-1: Manufacturer: syz [ 1773.839028][ T5739] usb 7-1: SerialNumber: syz [ 1774.132143][ T5739] usb 7-1: config 0 descriptor?? [ 1774.171909][T29082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.179685][T29082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.662337][T29082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.714440][T29082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.378594][T29109] random: crng reseeded on system resumption [ 1775.482165][ T5739] usb 7-1: f81604_read: reg: 100e failed: -EPROTO [ 1775.531007][ T1175] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.552808][ T1175] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.602225][T29116] futex_wake_op: syz.1.6433 tries to shift op by -1; fix this program [ 1775.620134][T29121] sctp: [Deprecated]: syz.8.6430 (pid 29121) Use of int in max_burst socket option deprecated. [ 1775.620134][T29121] Use struct sctp_assoc_value instead [ 1775.659457][ T29] audit: type=1400 audit(1785117769.334:5163): avc: denied { audit_read } for pid=29114 comm="syz.1.6433" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1775.702235][ T5739] usb 7-1: f81604_read: reg: 200f failed: -EPROTO [ 1775.729123][T29112] Restarting kernel threads ... [ 1775.729446][ T1175] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.736811][T29112] Done restarting kernel threads. [ 1775.748796][ T5739] usb 7-1: USB disconnect, device number 33 [ 1775.786081][ T1175] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.822074][ T5739] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 1775.876120][ T5273] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 1775.916824][ T5739] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 1776.046056][T29127] dns_resolver: Unsupported content type (89) [ 1776.213406][ T5724] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1776.373427][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 1776.392771][ T5724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.421453][ T5724] usb 2-1: config 0 has no interfaces? [ 1776.433522][ T5724] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1776.444118][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1776.456055][ T5724] usb 2-1: Product: syz [ 1776.462665][ T5724] usb 2-1: Manufacturer: syz [ 1776.470625][ T5724] usb 2-1: SerialNumber: syz [ 1776.482524][ T5724] usb 2-1: config 0 descriptor?? [ 1776.643414][ T46] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1776.703126][ T5724] usb 2-1: USB disconnect, device number 52 [ 1776.808603][ T46] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1776.821451][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.837732][ T46] usb 9-1: Product: syz [ 1776.845592][ T46] usb 9-1: Manufacturer: syz [ 1776.854391][ T46] usb 9-1: SerialNumber: syz [ 1776.866882][ T46] usb 9-1: config 0 descriptor?? [ 1776.877168][ T46] ch341 9-1:0.0: ch341-uart converter detected [ 1777.353591][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1777.553439][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1777.601350][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1777.907524][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1777.922597][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.933412][ T9] usb 7-1: Product: syz [ 1777.938687][ T9] usb 7-1: Manufacturer: syz [ 1777.945722][ T9] usb 7-1: SerialNumber: syz [ 1777.968628][ T9] usb 7-1: config 0 descriptor?? [ 1778.003034][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1778.039212][ T9] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1778.129221][ T46] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1778.352632][ T46] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 1778.364115][ T46] usb 9-1: USB disconnect, device number 14 [ 1778.381146][ T46] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1778.775260][ T46] ch341 9-1:0.0: device disconnected [ 1779.060061][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1779.122812][T29168] sctp: [Deprecated]: syz.3.6450 (pid 29168) Use of int in max_burst socket option deprecated. [ 1779.122812][T29168] Use struct sctp_assoc_value instead [ 1779.393576][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1779.407925][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1779.417250][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1779.427098][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1779.436186][T29178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1779.508843][ T9] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1779.537844][ T9] em28xx 7-1:0.0: board has no eeprom [ 1779.583512][ T46] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1779.743437][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1779.752359][ T46] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.763581][ T46] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1779.780806][ T46] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1779.797634][ T46] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1779.814482][ T46] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1779.826650][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.835913][ T46] usb 9-1: Product: syz [ 1779.840235][ T46] usb 9-1: Manufacturer: syz [ 1779.845667][ T46] usb 9-1: SerialNumber: syz [ 1779.873009][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1779.894415][ T46] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input34 [ 1780.083401][ T46] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1780.108166][ T46] (id 0x00) [ 1780.453478][ T46] rc_core: IR keymap rc-imon-pad not found [ 1780.459561][ T46] Registered IR keymap rc-empty [ 1780.467679][ T46] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1781.319654][T29142] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1781.368086][ T9] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1781.377927][ T9] em28xx 7-1:0.0: dvb set to bulk mode. [ 1781.388148][T16126] em28xx 7-1:0.0: Binding DVB extension [ 1781.392876][ T46] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1781.472547][ T5724] usb 7-1: USB disconnect, device number 34 [ 1781.504295][ T46] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1781.525398][ T5724] em28xx 7-1:0.0: Disconnecting em28xx [ 1781.605050][ T46] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input35 [ 1781.613092][T16126] em28xx 7-1:0.0: Registering input extension [ 1781.627203][T29201] random: crng reseeded on system resumption [ 1781.693984][ T5724] em28xx 7-1:0.0: Closing input extension [ 1781.741075][ T46] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:15> initialized [ 1781.766462][T29204] sctp: [Deprecated]: syz.6.6462 (pid 29204) Use of int in max_burst socket option deprecated. [ 1781.766462][T29204] Use struct sctp_assoc_value instead [ 1783.195729][T29223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1783.464290][T29223] siw: device registration error -23 [ 1784.465389][ T5724] em28xx 7-1:0.0: Freeing device [ 1784.469237][T29219] imon:send_packet: task interrupted [ 1784.534790][T29219] imon:send_packet: packet tx failed (-512) [ 1784.579229][T29219] imon:vfd_write: send packet #4 failed [ 1784.768849][ T9] usb 9-1: USB disconnect, device number 15 [ 1784.911253][T29236] random: crng reseeded on system resumption [ 1784.933985][T29236] Restarting kernel threads ... [ 1784.939431][T29236] Done restarting kernel threads. [ 1784.973832][T16126] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1785.332615][T29241] sctp: [Deprecated]: syz.8.6474 (pid 29241) Use of int in max_burst socket option deprecated. [ 1785.332615][T29241] Use struct sctp_assoc_value instead [ 1785.474430][T16126] usb 7-1: Using ep0 maxpacket: 16 [ 1785.486164][T16126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1785.501987][T16126] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1785.519171][T16126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.728007][T16126] usb 