last executing test programs: 2m52.701287203s ago: executing program 2 (id=2317): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="000227bd7000ffdbdf2511000000140003800800030022d4000008000300090000001000068004000500080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x0, 0x7, {{0x19, 0x4, 0x1, 0x19, 0x64, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast2, @private=0xa010102, {[@ssrr={0x89, 0x7, 0xd, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x3c, 0x0, 0xe, [0x2, 0x3, 0x6, 0x1, 0xab, 0x3]}, @generic={0x83, 0xc, "934a832d0fec53cf91df"}, @lsrr={0x83, 0x17, 0x53, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @broadcast]}, @end]}}}}}) connect(r4, &(0x7f00000005c0)=@can={0x1d, r5}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r6, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000000c0)=@sr0, 0xee01, &(0x7f0000000280)) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newsa={0x100, 0x10, 0xad0107152c5a2e33, 0x0, 0x0, {{@in=@dev, @in6=@private2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_val={0x10}]}, 0x100}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m51.162826565s ago: executing program 2 (id=2320): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0xa0c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xffe, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r5 = syz_usb_connect$cdc_ecm(0x3, 0xee, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x1, 0x1, 0x4, 0x20, 0x49, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xb1, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfffc, 0x7, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x52, 0x3, 0x7, 0x5}, @mdlm_detail={0x76, 0x24, 0x13, 0x3, "773c239b4db69384187cc331696225d1e0dd2922c24dccf34e28987de7b35f0d062341f0f96eaeb20f853b72cd7ed657ba067a851f4e0009e7eca528d44bc2a571a2aa8320c3294f72637102c185290235a0b8c54b2f8069e8b5df828a0c9839ba1d6ec7d358d5763df2696ec7f09a55fae6"}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x8, 0xc}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x4, 0x3e, 0x3, 0x3, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0xe, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0xa, 0xc}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x10, 0xc, 0x0, 0x10, 0x4}, 0x29, &(0x7f0000000480)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x20, 0x6, 0xa19, 0xf00, 0x5, [0xcf, 0xff3f00, 0xffc000, 0xff3f00, 0x0, 0xff0000]}]}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42d}}, {0xa5, &(0x7f0000000500)=@string={0xa5, 0x3, "bc8fc9e6b6694d462e0cd166addb9a8aa84252daa1fcac7e99275b9cd6a9536c11ac07e68c0327df23c624768e9fb76c33bda9f0cc1e750137f88639876b15d4a8ccdd323939b221f3842ec81615780865ca6615f027372eaf671c5e551eb52c235868014b5d62807e5dcafa11d025c27072fe039607b4e50f905e368d49572bf48be0648075b5807a30d6340811034fe870c91ef2c01999fa11a93ebe7f59d749e8f3"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xf8, &(0x7f0000000600)=@string={0xf8, 0x3, "56932acf68660de20ec674d9074e9637858c81cce4c7414d681b3eaa5857927711524f3a7d6b1b25e73a49d1ad98d00bbff0bb7bef62a9971b645da0834d44afe3c190937e8e1732c9d1f7c2f2495894f02e6be6c295653506ad723f18e095f05d5c5a9927fd80c254651c5dcb697f9ee58333549022c87229a105946b3f5030e8994ec40ebb2f27a9b5529a4294c8e5fbb7a2ed0dec83f41f4c885eb7167b104520a5d0f11794b08b0eb0ef145df2f5b8b16a73efb46d7792f4f7b276ef8aaabd62b9325108bc772c517138832dee3a8a806e2abdb41c3dcbc736da9c514f3ef7514f3a18b8edae65622e149d06276a15bf32b7320a"}}, {0x43, &(0x7f0000000700)=@string={0x43, 0x3, "29f1afafa9c67dcc6627182ecee6796ba888a0df29b1fc19970b2173bff16f3174c28b8bdec66514ca0764ea4f51a0433f24f68f4d927d3984a9c61d2c1851310c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4001}}, {0xd9, &(0x7f0000000800)=@string={0xd9, 0x3, "79545e8456b371a5776ba7594fb92764575303d88e5f040cc3ea3c0383453608ed8cf2fa4647e6bc6135b3b1efc6be3a0dcd49670f9d28d13a1b96ef3cea91758daf5a2fbc89ea2104dbb940f4cf6d9a532cd9c16d22d280019b0d2f7fa46473113dcf76c0c0785dd724615fbbfd4a1ad855defbe5c3a0d1533b12b6428e0f743f7391dad28b615311cecade58ee497a543194ffa7a37cda42eda1e866a5e85b41c96dd3228ad7a90d25f807f5eb26e817842198cbcf3e7f8ec897829920c79aeffcd958cb0dfee533f98a7f812f1943dbec26e56ada3b"}}, {0x29, &(0x7f0000000900)=@string={0x29, 0x3, "7e1f7656f923168352e9c26b0fbc40bf93454ecfc755c3ba55ccc355a380896d1a903c1ed86bcb"}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000a00)={0x0, 0x31, 0x57, {0x57, 0xb, "040c0905cf46d30e6731c7edd9315a516ec6e4908d8fce0444d0ad514698e44a8dbd58380c9cb21ecd14aef883de7ae2381a5d188cb60bf999d306f6d32d32a7746b6cabb1975a485827993f91151f2219021201ec"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x0, 0x9, 0x60, "d5b8714b5fdf7d51b0363521487b84a92404a7cc357eb4b7b17ad3ded02a0373faa1d5dd860e7f98fecdef7428c88c9f337c2ffb8d6b5bc435e3a080844e33cff74fdd17109ba676359807997e8bc088efea01b84cf011b2bc91a173c8e375cb"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000bc0)={0x0, 0x8, 0x1}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)={0x40, 0xd, 0x2c, {0x2c, 0x22, "e75b32dee782456036ba73cf47a88a34d2dd23ee24eb0010da0300000069cf2fa3d3d4832d0e95ce301f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m48.568429289s ago: executing program 2 (id=2333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYRES32=0x0, @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000857d92b7d54277093c2b692213bc53f9d14192f757add8c6b9a8a1b74fbbdc4c198f156693672535624cc075eb0046244131a15d31"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000e00b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2m47.450985848s ago: executing program 2 (id=2337): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESHEX], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102394, 0x18ffa) socket$inet6(0xa, 0x80002, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x8, 0x8}) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xbf}}, 0x42) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') 2m46.834084627s ago: executing program 2 (id=2344): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x102) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='kv', 0x2) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r3, r0, 0x2) 2m45.662306929s ago: executing program 2 (id=2347): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000040)=0x100006, 0x4) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x87}], 0x1, 0x10120, 0x0) sendto$inet(r2, 0x0, 0x0, 0x40080, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f0000000240)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4094}, 0x800) recvmmsg(r3, &(0x7f0000004780)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000001880)=[{&(0x7f0000000080)=""/189, 0xbd}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/82, 0x52}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/248, 0xf8}, {&(0x7f0000001580)=""/119, 0x77}, {&(0x7f0000001600)=""/53, 0x35}, {&(0x7f0000001640)=""/91, 0x5b}, {&(0x7f00000016c0)=""/209, 0xd1}, {&(0x7f00000017c0)=""/145, 0x91}], 0xa, &(0x7f0000001ec0)=""/131, 0x83}}, {{&(0x7f0000001a00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001a80)=""/71, 0x47}, {&(0x7f0000001b00)=""/147, 0x93}, {&(0x7f0000001bc0)=""/232, 0xe8}, {&(0x7f0000001cc0)=""/1, 0x1}, {&(0x7f0000001d00)=""/182, 0xb6}, {&(0x7f0000001dc0)=""/218, 0xda}, {&(0x7f0000004940)=""/248, 0xf8}], 0x7, &(0x7f0000002040)=""/95, 0x5f}, 0x7f}, {{&(0x7f00000020c0)=@hci, 0x80, &(0x7f0000004300)=[{&(0x7f0000002140)=""/189, 0xbd}, {&(0x7f0000004a80)=""/4111, 0x100f}, {&(0x7f0000003200)=""/143, 0x8f}, {&(0x7f00000032c0)=""/27, 0x1b}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x5, &(0x7f0000004380)=""/168, 0xa8}, 0x9}, {{&(0x7f0000004440)=@l2, 0x80, &(0x7f0000004700)=[{&(0x7f00000048c0)=""/127, 0x7f}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000004580)=""/194, 0xc2}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/16, 0x10}], 0x5}, 0x2}], 0x4, 0x40, &(0x7f0000004880)={0x0, 0x3938700}) 2m30.486691815s ago: executing program 32 (id=2347): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000040)=0x100006, 0x4) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x87}], 0x1, 0x10120, 0x0) sendto$inet(r2, 0x0, 0x0, 0x40080, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f0000000240)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4094}, 0x800) recvmmsg(r3, &(0x7f0000004780)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000001880)=[{&(0x7f0000000080)=""/189, 0xbd}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/82, 0x52}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/248, 