7-1: Product: syz [ 1785.732785][T16126] usb 7-1: Manufacturer: syz [ 1785.738984][T16126] usb 7-1: SerialNumber: syz [ 1785.761436][T16126] usb 7-1: config 0 descriptor?? [ 1785.784892][T16126] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1785.816902][T16126] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1786.136820][ T5724] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1786.284693][T29264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6481'. [ 1786.632069][T29266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6482'. [ 1786.682599][T29266] siw: device registration error -23 [ 1786.803418][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 1787.076117][ T5724] usb 6-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 1787.078815][T16126] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1787.086936][ T5724] usb 6-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1787.086971][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1787.087007][ T5724] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1787.087033][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.089377][ T5724] usb 6-1: config 0 descriptor?? [ 1787.412890][T29275] fuse: Unknown parameter 'use00000000000000000000' [ 1787.493462][ T46] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1788.017514][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1788.162601][T16126] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1788.264298][T16126] em28xx 7-1:0.0: board has no eeprom [ 1788.747378][T29276] block device autoloading is deprecated and will be removed. [ 1788.865168][T29280] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1789.293297][ T46] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.594947][T16126] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1789.637077][T16126] em28xx 7-1:0.0: dvb set to bulk mode. [ 1789.739693][ T5616] em28xx 7-1:0.0: Binding DVB extension [ 1790.938704][ T46] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1790.950576][ T46] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1790.961776][ T46] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1791.016178][ T46] usb 9-1: string descriptor 0 read error: -71 [ 1791.025559][ T46] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1791.033792][T16126] usb 7-1: USB disconnect, device number 35 [ 1791.129746][T29286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 1791.161722][T16126] em28xx 7-1:0.0: Disconnecting em28xx [ 1791.192529][ T5616] em28xx 7-1:0.0: Registering input extension [ 1791.211015][T16126] em28xx 7-1:0.0: Closing input extension [ 1791.244598][T16126] em28xx 7-1:0.0: Freeing device [ 1791.293400][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.331606][T29286] siw: device registration error -23 [ 1791.458052][T29291] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6491'. [ 1791.474293][ T46] usb 9-1: can't set config #155, error -71 [ 1791.516336][ T46] usb 9-1: USB disconnect, device number 16 [ 1791.546809][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.555206][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.598400][ T5724] usb 6-1: string descriptor 0 read error: -71 [ 1791.883562][ T50] Bluetooth: hci7: unexpected subevent 0x0a length: 57 > 30 [ 1791.908714][ T5724] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1792.074610][T29308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6493'. [ 1792.316549][ T5724] usb 6-1: USB disconnect, device number 2 [ 1792.435617][T29312] lo speed is unknown, defaulting to 1000 [ 1793.897610][T16126] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1793.988573][T29329] lo speed is unknown, defaulting to 1000 [ 1794.063454][T16126] usb 9-1: Using ep0 maxpacket: 32 [ 1794.071844][T16126] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.085106][T16126] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1794.654743][ T5724] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 1794.862376][ T5724] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1794.907310][ T5724] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1794.920245][ T5724] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1794.935185][ T5724] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1794.946097][ T5724] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1794.957428][ T5724] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1794.973039][ T5724] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1794.989522][ T5724] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1795.022364][ T5724] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1795.050222][T16126] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1795.050561][ T5724] usb 7-1: string descriptor 0 read error: -22 [ 1795.062260][T16126] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1795.068385][ T5724] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1795.085649][T16126] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1795.101026][T16126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.123130][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.181370][ T5724] adutux 7-1:168.0: interrupt endpoints not found [ 1795.305792][T29341] random: crng reseeded on system resumption [ 1795.322716][T29341] Restarting kernel threads ... [ 1795.329614][T29341] Done restarting kernel threads. [ 1795.342034][T29341] sctp: [Deprecated]: syz.1.6506 (pid 29341) Use of int in max_burst socket option deprecated. [ 1795.342034][T29341] Use struct sctp_assoc_value instead [ 1795.396048][ T5724] usb 7-1: USB disconnect, device number 36 [ 1795.511219][T16126] usb 9-1: Product: syz [ 1795.519475][T16126] usb 9-1: Manufacturer: syz [ 1795.524545][T16126] usb 9-1: SerialNumber: syz [ 1795.542118][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1795.554289][T16126] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input38 [ 1795.809720][T16126] imon:send_packet: packet tx failed (-71) [ 1795.834252][T16126] imon 9-1:155.0: panel buttons/knobs setup failed [ 1795.842903][T16126] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1795.853534][T16126] (id 0x00) [ 1796.853571][ T8388] Bluetooth: hci4: Frame reassembly failed (-84) [ 1798.489469][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 1798.523656][T15165] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1798.626629][T29358] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6512'. [ 1799.323469][T16126] rc_core: IR keymap rc-imon-pad not found [ 1799.329636][T16126] Registered IR keymap rc-empty [ 1799.338147][T16126] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1799.351874][T16126] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1799.372491][T16126] imon:send_packet: packet tx failed (-71) [ 1799.426069][T16126] imon 9-1:155.0: remote input dev register failed [ 1799.452052][T16126] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 1800.374713][T29371] random: crng reseeded on system resumption [ 1800.417237][T16126] imon 9-1:155.0: unable to initialize intf0, err 0 [ 1800.458122][T16126] imon:imon_probe: failed to initialize context! [ 1800.476245][T16126] imon 9-1:155.0: unable to register, err -19 [ 1800.521953][T29371] sctp: [Deprecated]: syz.1.6517 (pid 29371) Use of int in max_burst socket option deprecated. [ 1800.521953][T29371] Use struct sctp_assoc_value instead [ 1800.596343][T16126] usb 9-1: USB disconnect, device number 17 [ 1800.803579][ T5616] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1801.803487][ T5616] usb 6-1: Using ep0 maxpacket: 32 [ 1801.831314][ T5616] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.853767][ T5616] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1801.884139][ T5616] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1801.913524][ T5616] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1801.946230][ T5616] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1801.963377][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.983880][ T5616] usb 6-1: Product: syz [ 1801.988241][ T5616] usb 6-1: Manufacturer: syz [ 1801.993067][ T5616] usb 6-1: SerialNumber: syz [ 1802.026471][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1802.055521][ T5616] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input40 [ 1802.253438][ T5616] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1802.264478][ T5616] (id 0x00) [ 1802.323462][ T5616] rc_core: IR keymap rc-imon-pad not found [ 1802.329734][ T5616] Registered IR keymap rc-empty [ 1802.335431][ T5616] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1802.349189][ T5616] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1802.445098][ T5616] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1802.459401][ T5616] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input41 [ 1802.475365][ T5616] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:3> initialized [ 1802.806091][ T29] audit: type=1800 audit(1785117796.484:5164): pid=29394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6525" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1802.938707][T29402] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6526'. [ 1804.082563][ T5739] usb 6-1: USB disconnect, device number 3 [ 1804.745055][ T46] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1804.755978][ T5732] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1804.787586][ T5724] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1804.823424][T15165] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 1804.830417][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1804.872907][ T5724] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1804.923945][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1804.937658][ T46] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.949675][ T5732] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1804.967124][ T46] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1804.980635][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.000885][ T5732] usb 2-1: Product: syz [ 1805.005386][ T46] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1805.016708][ T5732] usb 2-1: Manufacturer: syz [ 1805.021726][ T5732] usb 2-1: SerialNumber: syz [ 1805.028737][ T46] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1805.049873][ T5732] usb 2-1: config 0 descriptor?? [ 1805.067858][ T5732] ch341 2-1:0.0: ch341-uart converter detected [ 1805.084548][ T46] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1805.096702][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.108751][ T46] usb 9-1: Product: syz [ 1805.117157][ T46] usb 9-1: Manufacturer: syz [ 1805.124144][ T46] usb 9-1: SerialNumber: syz [ 1805.336504][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1805.355252][ T46] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input42 [ 1805.803409][ T46] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1805.811810][ T46] (id 0x00) [ 1805.883697][ T46] rc_core: IR keymap rc-imon-pad not found [ 1805.889600][ T46] Registered IR keymap rc-empty [ 1805.895475][ T46] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1805.905843][ T46] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1806.098092][ T46] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1806.120903][ T46] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input43 [ 1806.182517][ T5732] ch341-uart ttyUSB0: failed to read break control: -71 [ 1806.208704][ T5732] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1806.232007][ T46] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:18> initialized [ 1806.255096][T29436] lo speed is unknown, defaulting to 1000 [ 1806.256477][ T5732] usb 2-1: USB disconnect, device number 53 [ 1806.317489][ T5732] ch341 2-1:0.0: device disconnected [ 1806.481921][T29443] tipc: Enabling of bearer rejected, failed to enable media [ 1806.822238][T29453] fuse: fd is not a fuse device [ 1807.004061][ T5732] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1807.007233][T29458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1807.353995][ T5732] usb 7-1: Using ep0 maxpacket: 8 [ 1807.381907][ T5732] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.421832][ T5732] usb 7-1: config 0 has no interfaces? [ 1807.434615][ T5732] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1807.451463][T29458] loop5: detected capacity change from 0 to 7 [ 1807.459411][ T5732] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1807.479672][ T5732] usb 7-1: Product: syz [ 1807.491120][ T5732] usb 7-1: Manufacturer: syz [ 1807.507371][ T5732] usb 7-1: SerialNumber: syz [ 1807.534289][ T5732] usb 7-1: config 0 descriptor?? [ 1807.714757][T29458] Dev loop5: unable to read RDB block 7 [ 1807.732812][T29458] loop5: unable to read partition table [ 1807.814399][T29458] loop5: partition table beyond EOD, truncated [ 1807.854954][T29458] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5) [ 1807.915991][T29463] Dev loop5: unable to read RDB block 7 [ 1807.928170][T29463] loop5: unable to read partition table [ 1807.941152][T29463] loop5: partition table beyond EOD, truncated [ 1807.956124][T29463] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5) [ 1808.325937][T29471] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6541'. [ 1808.595080][ T5732] usb 9-1: USB disconnect, device number 18 [ 1808.756224][T29473] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6544'. [ 1808.779184][T29473] 0{X功: renamed from gretap0 [ 1808.801085][T29473] 0{X功: entered allmulticast mode [ 1808.833036][T29473] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1809.073580][ T46] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1809.188541][T16126] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1809.245467][T16126] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1809.419335][ T46] usb 2-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 1809.526909][ T46] usb 2-1: config 0 interface 0 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1809.688972][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1809.819504][ T46] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1810.075983][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1810.128254][ T46] usb 2-1: Product: syz [ 1810.140937][ T5739] usb 7-1: USB disconnect, device number 37 [ 1810.166139][ T46] usb 2-1: Manufacturer: syz [ 1810.209020][ T46] usb 2-1: SerialNumber: syz [ 1810.239392][ T46] usb 2-1: config 0 descriptor?? [ 1810.335985][T29494] Bluetooth: MGMT ver 1.23 [ 1810.380770][T29494] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 1810.529004][ T46] usb 2-1: no audio or video endpoints found [ 1810.579287][ T46] usb 2-1: USB disconnect, device number 54 [ 1811.014578][ T5732] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1811.049008][T29501] lo speed is unknown, defaulting to 1000 [ 1811.438866][ T5732] usb 7-1: Using ep0 maxpacket: 16 [ 1811.471744][ T5732] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1811.514497][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.590650][ T5732] usb 7-1: Product: syz [ 1811.596765][ T5732] usb 7-1: Manufacturer: syz [ 1811.601419][ T5732] usb 7-1: SerialNumber: syz [ 1811.638407][ T5732] usb 7-1: config 0 descriptor?? [ 1811.652497][ T5732] usb 7-1: selecting invalid altsetting 1 [ 1811.658805][ T5732] technisat-usb2: could not set alternate setting to 0 [ 1811.883899][ T5732] technisat-usb2: firmware version: 0.0 [ 1811.910696][ T5732] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1812.363030][T29517] fuse: Bad value for 'fd' [ 1812.398035][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1812.415467][ T5732] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1812.433500][ T5732] usb 7-1: media controller created [ 1812.443087][T29518] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1812.451049][ T5732] technisat-usb2: i2c-error: out failed 53 = -22 [ 1812.495089][ T5732] dvb-usb: MAC address reading failed. [ 1812.536942][T29499] technisat-usb2: i2c-error: out failed 00 = -22 [ 1812.578566][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1812.768658][ T5732] DVB: Unable to find symbol stv090x_attach() [ 1812.812506][ T5732] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1813.004364][T29528] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6558'. [ 1813.594753][ T5732] rc_core: IR keymap rc-technisat-usb2 not found [ 1813.616133][ T5732] Registered IR keymap rc-empty [ 1813.637726][ T5732] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1813.681829][ T5732] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input44 [ 1813.962051][ T5732] dvb-usb: schedule remote query interval to 100 msecs. [ 1814.069670][ T5732] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1814.126703][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1814.311886][ T5739] dvb-usb: error -71 while querying for an remote control event. [ 1814.436537][ T5732] usb 7-1: USB disconnect, device number 38 [ 1814.589132][ T5746] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1814.644451][ T5746] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1814.808169][ T5732] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1815.281475][T15165] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 1815.321071][ T5732] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1815.457537][T29569] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6572'. [ 1815.472877][ T5732] usb 7-1: device descriptor read/64, error -71 [ 1815.541194][T29570] tipc: Enabling of bearer rejected, failed to enable media [ 1815.754068][ T5732] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1815.933684][ T5732] usb 7-1: device descriptor read/64, error -71 [ 1816.133795][ T5732] usb usb7-port1: attempt power cycle [ 1816.437561][T29577] lo speed is unknown, defaulting to 1000 [ 1816.531621][T29584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6576'. [ 1816.592304][T29585] siw: device registration error -23 [ 1816.733435][ T5732] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1817.384353][ T5732] usb 7-1: device descriptor read/8, error -71 [ 1817.564323][T29592] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1817.677073][T29592] 0{X功: renamed from gretap0 [ 1817.708567][T29592] 0{X功: entered allmulticast mode [ 1817.729003][T29592] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1817.872556][T29594] tap0: tun_chr_ioctl cmd 2147767520 [ 1818.353425][ T5732] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1818.374611][ T5732] usb 7-1: Using ep0 maxpacket: 16 [ 1818.390401][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1818.420477][T29613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1818.433771][ T5739] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1818.546988][ T5732] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1818.630524][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.660881][ T5739] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1818.720852][ T5732] usb 7-1: Product: syz [ 1818.739792][ T5739] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1818.756188][ T5732] usb 7-1: Manufacturer: syz [ 1818.796101][ T5732] usb 7-1: SerialNumber: syz [ 1818.809764][ T5739] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1818.853525][T16174] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1818.888487][ T5739] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1818.945705][ T5732] usb 7-1: config 0 descriptor?? [ 1818.961433][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1819.011683][ T5732] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1819.029975][ T5739] usb 2-1: Product: syz [ 1819.043741][ T5732] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1819.050023][ T5739] usb 2-1: Manufacturer: syz [ 1819.054778][T16174] usb 6-1: device descriptor read/64, error -71 [ 1819.077940][ T5739] usb 2-1: SerialNumber: syz [ 1819.106337][ T5739] usb 2-1: config 0 descriptor?? [ 1819.129451][ T5739] usb 2-1: selecting invalid altsetting 0 [ 1819.313607][T16174] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1819.316128][T29619] CIFS: VFS: UNC: path must begin with // or \\ [ 1819.375931][T29619] Malformed UNC in devname [ 1819.375931][T29619] [ 1819.390104][T29619] CIFS: VFS: Malformed UNC in devname [ 1819.421642][T29606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=29606 comm=syz.1.6585 [ 1819.466924][ T5739] usb 2-1: USB disconnect, device number 55 [ 1819.475663][T16174] usb 6-1: device descriptor read/64, error -71 [ 1819.484291][ T29] audit: type=1400 audit(1785117813.154:5165): avc: denied { bind } for pid=29618 comm="syz.3.6590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1819.615511][ T5732] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1819.624241][T16174] usb usb6-port1: attempt power cycle [ 1819.973531][T16174] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1819.995746][T16174] usb 6-1: device descriptor read/8, error -71 [ 1820.042861][ T5732] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1820.068242][ T5732] em28xx 7-1:0.0: board has no eeprom [ 1820.233743][T16174] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1820.264622][T16174] usb 6-1: device descriptor read/8, error -71 [ 1820.384313][T16174] usb usb6-port1: unable to enumerate USB device [ 1820.577007][T29646] lo speed is unknown, defaulting to 1000 [ 1821.114651][T29651] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6600'. [ 1821.228130][ T5732] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1821.778528][T29604] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1821.827375][ T5732] em28xx 7-1:0.0: dvb set to bulk mode. [ 1821.852484][ T5739] em28xx 7-1:0.0: Binding DVB extension [ 1822.080401][ T5739] em28xx 7-1:0.0: Registering input extension [ 1822.100080][ T5746] usb 7-1: USB disconnect, device number 42 [ 1822.151097][ T5746] em28xx 7-1:0.0: Disconnecting em28xx [ 1822.193940][ T5746] em28xx 7-1:0.0: Closing input extension [ 1822.370647][ T5746] em28xx 7-1:0.0: Freeing device [ 1822.768017][ T5746] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1823.081744][ T5746] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1823.094009][ T5746] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1823.159035][ T5746] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1823.200442][ T5746] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1823.242451][ T5746] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1823.282854][ T5746] usb 7-1: Product: syz [ 1823.297797][ T5746] usb 7-1: Manufacturer: syz [ 1823.322245][ T5746] usb 7-1: SerialNumber: syz [ 1823.354325][ T5746] usb 7-1: config 0 descriptor?? [ 1823.377811][ T29] audit: type=1400 audit(1785117817.044:5166): avc: denied { write } for pid=29675 comm="syz.1.6608" name="usb_gadget" dev="configfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1823.424900][ T5746] usb 7-1: selecting invalid altsetting 0 [ 1823.506403][ T29] audit: type=1400 audit(1785117817.044:5167): avc: denied { add_name } for pid=29675 comm="syz.1.6608" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1823.645053][ T29] audit: type=1400 audit(1785117817.054:5168): avc: denied { create } for pid=29675 comm="syz.1.6608" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1823.729792][T29665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=29665 comm=syz.6.6605 [ 1823.827524][ T5746] usb 7-1: USB disconnect, device number 43 [ 1823.892227][ T29] audit: type=1400 audit(1785117817.174:5169): avc: denied { write } for pid=29675 comm="syz.1.6608" name="usb_gadget" dev="configfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1823.968668][ T29] audit: type=1400 audit(1785117817.174:5170): avc: denied { remove_name } for pid=29675 comm="syz.1.6608" name="g1" dev="configfs" ino=93949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1824.137500][ T29] audit: type=1400 audit(1785117817.174:5171): avc: denied { rmdir } for pid=29675 comm="syz.1.6608" name="g1" dev="configfs" ino=93949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1824.433473][ T5616] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1824.607892][ T5616] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1824.640899][ T5616] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1824.654196][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1824.670923][ T5616] usb 6-1: Product: syz [ 1824.681528][ T5616] usb 6-1: Manufacturer: syz [ 1824.690709][ T5616] usb 6-1: SerialNumber: syz [ 1824.783476][ T5732] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1824.951833][ T5616] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1824.964499][ T5732] usb 7-1: Using ep0 maxpacket: 16 [ 1824.976432][ T5732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1824.992275][ T5732] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1825.004637][ T5732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.023385][ T5732] usb 7-1: Product: syz [ 1825.027792][ T5732] usb 7-1: Manufacturer: syz [ 1825.048041][ T5732] usb 7-1: SerialNumber: syz [ 1825.060864][ T5732] usb 7-1: config 0 descriptor?? [ 1825.093055][ T5732] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1825.133818][ T5732] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1825.423651][ T29] audit: type=1400 audit(1785117818.914:5172): avc: denied { read write } for pid=29684 comm="syz.5.6611" name="lp0" dev="devtmpfs" ino=3402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1825.465600][ T29] audit: type=1400 audit(1785117818.914:5173): avc: denied { open } for pid=29684 comm="syz.5.6611" path="/dev/usb/lp0" dev="devtmpfs" ino=3402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1825.691428][ T5732] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1826.079530][T29712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6623'. [ 1826.142892][ T5732] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1826.168770][ T5732] em28xx 7-1:0.0: board has no eeprom [ 1826.544376][ T5616] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1826.711042][ T5616] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1826.736580][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.758821][ T5616] usb 2-1: Product: syz [ 1826.775245][ T5616] usb 2-1: Manufacturer: syz [ 1826.782411][ T5616] usb 2-1: SerialNumber: syz [ 1826.802794][ T5616] usb 2-1: config 0 descriptor?? [ 1827.032071][ T5616] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1827.303570][T29689] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1827.364136][ T5732] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1827.373789][ T5732] em28xx 7-1:0.0: dvb set to bulk mode. [ 1827.379462][T16174] em28xx 7-1:0.0: Binding DVB extension [ 1827.459525][ T5732] usb 7-1: USB disconnect, device number 44 [ 1827.673133][ T5732] em28xx 7-1:0.0: Disconnecting em28xx [ 1828.382239][T16174] em28xx 7-1:0.0: Registering input extension [ 1828.405257][ T5732] em28xx 7-1:0.0: Closing input extension [ 1828.481784][ T5732] em28xx 7-1:0.0: Freeing device [ 1828.490314][ T5724] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1828.514247][ T5724] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1828.642742][ T5616] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1828.684291][ T5616] usb 2-1: USB disconnect, device number 56 [ 1829.501684][T15165] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 1830.115876][T29773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6640'. [ 1830.412759][ T5724] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1830.477106][T29777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6645'. [ 1830.573568][ T5724] usb 7-1: Using ep0 maxpacket: 16 [ 1830.591769][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1830.617081][ T5724] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1830.632358][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.665041][ T5724] usb 7-1: Product: syz [ 1830.676752][ T5724] usb 7-1: Manufacturer: syz [ 1830.690076][ T5724] usb 7-1: SerialNumber: syz [ 1830.767995][ T5724] usb 7-1: config 0 descriptor?? [ 1830.862399][ T5724] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1830.884800][ T5724] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1831.478018][ T5724] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1831.806689][ T5746] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1831.912611][T16174] usb 6-1: USB disconnect, device number 8 [ 1831.925548][T16174] usblp0: removed [ 1831.951367][ T5724] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1831.971186][ T5724] em28xx 7-1:0.0: board has no eeprom [ 1832.003398][T29807] Invalid ELF header magic: != ELF [ 1832.176822][ T5746] usb 9-1: Using ep0 maxpacket: 16 [ 1832.406526][ T5746] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1832.430406][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1832.462099][ T5746] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1832.476495][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.496605][ T5746] usb 9-1: Product: syz [ 1832.538064][ T5746] usb 9-1: Manufacturer: syz [ 1832.565420][ T5746] usb 9-1: SerialNumber: syz [ 1832.639161][ T5746] usb 9-1: config 0 descriptor?? [ 1832.673306][ T5746] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1832.710521][ T5746] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1833.281854][ T5746] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1833.299051][ T5746] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1833.465986][T29810] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 1833.523754][ T5724] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1833.540832][ T5724] em28xx 7-1:0.0: dvb set to bulk mode. [ 1833.559010][ T5732] em28xx 7-1:0.0: Binding DVB extension [ 1833.573827][ T5724] usb 7-1: USB disconnect, device number 45 [ 1833.597882][ T5724] em28xx 7-1:0.0: Disconnecting em28xx [ 1833.785578][ T5732] em28xx 7-1:0.0: Registering input extension [ 1833.798872][ T5724] em28xx 7-1:0.0: Closing input extension [ 1833.856013][ T5724] em28xx 7-1:0.0: Freeing device [ 1834.370532][ T5746] em28xx 9-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1834.580284][ T5746] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1834.610283][T15165] Bluetooth: hci6: command 0x0406 tx timeout [ 1834.629799][ T5746] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1834.666501][ T5746] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1834.721952][ T5746] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1834.765662][ T5746] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1834.803153][ T5746] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1834.840303][ T5746] usb 9-1: USB disconnect, device number 19 [ 1836.545991][T29854] Invalid ELF header magic: != ELF [ 1837.469958][T29870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6677'. [ 1837.509578][T29870] siw: device registration error -23 [ 1838.643517][ T5746] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1838.774626][ T5746] usb 9-1: device descriptor read/64, error -71 [ 1838.888989][T29886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6683'. [ 1839.645074][ T29] audit: type=1400 audit(1785117833.314:5174): avc: denied { connect } for pid=29887 comm="syz.1.6685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1839.663446][ T5746] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1839.711902][ T50] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 1839.813740][ T5746] usb 9-1: device descriptor read/64, error -71 [ 1839.949655][T29893] dns_resolver: Unsupported content type (89) [ 1840.050162][T29895] siw: device registration error -23 [ 1840.938740][ T5746] usb usb9-port1: attempt power cycle [ 1841.283590][ T5746] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1841.316966][ T5746] usb 9-1: device descriptor read/8, error -71 [ 1842.063643][ T5746] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1842.105292][ T5746] usb 9-1: Using ep0 maxpacket: 32 [ 1842.125778][ T5746] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1842.175660][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1842.189093][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1842.201230][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1842.216214][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1842.247516][ T5746] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1842.275364][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.287403][T29907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6692'. [ 1842.299242][T29907] siw: device registration error -23 [ 1842.310995][ T5746] usb 9-1: Product: syz [ 1842.351752][ T5746] usb 9-1: Manufacturer: syz [ 1842.369704][ T5746] usb 9-1: SerialNumber: syz [ 1842.398147][ T5746] usb 9-1: config 0 descriptor?? [ 1842.784013][T16126] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1842.844758][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1842.881320][ T5746] input input49: Device does not respond to id packet M [ 1842.902075][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1842.975422][T29917] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6696'. [ 1843.665852][ T5746] input input49: Device does not respond to id packet P [ 1843.675491][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1843.682171][ T5746] input input49: Device does not respond to id packet B [ 1843.729981][T16126] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1843.751646][T16126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.777801][T16126] usb 2-1: Product: syz [ 1843.791596][T16126] usb 2-1: Manufacturer: syz [ 1843.806790][T16126] usb 2-1: SerialNumber: syz [ 1843.845618][T16126] usb 2-1: config 0 descriptor?? [ 1843.867273][T16126] ch341 2-1:0.0: ch341-uart converter detected [ 1843.911298][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1843.921515][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1843.947333][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1843.958450][ T5746] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1843.980996][ T5746] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input49 [ 1844.039118][ T29] audit: type=1400 audit(1785117837.714:5175): avc: denied { unmount } for pid=27535 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1844.066459][ T5746] usb 9-1: USB disconnect, device number 23 [ 1845.541231][T16126] ch341-uart ttyUSB0: failed to read break control: -71 [ 1845.709501][T16126] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1845.969054][T16126] usb 2-1: USB disconnect, device number 57 [ 1845.985738][T16126] ch341 2-1:0.0: device disconnected [ 1846.209409][T29940] syzkaller0: entered promiscuous mode [ 1846.217049][T29940] syzkaller0: entered allmulticast mode [ 1846.259364][T29946] fuse: fd is not a fuse device [ 1846.264929][T29940] tipc: Started in network mode [ 1846.270022][T29940] tipc: Node identity 2a21f9ac8e5f, cluster identity 4711 [ 1846.297232][T29940] tipc: Enabled bearer , priority 0 [ 1846.447241][T29940] tipc: Resetting bearer [ 1847.283037][T29936] tipc: Resetting bearer [ 1847.405036][T29955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6708'. [ 1847.798592][T29936] tipc: Disabling bearer [ 1848.018194][ T5746] tipc: Node number set to 2759784876 [ 1848.424869][T29965] Invalid ELF header magic: != ELF [ 1849.235541][ T5746] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1849.373660][ T5724] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1849.575567][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 1849.609651][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1849.658961][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1849.715147][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1849.761147][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1849.821943][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1849.841564][ T5724] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1849.851849][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.855323][T29979] fuse: fd is not a fuse device [ 1849.860517][ T5724] usb 7-1: Product: syz [ 1849.921994][ T5724] usb 7-1: Manufacturer: syz [ 1849.932090][ T5724] usb 7-1: SerialNumber: syz [ 1849.949995][ T5724] usb 7-1: config 0 descriptor?? [ 1849.962613][ T5746] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1849.973522][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.981520][ T5746] usb 9-1: Product: syz [ 1849.987424][ T5746] usb 9-1: Manufacturer: syz [ 1849.995544][ T5746] usb 9-1: SerialNumber: syz [ 1850.288291][T29987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6721'. [ 1850.371358][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1850.387371][ T5724] input input50: Device does not respond to id packet M [ 1850.460171][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1850.502924][ T5724] input input50: Device does not respond to id packet P [ 1850.603822][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1850.666592][ T5724] input input50: Device does not respond to id packet B [ 1850.778454][ T46] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1850.843615][ T46] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1850.926659][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1850.958468][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1850.986507][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1851.014487][ T5724] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1851.029403][T29991] fido_id[29991]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1851.049891][ T5746] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1851.063191][ T5746] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1851.072488][ T5724] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input50 [ 1851.088041][ T5746] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1851.108841][ T5746] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1851.144993][ T5746] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1851.170801][ T5724] usb 7-1: USB disconnect, device number 46 [ 1851.200245][ T5746] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1851.566565][T30003] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1852.289437][ T46] usb 9-1: USB disconnect, device number 24 [ 1852.703758][T30016] fuse: Bad value for 'fd' [ 1852.986014][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.992420][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.372997][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1854.383092][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1854.383130][ T50] Tainted: [L]=SOFTLOCKUP [ 1854.383140][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1854.383158][ T50] Workqueue: hci6 hci_rx_work [ 1854.383187][ T50] Call Trace: [ 1854.383196][ T50] [ 1854.383205][ T50] dump_stack_lvl+0x100/0x190 [ 1854.383239][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 1854.383277][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 1854.383318][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1854.383357][ T50] ? find_held_lock+0x2b/0x80 [ 1854.383391][ T50] ? kobject_add_internal+0x25f/0x930 [ 1854.383424][ T50] ? kobject_add_internal+0x25f/0x930 [ 1854.383460][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 