0xf8}, {&(0x7f0000001580)=""/119, 0x77}, {&(0x7f0000001600)=""/53, 0x35}, {&(0x7f0000001640)=""/91, 0x5b}, {&(0x7f00000016c0)=""/209, 0xd1}, {&(0x7f00000017c0)=""/145, 0x91}], 0xa, &(0x7f0000001ec0)=""/131, 0x83}}, {{&(0x7f0000001a00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001a80)=""/71, 0x47}, {&(0x7f0000001b00)=""/147, 0x93}, {&(0x7f0000001bc0)=""/232, 0xe8}, {&(0x7f0000001cc0)=""/1, 0x1}, {&(0x7f0000001d00)=""/182, 0xb6}, {&(0x7f0000001dc0)=""/218, 0xda}, {&(0x7f0000004940)=""/248, 0xf8}], 0x7, &(0x7f0000002040)=""/95, 0x5f}, 0x7f}, {{&(0x7f00000020c0)=@hci, 0x80, &(0x7f0000004300)=[{&(0x7f0000002140)=""/189, 0xbd}, {&(0x7f0000004a80)=""/4111, 0x100f}, {&(0x7f0000003200)=""/143, 0x8f}, {&(0x7f00000032c0)=""/27, 0x1b}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x5, &(0x7f0000004380)=""/168, 0xa8}, 0x9}, {{&(0x7f0000004440)=@l2, 0x80, &(0x7f0000004700)=[{&(0x7f00000048c0)=""/127, 0x7f}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000004580)=""/194, 0xc2}, {&(0x7f0000004680)=""/64, 0x40}, {&(0x7f00000046c0)=""/16, 0x10}], 0x5}, 0x2}], 0x4, 0x40, &(0x7f0000004880)={0x0, 0x3938700}) 26.200898503s ago: executing program 1 (id=2925): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.97498229s ago: executing program 1 (id=2926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 25.808543743s ago: executing program 1 (id=2927): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r2, &(0x7f0000000540)={0x2}, 0x8, 0x800) fstat(r1, 0x0) 24.85106622s ago: executing program 1 (id=2932): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r0 = open(&(0x7f0000000240)='./file1\x00', 0xed7011cca21f99e8, 0x78e22799f4a46f46) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48814}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0xf9, 0x48, 0x1, 0x40, @mcast2, @private1, 0x10, 0x8, 0x1598, 0x9}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24.663772587s ago: executing program 1 (id=2934): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 24.08529767s ago: executing program 1 (id=2940): memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)}, 0x2000000}, {{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/40, 0x28}, {&(0x7f00000007c0)=""/36, 0x24}, {&(0x7f0000000800)=""/174, 0xae}, {&(0x7f00000008c0)=""/62, 0x3e}, {&(0x7f0000000900)=""/115, 0x73}], 0x9, &(0x7f0000000a40)=""/4, 0x4}, 0x96f7}], 0x3, 0x101, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 12.148959448s ago: executing program 3 (id=2986): openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi0\x00', 0x141001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 11.914976112s ago: executing program 3 (id=2988): socket$inet6(0xa, 0x2, 0x0) unshare(0x28000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 10.479041998s ago: executing program 3 (id=2997): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) mount(&(0x7f0000000500)=@filename='devtmpfs\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x112, 0x1, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='0x40', 0x4) mkdir(0x0, 0x1ff) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') 9.627108609s ago: executing program 0 (id=2999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x2b, 0x80, '\x00', 0xdc}, {0xa1, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0xa, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x10, 0x80, 0xe, '\x00', 0x7f}, {0x8, 0xc, 0x80, '\x00', 0x7f}, {0x2, 0x6, 0x6}, {0x1, 0x23, 0x5, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 8.946597718s ago: executing program 0 (id=3003): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 8.635431853s ago: executing program 0 (id=3004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x20}, {0x8, 0x10, 0x40100000002, 0xfffffffffffffff9, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000ed8000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 8.590395616s ago: executing program 3 (id=3005): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8, 0x2}, {0x8, 0x8}, {0x0, 0xc037, 0x4}, {0x0, 0xff, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x16, 0x0, 0x1}) 7.734946381s ago: executing program 0 (id=3008): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18) writev(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b905d6f66b826", 0xe}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x106f) 7.73439056s ago: executing program 3 (id=3009): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x8030b5, 0x100, 0x2, 0x11f}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, 0x0, &(0x7f0000000480)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r8 = syz_open_pts(r7, 0xa0200) dup3(r8, r7, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x0, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22}, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r6, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"f882d543", 0x1, 0xfe, 0xc, 0x81, 0xfff, "9ce9fce2d5266a66648c6bc80cddc9", "475db870", "23b7ccd5", "49f1c254", ["6c3b4ce3c6d24af6f6a32225", "7d4d525203343d977279eab1", "c3aa72012fddf68f10e44caf", "1ab197ba72d09427060016dd"]}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) 6.786478749s ago: executing program 0 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 6.775012962s ago: executing program 4 (id=3011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.414965403s ago: executing program 3 (id=3012): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.339494302s ago: executing program 4 (id=3013): fanotify_init(0x8, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x1000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) lseek(0xffffffffffffffff, 0x2, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) 6.295051005s ago: executing program 5 (id=3014): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 4.538234865s ago: executing program 5 (id=3015): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)="0200"/52, 0x34) 4.526938068s ago: executing program 4 (id=3016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) 3.754982374s ago: executing program 4 (id=3017): set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 3.754715463s ago: executing program 5 (id=3018): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffefffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x55b1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.999388444s ago: executing program 0 (id=3019): syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa090400"], 0x0) 2.736271098s ago: executing program 5 (id=3020): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',8Z', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ftruncate(r0, 0x2000000) 1.526170765s ago: executing program 4 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000104010800000000000000020000000108000540000000010500010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 662.988784ms ago: executing program 4 (id=3022): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x1, 0x180, 0x2000000000000004, 0x10, 0xed, 0x50, 0x7fffffffffffe, 0x2, 0x0, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0xa5, 0xbdb], 0x40000, 0x4000}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 218.970802ms ago: executing program 5 (id=3023): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @desc1}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x0, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x33, 0x0, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 0s ago: executing program 5 (id=3024): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) sendto$packet(r4, &(0x7f0000000300)="75ba967a12cbb09a9d83d6f0a640f3c7196494fbf908a7ed5f4fa3f6e018d2a7ab37bbc75b94cccf4ef5f2392ac04a1812d51174e319b5c998285255d9044a84b695a8c3cc1e09b0f90c146da76434373f8b5cf30923101fa79e16210fbdfd6c801fa501", 0x64, 0x40001, &(0x7f0000000440)={0x11, 0xf5, r2, 0x1, 0xf7, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 621.270151][T14882] binder: BC_ACQUIRE_RESULT not supported [ 621.293176][ T5799] [drm:udl_init] *ERROR* Selecting channel failed [ 621.318108][T14882] binder: 14873:14882 ioctl c0306201 2000000004c0 returned -22 [ 621.350216][T14884] vlan2: entered promiscuous mode [ 621.377203][T14884] macvlan0: entered promiscuous mode [ 621.442433][ T5799] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 621.491471][ T5799] [drm] Initialized udl on minor 2 [ 621.525411][ T5799] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 621.713177][ T5799] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 