1854.383495][ T50] kobject_add_internal+0x2c8/0x930 [ 1854.383533][ T50] kobject_add+0x16a/0x1e0 [ 1854.383566][ T50] ? __pfx_kobject_add+0x10/0x10 [ 1854.383596][ T50] ? class_to_subsys+0x10f/0x150 [ 1854.383642][ T50] ? kobject_put+0xb9/0x640 [ 1854.383676][ T50] ? _raw_spin_unlock+0x28/0x50 [ 1854.383721][ T50] device_add+0x294/0x1970 [ 1854.383754][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 1854.383791][ T50] ? __pfx_device_add+0x10/0x10 [ 1854.383824][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 1854.383859][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 1854.383889][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 1854.383922][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1854.383945][ T50] ? hci_event_packet+0x186/0xcd0 [ 1854.383967][ T50] ? hci_event_packet+0x186/0xcd0 [ 1854.383997][ T50] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 1854.384026][ T50] ? skb_pull_data+0x15f/0x1e0 [ 1854.384064][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 1854.384091][ T50] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1854.384123][ T50] hci_event_packet+0x51c/0xcd0 [ 1854.384144][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1854.384170][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 1854.384198][ T50] ? kcov_remote_start+0x384/0x670 [ 1854.384226][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 1854.384259][ T50] hci_rx_work+0x451/0xfc0 [ 1854.384289][ T50] process_one_work+0xa23/0x1940 [ 1854.384328][ T50] ? __pfx_process_one_work+0x10/0x10 [ 1854.384364][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 1854.384393][ T50] worker_thread+0x5ef/0xe50 [ 1854.384430][ T50] ? kthread+0x13a/0x450 [ 1854.384452][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1854.384476][ T50] kthread+0x370/0x450 [ 1854.384498][ T50] ? __pfx_kthread+0x10/0x10 [ 1854.384523][ T50] ret_from_fork+0x72b/0xd50 [ 1854.384557][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1854.384591][ T50] ? __switch_to+0x800/0x10f0 [ 1854.384615][ T50] ? __pfx_kthread+0x10/0x10 [ 1854.384647][ T50] ret_from_fork_asm+0x1a/0x30 [ 1854.384696][ T50] [ 1854.422514][ T29] audit: type=1400 audit(1785117848.094:5176): avc: denied { read append } for pid=30030 comm="syz.8.6738" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1854.427171][ T50] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1854.701071][ T50] Bluetooth: hci6: failed to register connection device [ 1854.871777][T30045] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1854.923574][T30045] 1{X功: renamed from 30{X功 (while UP) [ 1854.932834][T30045] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1855.011531][T30042] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1855.217612][T30042] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1855.776499][T30042] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1855.827687][T30042] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1855.838912][T30042] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1855.860082][T30042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1855.868343][T30042] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1855.890601][T30042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1855.902822][T30042] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1855.929858][T30042] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1855.949247][T30042] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1855.982737][T30042] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1855.999198][T30042] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1856.015056][T30042] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1856.044840][T30042] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1856.323577][ T5732] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1856.690088][ T5732] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1856.740313][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.785678][ T5732] usb 6-1: Product: syz [ 1856.812238][ T5732] usb 6-1: Manufacturer: syz [ 1856.844859][ T5732] usb 6-1: SerialNumber: syz [ 1857.053473][ T46] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1857.064227][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1857.233420][ T46] usb 7-1: Using ep0 maxpacket: 8 [ 1857.254316][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1857.285722][ T46] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1857.303463][ T46] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1857.319584][ T46] usb 7-1: Product: syz [ 1857.324183][ T46] usb 7-1: Manufacturer: syz [ 1857.328812][ T46] usb 7-1: SerialNumber: syz [ 1857.476931][T30093] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1857.554320][ T46] usb 7-1: palm_os_3_probe - error -32 getting connection information [ 1857.564099][ T46] visor 7-1:1.0: probe with driver visor failed with error -32 [ 1857.580425][ T46] usb 7-1: USB disconnect, device number 47 [ 1857.603283][ T5732] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1857.623065][ T5732] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1857.637776][ T5732] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1857.655164][ T5732] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1857.863741][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1857.869801][T15165] Bluetooth: hci3: command 0x0406 tx timeout [ 1857.944092][T15165] Bluetooth: hci1: command 0x0406 tx timeout [ 1857.950134][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 1858.024109][ T50] Bluetooth: hci7: command 0x0c1a tx timeout [ 1858.745208][ T30] INFO: task syz.2.6055:27749 blocked for more than 143 seconds. [ 1858.778943][ T30] Tainted: G L syzkaller #0 [ 1858.900444][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1858.946818][ T30] task:syz.2.6055 state:D stack:28136 pid:27749 tgid:27747 ppid:18896 task_flags:0x400040 flags:0x00080002 [ 1859.059283][ T30] Call Trace: [ 1859.066262][ T46] usb 6-1: USB disconnect, device number 9 [ 1859.080990][ T30] [ 1859.089801][ T30] __schedule+0x125c/0x6730 [ 1859.117107][ T30] ? irqentry_exit+0x24d/0xa00 [ 1859.124398][ T30] ? __pfx___schedule+0x10/0x10 [ 1859.130726][ T30] ? find_held_lock+0x2b/0x80 [ 1859.141353][ T30] ? schedule+0x225/0x2c0 [ 1859.148104][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1859.162287][ T30] schedule+0xdd/0x2c0 [ 1859.166544][ T30] schedule_preempt_disabled+0x13/0x30 [ 1859.172038][ T30] __mutex_lock+0xccc/0x1bd0 [ 1859.181506][ T30] ? nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 1859.189010][ T30] ? __kasan_slab_alloc+0x89/0x90 [ 1859.194347][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1859.199424][ T30] ? kmalloc_reserve+0xf9/0x350 [ 1859.204570][ T30] ? skb_put+0x138/0x180 [ 1859.210544][ T30] ? __nlmsg_put+0x152/0x1c0 [ 1859.215639][ T30] ? nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 1859.221960][ T30] nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 1859.228480][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1859.235585][ T30] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1859.242612][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 1859.250025][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1859.256512][ T30] ? genl_get_cmd+0x3e7/0x760 [ 1859.261236][ T30] ? __dev_queue_xmit+0xa33/0x4970 [ 1859.266478][ T30] ? __radix_tree_lookup+0x217/0x2b0 [ 1859.271856][ T30] genl_rcv_msg+0x560/0x800 [ 1859.276550][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1859.281972][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1859.288713][ T30] netlink_rcv_skb+0x159/0x420 [ 1859.297321][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1859.302392][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1859.309086][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1859.317570][ T30] genl_rcv+0x28/0x40 [ 1859.321634][ T30] netlink_unicast+0x585/0x850 [ 1859.326877][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1859.332241][ T30] netlink_sendmsg+0x8b0/0xda0 [ 1859.337995][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1859.344214][ T30] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1859.350801][ T30] ____sys_sendmsg+0xa4d/0xbe0 [ 1859.359456][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1859.366857][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1859.372249][ T30] ___sys_sendmsg+0x190/0x1e0 [ 1859.378464][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1859.390645][ T30] ? __lock_acquire+0x49f/0x1a40 [ 1859.396973][ T30] __sys_sendmsg+0x160/0x210 [ 1859.401648][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1859.410747][ T30] do_syscall_64+0x115/0x870 [ 1859.418694][ T30] ? clear_bhb_loop+0x40/0x90 [ 1859.423647][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.429618][ T30] RIP: 0033:0x7f1de559de99 [ 1859.434472][ T30] RSP: 002b:00007f1de646a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1859.443088][ T30] RAX: ffffffffffffffda RBX: 00007f1de5825fa0 RCX: 00007f1de559de99 [ 1859.451464][ T30] RDX: 0000000004004990 RSI: 0000200000000040 RDI: 0000000000000003 [ 1859.459788][ T30] RBP: 00007f1de5633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1859.472732][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.484726][ T30] R13: 00007f1de5826038 R14: 00007f1de5825fa0 R15: 00007ffef2088bb8 [ 1859.492787][ T30] [ 1859.499781][ T30] [ 1859.499781][ T30] Showing all locks held in the system: [ 1859.544075][ T30] 1 lock held by ksoftirqd/0/15: [ 1859.549050][ T30] 1 lock held by khungtaskd/30: [ 1859.555829][ T30] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1859.566961][ T30] 2 locks held by getty/5372: [ 1859.571652][ T30] #0: ffff88823bf6a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1859.585756][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1859.596140][ T30] 4 locks held by kworker/u8:12/6263: [ 1859.601610][ T30] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1859.611882][ T30] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 1859.626247][ T30] #2: ffff8880b8526298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 1859.638970][ T30] #3: ffffffff9b9f26d8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x4b0 [ 1859.650648][ T30] 2 locks held by syz.9.4498/23209: [ 1859.656143][ T30] #0: ffffffff90b4e068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1859.666848][ T30] #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1859.679226][ T30] 2 locks held by syz.2.6055/27749: [ 1859.686245][ T30] #0: ffffffff90b4e068 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1859.700074][ T30] #1: ffffffff8f0723e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13f/0x7c0 [ 1859.712775][ T30] 1 lock held by syz.1.6757/30098: [ 1859.718126][ T30] [ 1859.722755][ T30] ============================================= [ 1859.722755][ T30] [ 1859.736716][ T30] NMI backtrace for cpu 1 [ 1859.736737][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.736769][ T30] Tainted: [L]=SOFTLOCKUP [ 1859.736777][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1859.736791][ T30] Call Trace: [ 1859.736798][ T30] [ 1859.736808][ T30] dump_stack_lvl+0x100/0x190 [ 1859.736840][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1859.736871][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1859.736904][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1859.736941][ T30] sys_info+0x141/0x190 [ 1859.736969][ T30] watchdog+0xcb1/0x1030 [ 1859.737000][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1859.737023][ T30] ? __pfx_watchdog+0x10/0x10 [ 1859.737049][ T30] ? __kthread_parkme+0x18c/0x230 [ 1859.737084][ T30] ? kthread+0x13a/0x450 [ 1859.737105][ T30] ? __pfx_watchdog+0x10/0x10 [ 1859.737129][ T30] kthread+0x370/0x450 [ 1859.737149][ T30] ? __pfx_kthread+0x10/0x10 [ 1859.737176][ T30] ret_from_fork+0x72b/0xd50 [ 1859.737209][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1859.737241][ T30] ? __switch_to+0x800/0x10f0 [ 1859.737264][ T30] ? __pfx_kthread+0x10/0x10 [ 1859.737289][ T30] ret_from_fork_asm+0x1a/0x30 [ 1859.737335][ T30] [ 1859.737356][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1859.870473][ C0] NMI backtrace for cpu 0 [ 1859.870491][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.870519][ C0] Tainted: [L]=SOFTLOCKUP [ 1859.870526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1859.870539][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1859.870565][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1859.870584][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1859.870599][ C0] RAX: 0000000007524cd3 RBX: ffffffff8e891480 RCX: ffffffff8bbb22d5 [ 1859.870613][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 1859.870625][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1859.870638][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1859.870655][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1859.870668][ C0] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1859.870686][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1859.870699][ C0] CR2: 0000200000303030 CR3: 000000007bbc2000 CR4: 00000000003526f0 [ 1859.870712][ C0] Call Trace: [ 1859.870718][ C0] [ 1859.870725][ C0] default_idle+0x9/0x10 [ 1859.870748][ C0] default_idle_call+0x6c/0xb0 [ 1859.870772][ C0] do_idle+0x3a7/0x5b0 [ 1859.870799][ C0] ? __pfx_do_idle+0x10/0x10 [ 1859.870824][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1859.870855][ C0] cpu_startup_entry+0x4f/0x60 [ 1859.870882][ C0] rest_init+0x251/0x260 [ 1859.870906][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1859.870934][ C0] start_kernel+0x48e/0x490 [ 1859.870958][ C0] x86_64_start_reservations+0x24/0x30 [ 1859.870984][ C0] x86_64_start_kernel+0x12b/0x130 [ 1859.871009][ C0] common_startup_64+0x13e/0x158 [ 1859.871046][ C0] [ 1859.973872][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1859.987210][T15165] Bluetooth: hci3: command 0x0406 tx timeout [ 1860.037012][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 1860.041679][T15165] Bluetooth: hci1: command 0x0406 tx timeout [ 1860.098679][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1860.105531][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.116197][ T30] Tainted: [L]=SOFTLOCKUP [ 1860.120509][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1860.130551][ T30] Call Trace: [ 1860.133823][ T30] [ 1860.136746][ T30] dump_stack_lvl+0x100/0x190 [ 1860.141423][ T30] vpanic+0x552/0x970 [ 1860.145400][ T30] ? __pfx_vpanic+0x10/0x10 [ 1860.149897][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1860.156057][ T30] panic+0xd1/0xe0 [ 1860.159769][ T30] ? __pfx_panic+0x10/0x10 [ 1860.164179][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1860.170333][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1860.176497][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1860.182662][ T30] ? watchdog.cold+0x1ec/0x234 [ 1860.187428][ T30] ? watchdog+0xcc1/0x1030 [ 1860.191850][ T30] watchdog.cold+0x1fd/0x234 [ 1860.196447][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1860.202246][ T30] ? __pfx_watchdog+0x10/0x10 [ 1860.206921][ T30] ? __kthread_parkme+0x18c/0x230 [ 1860.211948][ T30] ? kthread+0x13a/0x450 [ 1860.216181][ T30] ? __pfx_watchdog+0x10/0x10 [ 1860.220856][ T30] kthread+0x370/0x450 [ 1860.224917][ T30] ? __pfx_kthread+0x10/0x10 [ 1860.229499][ T30] ret_from_fork+0x72b/0xd50 [ 1860.234092][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1860.239209][ T30] ? __switch_to+0x800/0x10f0 [ 1860.243880][ T30] ? __pfx_kthread+0x10/0x10 [ 1860.248462][ T30] ret_from_fork_asm+0x1a/0x30 [ 1860.253237][ T30] [ 1860.256479][ T30] Kernel Offset: disabled [ 1860.260784][ T30] Rebooting in 86400 seconds..