621.730139][ T5714] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 621.744883][ T5799] usb 4-1: USB disconnect, device number 68 [ 621.755978][ T5714] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 621.947404][ T5713] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 622.104287][ T5624] Bluetooth: hci0: unexpected event for opcode 0x6b2f [ 622.111218][ T5713] usb 6-1: Using ep0 maxpacket: 8 [ 622.118540][ T5713] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 622.146801][ T5713] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 622.183983][ T5713] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 622.217351][ T5713] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 622.253610][ T5713] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 622.294698][ T5713] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.364672][ T5713] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.408737][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.426308][T14903] bond7: invalid ARP target 0.0.0.0 specified for addition [ 622.465659][T14903] bond7: option arp_ip_target: invalid value (0) [ 622.495565][T14903] bond7 (unregistering): Released all slaves [ 622.657818][ T5713] usb 6-1: GET_CAPABILITIES returned 0 [ 622.690626][ T5713] usbtmc 6-1:16.0: can't read capabilities [ 622.872748][ T5799] usb 6-1: USB disconnect, device number 2 [ 624.518517][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.524975][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.831188][T14948] ip6erspan0: entered allmulticast mode [ 624.879979][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'. [ 624.918258][ T5799] IPVS: starting estimator thread 0... [ 625.029042][T14957] IPVS: using max 78 ests per chain, 187200 per kthread [ 625.258924][T14912] kexec: Could not allocate control_code_buffer [ 625.323456][ T29] audit: type=1400 audit(625.280:1469): avc: denied { write } for pid=14937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.619646][ T5714] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 625.750262][ T29] audit: type=1400 audit(625.710:1470): avc: denied { write } for pid=14983 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.821461][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.869765][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.925128][ T5714] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 625.979126][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.034165][ T5714] usb 2-1: config 0 descriptor?? [ 626.397260][T15000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15000 comm=syz.5.2520 [ 626.410929][T15000] ffs_data_put(): freeing [ 626.617501][ T5799] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 626.670747][ T29] audit: type=1400 audit(626.630:1471): avc: denied { bind } for pid=14969 comm="syz.1.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 626.810644][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short [ 626.845472][ T5799] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.903751][ T5799] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.020687][ T5799] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 627.062358][ T29] audit: type=1400 audit(627.010:1472): avc: denied { write } for pid=14986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.105103][ T5714] usbhid 2-1:0.0: can't add hid device: -71 [ 627.111370][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.150208][ T5714] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 627.164506][ T5799] usb 1-1: Product: syz [ 627.190027][ T5799] usb 1-1: Manufacturer: syz [ 627.220828][ T5714] usb 2-1: USB disconnect, device number 58 [ 627.234568][ T5799] usb 1-1: SerialNumber: syz [ 627.353596][ T29] audit: type=1400 audit(627.310:1473): avc: denied { write } for pid=15020 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.438155][T15023] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.2524'. [ 627.504624][T14996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14996 comm=syz.0.2521 [ 627.567025][T15026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15026 comm=syz.0.2521 [ 627.797106][ T5799] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.832167][ T5799] usb 1-1: MIDIStreaming interface descriptor not found [ 627.857417][ T5714] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 628.027712][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 628.041090][ T5799] usb 1-1: USB disconnect, device number 73 [ 628.080520][ T5714] usb 6-1: config 0 has no interfaces? [ 628.155942][ T5714] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 628.221358][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.287638][ T5714] usb 6-1: Product: syz [ 628.321235][ T5714] usb 6-1: Manufacturer: syz [ 628.356466][ T5714] usb 6-1: SerialNumber: syz [ 628.398375][ T5714] usb 6-1: config 0 descriptor?? [ 628.469416][ T29] audit: type=1400 audit(628.430:1474): avc: denied { write } for pid=15029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.953733][ T29] audit: type=1400 audit(628.910:1475): avc: denied { write } for pid=15076 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.257741][ T5799] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 629.451945][ T5799] usb 4-1: device descriptor read/64, error -71 [ 629.642394][T15097] x_tables: duplicate underflow at hook 2 [ 629.727867][ T5799] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 629.918318][ T5799] usb 4-1: device descriptor read/64, error -71 [ 630.080202][ T5799] usb usb4-port1: attempt power cycle [ 630.154608][ T29] audit: type=1400 audit(630.110:1476): avc: denied { write } for pid=15087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.406246][ T29] audit: type=1400 audit(630.360:1477): avc: denied { write } for pid=15110 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.487373][ T5799] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 631.353066][ T5799] usb 4-1: device descriptor read/8, error -71 [ 631.542494][ T5714] usb 6-1: USB disconnect, device number 3 [ 631.628098][ T5799] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 631.703964][ T5799] usb 4-1: device descriptor read/8, error -71 [ 631.858053][ T5799] usb usb4-port1: unable to enumerate USB device [ 632.019984][ T10] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 632.201700][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.542925][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.720792][T15150] binder: 15149:15150 ioctl c0306201 200000000080 returned -14 [ 632.733700][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 632.771152][T15150] binder: 15149:15150 ioctl c0306201 2000000003c0 returned -14 [ 632.783497][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.819792][ T10] usb 5-1: config 0 descriptor?? [ 633.167227][T15160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2551'. [ 633.176740][T15161] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 633.264076][T15161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 633.320977][T15167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.328254][T15167] IPv6: NLM_F_CREATE should be set when creating new route [ 633.335494][T15167] IPv6: NLM_F_CREATE should be set when creating new route [ 633.344160][ T10] isku 0003:1E7D:319C.0014: unknown main item tag 0x4 [ 633.377549][ T10] isku 0003:1E7D:319C.0014: unknown main item tag 0x4 [ 633.396436][ T10] isku 0003:1E7D:319C.0014: item fetching failed at offset 3/7 [ 633.416808][T15169] vlan2: entered promiscuous mode [ 633.425330][ T10] isku 0003:1E7D:319C.0014: parse failed [ 633.459629][ T10] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -22 [ 633.481362][T15169] bond4: entered promiscuous mode [ 633.551542][T15169] vlan2: entered allmulticast mode [ 633.586371][T15169] bond4: entered allmulticast mode [ 633.784631][T15161] bond4: (slave bridge2): making interface the new active one [ 633.818223][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 633.833052][T15161] bridge2: entered promiscuous mode [ 633.860407][T15161] bridge2: entered allmulticast mode [ 633.892228][T15161] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 633.979912][ T10] usb 6-1: device descriptor read/64, error -71 [ 634.237386][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 634.387426][ T10] usb 6-1: device descriptor read/64, error -71 [ 634.517542][ T10] usb usb6-port1: attempt power cycle [ 634.877378][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 634.928152][ T10] usb 6-1: device descriptor read/8, error -71 [ 635.187491][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 635.228029][ T10] usb 6-1: device descriptor read/8, error -71 [ 635.357634][ T10] usb usb6-port1: unable to enumerate USB device [ 635.382341][ T5714] usb 5-1: USB disconnect, device number 75 [ 635.797418][ T5714] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 635.937351][ T5714] usb 5-1: device descriptor read/64, error -71 [ 636.178331][ T5714] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 636.317338][ T5714] usb 5-1: device descriptor read/64, error -71 [ 636.427691][ T5714] usb usb5-port1: attempt power cycle [ 636.777344][ T5714] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 636.985142][ T5714] usb 5-1: device descriptor read/8, error -71 [ 637.058608][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 637.300403][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 637.328663][ T5714] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 637.344797][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.369141][ T5714] usb 5-1: device descriptor read/8, error -71 [ 637.388428][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 637.430042][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.447249][ T10] usb 6-1: config 0 descriptor?? [ 637.497969][ T5714] usb usb5-port1: unable to enumerate USB device [ 637.521555][ T5713] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 637.579460][T15212] FAULT_INJECTION: forcing a failure. [ 637.579460][T15212] name failslab, interval 1, probability 0, space 0, times 0 [ 637.592969][T15212] CPU: 0 UID: 0 PID: 15212 Comm: syz.3.2566 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.592990][T15212] Tainted: [L]=SOFTLOCKUP [ 637.592994][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.593001][T15212] Call Trace: [ 637.593005][T15212] [ 637.593009][T15212] dump_stack_lvl+0x100/0x190 [ 637.593028][T15212] should_fail_ex.cold+0x5/0xa [ 637.593040][T15212] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 637.593060][T15212] should_failslab+0xc2/0x120 [ 637.593075][T15212] kmem_cache_alloc_noprof+0x91/0x6a0 [ 637.593089][T15212] ? skb_clone+0x190/0x400 [ 637.593106][T15212] skb_clone+0x190/0x400 [ 637.593120][T15212] netlink_deliver_tap+0xaed/0xcc0 [ 637.593141][T15212] netlink_unicast+0x6a5/0x850 [ 637.593155][T15212] ? __pfx_netlink_unicast+0x10/0x10 [ 637.593166][T15212] ? genl_rcv_msg+0x4be/0x800 [ 637.593182][T15212] netlink_ack+0x655/0xb80 [ 637.593197][T15212] netlink_rcv_skb+0x333/0x420 [ 637.593208][T15212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.593222][T15212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.593238][T15212] ? netlink_deliver_tap+0x1ae/0xcc0 [ 637.593258][T15212] genl_rcv+0x28/0x40 [ 637.593269][T15212] netlink_unicast+0x585/0x850 [ 637.593282][T15212] ? __pfx_netlink_unicast+0x10/0x10 [ 637.593293][T15212] ? __pfx_sock_has_perm+0x10/0x10 [ 637.593310][T15212] netlink_sendmsg+0x8b0/0xda0 [ 637.593324][T15212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.593337][T15212] ? selinux_socket_sendmsg+0x198/0x2f0 [ 637.593355][T15212] ____sys_sendmsg+0xa4d/0xbe0 [ 637.593371][T15212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.593383][T15212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.593413][T15212] ___sys_sendmsg+0x190/0x1e0 [ 637.593424][T15212] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.593434][T15212] ? __lock_acquire+0x49f/0x1a40 [ 637.593448][T15212] ? get_pid_task+0x106/0x250 [ 637.593474][T15212] __sys_sendmsg+0x160/0x210 [ 637.593488][T15212] ? __pfx___sys_sendmsg+0x10/0x10 [ 637.593509][T15212] do_syscall_64+0x115/0x870 [ 637.593523][T15212] ? clear_bhb_loop+0x40/0x90 [ 637.593536][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.593547][T15212] RIP: 0033:0x7fde6599e019 [ 637.593558][T15212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.593569][T15212] RSP: 002b:00007fde668f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.593580][T15212] RAX: ffffffffffffffda RBX: 00007fde65c25fa0 RCX: 00007fde6599e019 [ 637.593587][T15212] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 637.593593][T15212] RBP: 00007fde668f1090 R08: 0000000000000000 R09: 0000000000000000 [ 637.593599][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.593605][T15212] R13: 00007fde65c26038 R14: 00007fde65c25fa0 R15: 00007ffffa340ba8 [ 637.593620][T15212] [ 637.937477][ T5799] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 637.979437][ T5713] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 637.988795][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 637.996866][ T5713] usb 2-1: Product: syz [ 638.009021][ T5713] usb 2-1: config 0 descriptor?? [ 638.015549][ T5713] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 638.023698][ T5713] usb 2-1: Detected FT232H [ 638.088807][ T5799] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 638.097487][ T5799] usb 1-1: config 0 has no interface number 0 [ 638.105036][ T10] isku 0003:1E7D:319C.0015: unknown main item tag 0x4 [ 638.112248][ T10] isku 0003:1E7D:319C.0015: unknown main item tag 0x4 [ 638.119247][ T10] isku 0003:1E7D:319C.0015: item fetching failed at offset 3/7 [ 638.127214][ T10] isku 0003:1E7D:319C.0015: parse failed [ 638.132968][ T10] isku 0003:1E7D:319C.0015: probe with driver isku failed with error -22 [ 638.154345][ T5799] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.180578][ T5799] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 638.209950][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.221515][ T5713] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 638.238477][ T5799] usb 1-1: Product: syz [ 638.250314][ T5799] usb 1-1: Manufacturer: syz [ 638.302823][ T5799] usb 1-1: SerialNumber: syz [ 638.320584][ T5799] usb 1-1: config 0 descriptor?? [ 638.381263][ T5799] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 638.595252][T15227] netlink: 'syz.4.2571': attribute type 16 has an invalid length. [ 638.603199][T15227] netlink: 'syz.4.2571': attribute type 17 has an invalid length. [ 638.615462][T15227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 638.636751][T15229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2565'. [ 638.661212][ T5713] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 638.724168][T15229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2565'. [ 638.877987][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2565'. [ 638.981170][ T29] audit: type=1400 audit(638.930:1478): avc: denied { cmd } for pid=15209 comm="syz.0.2565" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 639.147395][ T5713] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 639.337617][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 639.347653][ T5713] usb 4-1: Using ep0 maxpacket: 32 [ 639.364230][ T5713] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 639.382041][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.409490][ T5713] usb 4-1: config 0 descriptor?? [ 639.433711][ T5713] as10x_usb: device has been detected [ 639.453950][ T5713] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 639.509016][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 639.531864][ T10] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 639.546796][ T5713] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 639.569847][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.609085][ T10] usb 5-1: config 1 has no interface number 0 [ 639.637111][ T10] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 639.700134][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 639.760009][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 639.804267][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 639.834926][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.854975][ T10] usb 5-1: Product: syz [ 639.875485][ T10] usb 5-1: Manufacturer: syz [ 639.895576][ T10] usb 5-1: SerialNumber: syz [ 639.903799][ T5713] as10x_usb: error during firmware upload part1 [ 639.935611][ T5713] Registered device nBox DVB-T Dongle [ 639.944689][ T5713] usb 4-1: USB disconnect, device number 73 [ 640.092719][ T5799] usb 2-1: USB disconnect, device number 59 [ 640.205927][ T5799] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 640.235677][ T5713] Unregistered device nBox DVB-T Dongle [ 640.250468][ T5713] as10x_usb: device has been disconnected [ 640.275724][ T5799] ftdi_sio 2-1:0.0: device disconnected [ 640.414483][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 640.541346][T15243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.552857][T15250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=15250 comm=syz.1.2574 [ 640.596313][ T5799] usb 1-1: USB disconnect, device number 74 [ 640.619126][T15243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.648684][ T10] usb 6-1: USB disconnect, device number 8 [ 640.670269][ T5799] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 641.115624][ T10] usb 5-1: USB disconnect, device number 80 [ 641.219903][T15272] vlan3: entered promiscuous mode [ 641.242415][T15272] hsr0: entered promiscuous mode [ 641.287240][T15272] vlan3: entered allmulticast mode [ 641.311569][T15272] hsr0: entered allmulticast mode [ 641.325210][T15272] hsr_slave_0: entered allmulticast mode [ 641.341619][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2581'. [ 641.368117][T15272] hsr_slave_1: entered allmulticast mode [ 641.418515][T15280] hsr_slave_0: left promiscuous mode [ 641.441381][T15280] hsr_slave_1: left promiscuous mode [ 641.467757][ T5713] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 642.329736][T15287] lo speed is unknown, defaulting to 1000 [ 642.337893][T15287] lo speed is unknown, defaulting to 1000 [ 642.344089][T15287] lo speed is unknown, defaulting to 1000 [ 642.350301][T15287] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 642.364639][T15287] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 642.381839][T15287] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 642.395470][T15287] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 642.414632][T15287] lo speed is unknown, defaulting to 1000 [ 642.421532][T15287] lo speed is unknown, defaulting to 1000 [ 642.428024][T15287] lo speed is unknown, defaulting to 1000 [ 642.436499][T15287] lo speed is unknown, defaulting to 1000 [ 642.443036][T15287] lo speed is unknown, defaulting to 1000 [ 642.479623][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 642.566227][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 642.654825][T15292] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2586'. [ 642.675264][ T5713] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 642.689381][ T29] audit: type=1400 audit(642.650:1479): avc: denied { watch watch_reads } for pid=15289 comm="syz.4.2586" path="pipe:[4689]" dev="pipefs" ino=4689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 642.716663][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.733151][ T5713] usb 2-1: Product: syz [ 642.741589][ T5713] usb 2-1: Manufacturer: syz [ 642.750898][ T5713] usb 2-1: SerialNumber: syz [ 642.763683][T15274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 642.793688][T15274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 642.817064][ T5713] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 642.918024][ T10] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 642.960823][ T5713] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 643.019886][ T5713] usbserial_generic 2-1:1.0: generic converter detected [ 643.090341][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.116547][ T5713] usb 2-1: generic converter now attached to ttyUSB0 [ 643.134141][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.166041][ T29] audit: type=1400 audit(643.120:1480): avc: denied { append } for pid=15302 comm="syz.3.2589" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 643.195905][ T5713] usb 2-1: USB disconnect, device number 60 [ 643.220731][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 643.253094][ T5713] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 643.278138][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.297936][ T5713] usbserial_generic 2-1:1.0: device disconnected [ 643.321547][ T10] usb 1-1: config 0 descriptor?? [ 643.404036][T15304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 643.414510][T15304] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 643.560910][T15304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.591621][T15304] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 643.639860][T15304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 643.667846][T15304] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 643.689801][T15304] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 643.724561][T15304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 644.624713][T15315] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2592'. [ 644.639435][ T10] isku 0003:1E7D:319C.0016: unknown main item tag 0x4 [ 644.664950][T15304] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 644.676673][ T10] isku 0003:1E7D:319C.0016: unknown main item tag 0x4 [ 644.698225][ T10] isku 0003:1E7D:319C.0016: item fetching failed at offset 3/7 [ 644.720161][ T10] isku 0003:1E7D:319C.0016: parse failed [ 644.733454][ T10] isku 0003:1E7D:319C.0016: probe with driver isku failed with error -22 [ 644.938870][T15304] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 645.224911][ T29] audit: type=1400 audit(645.180:1481): avc: denied { getopt } for pid=15302 comm="syz.3.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 645.254066][ T5624] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 645.266163][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 645.385886][T15329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.398560][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 645.416404][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 645.567520][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 645.589647][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.641272][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.651785][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 645.729950][ T4927] Bluetooth: hci5: command 0x0c1a tx timeout [ 645.778238][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.920274][ T4927] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 646.019622][T15345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.058382][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.184318][ T29] audit: type=1400 audit(646.060:1482): avc: denied { mounton } for pid=15349 comm="syz.1.2602" path="/proc/1777/cgroup" dev="proc" ino=51773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 646.213367][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.274183][ T10] usb 6-1: config 0 descriptor?? [ 646.367936][ T10] usb 6-1: can't set config #0, error -71 [ 646.426820][ T10] usb 6-1: USB disconnect, device number 9 [ 646.485480][T15357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15357 comm=syz.1.2603 [ 646.619577][T15358] lo speed is unknown, defaulting to 1000 [ 646.738061][ T186] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 646.937444][ T186] usb 5-1: Using ep0 maxpacket: 16 [ 646.949537][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 646.980342][ T186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 647.045528][ T186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.102158][T15366] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 647.140538][ T186] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 647.176269][ T186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.213337][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'. [ 647.238025][ T186] usb 5-1: config 0 descriptor?? [ 647.266367][T15375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2606'. [ 647.447368][ T10] usb 6-1: device descriptor read/64, error -71 [ 647.488080][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 647.697808][ T186] hid (null): unknown global tag 0xc [ 647.722872][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 647.728955][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 647.730787][ T186] lg-g15 0003:046D:C22E.0017: unknown main item tag 0x7 [ 647.730817][ T186] lg-g15 0003:046D:C22E.0017: unknown global tag 0xc [ 647.730827][ T186] lg-g15 0003:046D:C22E.0017: item 0 4 1 12 parsing failed [ 647.731112][ T186] lg-g15 0003:046D:C22E.0017: probe with driver lg-g15 failed with error -22 [ 647.852027][T15381] netlink: 'syz.3.2610': attribute type 2 has an invalid length. [ 647.853928][ T5799] usb 1-1: USB disconnect, device number 75 [ 647.870406][ T29] audit: type=1800 audit(647.820:1483): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2610" name="idVendor" dev="configfs" ino=51902 res=0 errno=0 [ 647.872561][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 647.877221][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 647.889995][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 647.890016][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.890028][ T10] usb 6-1: Product: syz [ 647.890038][ T10] usb 6-1: Manufacturer: syz [ 647.890048][ T10] usb 6-1: SerialNumber: syz [ 647.915954][T15356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.916164][T15356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.179157][ T10] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 648.182954][ T10] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 648.182976][ T10] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 648.182989][ T10] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 648.183045][ T10] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 648.183058][ T10] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 648.183070][ T10] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 648.187174][ T10] usb 6-1: failed to enable PITCH for EP 0x82 [ 648.910399][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 648.911662][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'. [ 648.946077][T15398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50628 sclass=netlink_route_socket pid=15398 comm=syz.0.2613 [ 649.082419][ T10] usb 6-1: USB disconnect, device number 11 [ 649.213829][ T4927] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 649.229934][T15395] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 649.620908][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 649.658076][ T186] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 649.828767][ T186] usb 4-1: Using ep0 maxpacket: 16 [ 649.846154][ T186] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 649.846183][ T186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.846195][ T186] usb 4-1: Product: syz [ 649.846205][ T186] usb 4-1: Manufacturer: syz [ 649.846214][ T186] usb 4-1: SerialNumber: syz [ 650.061595][ T186] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 650.063456][ T186] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 650.063599][ T186] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 650.063622][ T186] usb 4-1: media controller created [ 650.077155][ T186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.077779][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 650.155935][ T5714] usb 5-1: USB disconnect, device number 81 [ 650.208289][ T5799] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 650.230704][ T10] usb 6-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 650.232810][ T10] usb 6-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 650.232830][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.232842][ T10] usb 6-1: Product: syz [ 650.232852][ T10] usb 6-1: Manufacturer: syz [ 650.232861][ T10] usb 6-1: SerialNumber: syz [ 650.359152][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 650.359175][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.359195][ T5799] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 650.359209][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.360694][ T5799] usb 1-1: config 0 descriptor?? [ 650.456501][ T10] usb 6-1: USB disconnect, device number 12 [ 650.534935][ T186] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 650.562571][ T186] usb 4-1: USB disconnect, device number 74 [ 650.788313][ T5799] isku 0003:1E7D:319C.0018: unknown main item tag 0x4 [ 650.863797][ T5799] isku 0003:1E7D:319C.0018: unknown main item tag 0x4 [ 650.911378][ T5799] isku 0003:1E7D:319C.0018: item fetching failed at offset 3/7 [ 650.948636][ T5799] isku 0003:1E7D:319C.0018: parse failed [ 650.976510][ T5799] isku 0003:1E7D:319C.0018: probe with driver isku failed with error -22 [ 652.842737][T15487] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 652.891785][T15487] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 653.119472][ T5799] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 653.309838][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 653.352450][ T5799] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 653.394747][ T5799] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.449653][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.509309][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 653.562106][ T5799] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 653.591186][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.627193][ T5799] usb 5-1: Product: syz [ 653.649018][ T5799] usb 5-1: Manufacturer: syz [ 653.670931][ T5799] usb 5-1: SerialNumber: syz [ 653.694371][ T5799] usb 5-1: config 0 descriptor?? [ 653.720776][T15491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 653.949297][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.008649][ T5713] usb 1-1: USB disconnect, device number 76 [ 654.022913][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.085170][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.148198][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.194138][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.279498][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.342063][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.396530][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.450984][T15491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.502636][T15491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.490247][ T5799] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 655.530413][ T5799] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input40 [ 655.750420][ C0] powermate: config urb returned -71 [ 655.759377][ C0] powermate: config urb returned -71 [ 655.764843][ C0] powermate: config urb returned -71 [ 655.770292][ C0] powermate: config urb returned -71 [ 655.776327][ T5799] usb 5-1: USB disconnect, device number 82 [ 655.776363][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 656.197419][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 656.214437][T15536] openvswitch: netlink: Message has 4 unknown bytes. [ 656.360757][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 656.376420][T15524] team0 (unregistering): Port device team_slave_0 removed [ 656.435915][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 656.453561][T15524] team0 (unregistering): Port device team_slave_1 removed [ 656.490305][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 656.510729][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.525661][T15524] team0 (unregistering): Port device geneve1 removed [ 656.553646][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.593726][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.642950][ T10] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 656.660701][T15536] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2649'. [ 656.691323][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.762160][ T5799] bond_slave_1: entered promiscuous mode [ 656.774892][ T10] usb 2-1: Product: syz [ 656.790914][ T10] usb 2-1: Manufacturer: syz [ 656.800004][T15546] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 656.817739][ T10] usb 2-1: SerialNumber: syz [ 656.828158][T15546] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 656.968161][T13882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.009010][T13882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.070877][T13882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.149466][T15551] netlink: 'syz.4.2652': attribute type 23 has an invalid length. [ 657.213778][T15553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 657.268252][T15553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2653'. [ 657.272284][ T10] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 657.291299][ T10] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 657.305918][T15560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'. [ 657.374698][ T10] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 658.262441][ T10] usb 2-1: USB disconnect, device number 61 [ 658.303735][T15560] team0 (unregistering): Port device team_slave_0 removed [ 658.305078][T15564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.306672][T15564] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2655'. [ 658.315946][T15565] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2655'. [ 658.330975][T15560] team0 (unregistering): Port device team_slave_1 removed [ 658.413588][ T9731] udevd[9731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 658.498432][T15574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.857352][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 658.906938][T15588] WARNING! power/level is deprecated; use power/control instead [ 658.917059][ T5713] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 659.031090][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 659.050054][ T10] usb 5-1: config 4 has an invalid interface number: 67 but max is 0 [ 659.073657][ T10] usb 5-1: config 4 has no interface number 0 [ 659.085230][ T5713] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 659.185753][ T10] usb 5-1: config 4 interface 67 has no altsetting 0 [ 659.192949][ T5713] usb 6-1: config 0 has no interface number 0 [ 659.205919][ T5713] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 57464, setting to 64 [ 659.369308][ T10] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 659.388510][ T5713] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 659.405615][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.426067][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.454086][ T10] usb 5-1: Product: syz [ 659.473574][ T5713] usb 6-1: Product: syz [ 659.482755][ T10] usb 5-1: Manufacturer: syz [ 659.501339][ T5713] usb 6-1: Manufacturer: syz [ 659.509121][ T10] usb 5-1: SerialNumber: syz [ 659.522220][ T5713] usb 6-1: SerialNumber: syz [ 659.548724][ T5713] usb 6-1: config 0 descriptor?? [ 659.583975][T15579] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 659.820041][ T5713] radio-si470x 6-1:0.35: this is not a si470x device. [ 659.858318][ T10] usb-storage 5-1:4.67: USB Mass Storage device detected [ 659.898721][ T5713] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 660.062423][ T5713] usb 6-1: USB disconnect, device number 13 [ 660.073963][ T10] usb 5-1: USB disconnect, device number 83 [ 660.083763][ T29] audit: type=1400 audit(660.040:1484): avc: denied { append } for pid=15611 comm="syz.0.2669" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 660.256901][T15615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=15615 comm=syz.1.2668 [ 660.412889][ T4927] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 660.489685][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 661.193778][T15642] xt_hashlimit: size too large, truncated to 1048576 [ 661.767484][ T5799] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 661.964222][ T10] lo speed is unknown, defaulting to 1000 [ 661.970802][ T5713] lo speed is unknown, defaulting to 1000 [ 662.022406][ T4927] Bluetooth: hci5: unexpected event for opcode 0x0402 [ 662.029445][ T5799] usb 4-1: device descriptor read/64, error -71 [ 662.041017][T15667] bridge0: port 1(syz_tun) entered blocking state [ 662.074240][T15667] bridge0: port 1(syz_tun) entered disabled state [ 662.101518][T15667] syz_tun: entered allmulticast mode [ 662.136367][T15667] syz_tun: entered promiscuous mode [ 662.319577][ T5799] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 662.479790][ T5799] usb 4-1: device descriptor read/64, error -71 [ 662.608866][ T5799] usb usb4-port1: attempt power cycle [ 662.629055][ T5713] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 662.810154][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 662.828042][ T5713] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 662.855492][ T5713] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 662.872182][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.889679][ T5713] usb 5-1: Product: syz [ 662.898773][ T5713] usb 5-1: Manufacturer: syz [ 662.908941][ T5713] usb 5-1: SerialNumber: syz [ 662.977842][ T5799] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 663.017865][ T5799] usb 4-1: device descriptor read/8, error -71 [ 663.259110][ T5799] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 663.329452][ T5799] usb 4-1: device descriptor read/8, error -71 [ 663.375859][ T29] audit: type=1800 audit(663.330:1485): pid=15693 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2690" name="/" dev="fuse" ino=1 res=0 errno=0 [ 663.478150][ T5799] usb usb4-port1: unable to enumerate USB device [ 663.635044][ T5713] usb 5-1: USB disconnect, device number 84 [ 663.746704][ T9731] udevd[9731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 664.521831][ T4927] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 664.686549][T15710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15710 comm=syz.0.2694 [ 664.744579][T15710] ffs_data_put(): freeing [ 664.916000][T15720] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 664.954265][ T29] audit: type=1400 audit(664.920:1486): avc: granted { setsecparam } for pid=15719 comm="syz.4.2698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 665.284102][T15740] size and base must be multiples of 4 kiB [ 665.312343][T15740] CPU: 0 UID: 0 PID: 15740 Comm: syz.1.2702 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.312366][T15740] Tainted: [L]=SOFTLOCKUP [ 665.312371][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 665.312378][T15740] Call Trace: [ 665.312383][T15740] [ 665.312388][T15740] dump_stack_lvl+0x100/0x190 [ 665.312406][T15740] mtrr_del.cold+0x72/0x85 [ 665.312418][T15740] mtrr_ioctl+0xbc8/0xcf0 [ 665.312435][T15740] ? __pfx_mtrr_ioctl+0x10/0x10 [ 665.312460][T15740] ? __pfx_mtrr_ioctl+0x10/0x10 [ 665.312475][T15740] proc_reg_unlocked_ioctl+0x229/0x320 [ 665.312492][T15740] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 665.312506][T15740] __x64_sys_ioctl+0x18e/0x210 [ 665.312523][T15740] do_syscall_64+0x115/0x870 [ 665.312537][T15740] ? clear_bhb_loop+0x40/0x90 [ 665.312550][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.312562][T15740] RIP: 0033:0x7ff83739e019 [ 665.312572][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.312583][T15740] RSP: 002b:00007ff83826b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.312595][T15740] RAX: ffffffffffffffda RBX: 00007ff837626090 RCX: 00007ff83739e019 [ 665.312602][T15740] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 000000000000000c [ 665.312609][T15740] RBP: 00007ff83743500c R08: 0000000000000000 R09: 0000000000000000 [ 665.312615][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.312622][T15740] R13: 00007ff837626128 R14: 00007ff837626090 R15: 00007ffdf1cc3488 [ 665.312638][T15740] [ 665.529190][T15743] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 1, id = 0 [ 665.937383][ T5713] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 666.034172][T15763] openvswitch: netlink: Key type 7929 is out of range max 32 [ 666.100067][ T5713] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 666.939284][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.983769][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2710'. [ 667.014829][T15765] bond5: entered promiscuous mode [ 667.020180][T15765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.029322][T15765] dummy0: entered allmulticast mode [ 667.036825][T15765] dummy0: left allmulticast mode [ 667.048949][ T5713] usb 1-1: Product: syz [ 667.083511][ T5713] usb 1-1: Manufacturer: syz [ 667.114357][ T5713] usb 1-1: SerialNumber: syz [ 667.148534][T15772] hsr0: entered allmulticast mode [ 667.159826][ T5713] usb 1-1: config 0 descriptor?? [ 667.190376][T15772] hsr_slave_0: entered allmulticast mode [ 667.203026][ T5713] hub 1-1:0.0: bad descriptor, ignoring hub [ 667.330215][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 667.344432][ T5713] hub 1-1:0.0: probe with driver hub failed with error -5 [ 667.363954][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2715'. [ 667.380007][T15772] hsr_slave_1: entered allmulticast mode [ 667.407833][T15751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.426584][T15783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15783 comm=syz.1.2714 [ 667.442232][T15783] ffs_data_put(): freeing [ 667.471419][T15776] hsr_slave_0: left promiscuous mode [ 667.479776][T15776] hsr_slave_1: left promiscuous mode [ 667.486443][T15751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.511617][T15776] hsr0 (unregistering): left allmulticast mode [ 667.525486][T15777] binfmt_misc: register: failed to install interpreter file ./file1 [ 667.539269][ T5713] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 667.645408][T15787] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 667.678896][ T5713] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 668.657058][ T5713] dib0700: firmware download failed at 7 with -22 [ 668.770162][ T5713] usb 1-1: USB disconnect, device number 77 [ 668.944977][T15801] tmpfs: Unknown parameter 'nr_ino' [ 668.995668][T15794] ubi16: attaching mtd0 [ 669.007393][ T5706] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 669.055452][T15806] binder: 15802:15806 ioctl c018620c 200000000240 returned -22 [ 669.130511][T15794] ubi16: scanning is finished [ 669.169138][T15806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2722'. [ 669.185608][T15794] ubi16: empty MTD device detected [ 669.237824][ T5706] usb 5-1: device descriptor read/64, error -71 [ 669.507381][ T5706] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 669.593464][T15794] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 669.628956][T15794] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 669.667607][ T5706] usb 5-1: device descriptor read/64, error -71 [ 669.676250][T15794] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 669.713061][T15794] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 669.755215][T15794] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 669.801774][T15794] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 669.810663][ T5706] usb usb5-port1: attempt power cycle [ 669.866081][T15794] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 494655746 [ 669.929462][T15794] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 669.983544][T15824] ubi16: background thread "ubi_bgt16d" started, PID 15824 [ 670.143122][T15835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.187507][ T5706] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 670.215525][T15837] tipc: Enabling of bearer rejected, failed to enable media [ 670.261368][ T5706] usb 5-1: device descriptor read/8, error -71 [ 670.454309][T15852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.514223][T15852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.527403][ T5706] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 670.574645][T15838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2723'. [ 670.590312][ T5706] usb 5-1: device descriptor read/8, error -71 [ 670.603183][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2734'. [ 670.645491][T15816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.698023][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 670.708642][ T5706] usb usb5-port1: unable to enumerate USB device [ 670.868447][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 670.883357][ T10] usb 6-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 670.914402][ T10] usb 6-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 670.932762][ T186] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 670.950184][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 670.970687][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 670.982717][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.001394][ T10] usb 6-1: Product: ꐐ틸퀏ꅴ붚੔娠䠪꾥ᰏ嗓뫡㯞⯌ﱇ㞍᪯낖ꋈ새蚈赫緒愬壿䔕泦⢻ۉ풃秮絣龹崍眿舛╸ [ 671.035638][ T10] usb 6-1: Manufacturer: 㭡縵銳䝸笐袌릐㱤Զۻ⋠ꤩ켵࠱⣂菕ꆀ惬㣛ౡ첣䴒颺爘娦ﲃ侸ၐ䕼刾芕ꐆ膃ꜚ紽䱂伉証኉坣㗁܇厪춠ἳ֦啧驑‚絸뛣쮎ꗖ歪ۢ浱ᎉ⃉ు닧䃄竺괶蕭ꨞ快蓆䉵˵⿯⣋᷽깅닕鋘佻Ȭ↱⭔ඔᖙ걋蚅㽱쀀辺푁婕Ⱒ焏ꀸ睃짢뮈䕂睇㟻ợ⥺ࡆҜࡱ籲賊Ը [ 671.098868][ T186] usb 4-1: Using ep0 maxpacket: 32 [ 671.114596][ T186] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 671.126769][ T10] usb 6-1: SerialNumber: 䀊 [ 671.137223][ T186] usb 4-1: config 0 has no interface number 0 [ 671.162166][ T186] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 671.188869][ T186] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 671.224522][ T186] usb 4-1: config 0 interface 49 has no altsetting 0 [ 671.241996][ T186] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 671.261515][ T186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.285662][ T186] usb 4-1: config 0 descriptor?? [ 671.369744][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 671.376249][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 671.395561][ T10] usb 6-1: USB disconnect, device number 14 [ 671.507637][ T186] usb 4-1: string descriptor 0 read error: -71 [ 671.541354][ T186] usb 4-1: USB disconnect, device number 79 [ 671.782584][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2743'. [ 671.818508][ T5706] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 672.170304][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 672.193643][ T5706] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 672.206249][T15902] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 672.236277][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.271040][ T5706] usb 1-1: Product: syz [ 672.298557][ T5706] usb 1-1: Manufacturer: syz [ 672.322423][ T5706] usb 1-1: SerialNumber: syz [ 672.392544][ T29] audit: type=1400 audit(672.350:1487): avc: denied { unmount } for pid=14475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 672.480556][T15913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2750'. [ 672.553852][ T5706] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 672.666985][ T5706] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 672.816992][T15917] ieee802154 phy0 wpan0: encryption failed: -90 [ 672.876640][ T5706] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 672.995986][ T5706] usb 1-1: media controller created [ 673.017644][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.787563][T15907] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 673.902782][ T5706] zl10353_read_register: readreg error (reg=127, ret==-71) [ 674.055360][ T5706] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 674.141077][T15941] /dev/sg0: Can't lookup blockdev [ 674.185509][ T5706] usb 1-1: USB disconnect, device number 78 [ 674.222232][T15931] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 674.368461][ T4927] Bluetooth: hci1: command 0x0406 tx timeout [ 674.622506][T15965] xt_hashlimit: size too large, truncated to 1048576 [ 674.699176][ T5706] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 674.892340][ T5706] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 674.904655][ T29] audit: type=1400 audit(674.850:1488): avc: denied { map } for pid=15975 comm="syz.3.2766" path="socket:[55514]" dev="sockfs" ino=55514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 674.956652][ T5706] usb 5-1: config 0 has no interface number 0 [ 674.976650][ T5706] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 57464, setting to 64 [ 675.016991][ T29] audit: type=1400 audit(674.850:1489): avc: denied { read write } for pid=15975 comm="syz.3.2766" path="socket:[55514]" dev="sockfs" ino=55514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 675.058392][ T5706] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 675.081134][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.099088][ T5706] usb 5-1: Product: syz [ 675.106734][ T5706] usb 5-1: Manufacturer: syz [ 675.116864][ T5706] usb 5-1: SerialNumber: syz [ 675.140776][ T5706] usb 5-1: config 0 descriptor?? [ 675.173777][T15953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 675.402264][ T5706] radio-si470x 5-1:0.35: this is not a si470x device. [ 675.469201][ T5706] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 675.526737][ T5706] usb 5-1: USB disconnect, device number 89 [ 675.830868][ T29] audit: type=1400 audit(675.790:1490): avc: denied { nlmsg_read } for pid=15997 comm="syz.0.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 676.147189][T16011] netlink: 'syz.4.2775': attribute type 4 has an invalid length. [ 676.187861][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 676.236306][T16011] syzkaller0: entered promiscuous mode [ 676.257945][T16011] syzkaller0: entered allmulticast mode [ 676.367690][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 676.388353][ T10] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 676.413341][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.445029][ T10] usb 4-1: Product: syz [ 676.456511][ T10] usb 4-1: Manufacturer: syz [ 676.471906][ T10] usb 4-1: SerialNumber: syz [ 676.577363][ T5799] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 676.733320][ T10] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 676.742808][ T5799] usb 6-1: Using ep0 maxpacket: 8 [ 676.751127][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 676.762870][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 676.774091][ T5799] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 676.788391][ T10] usb 4-1: media controller created [ 676.793714][ T5799] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.809447][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.818225][ T5799] usb 6-1: config 0 has no interface number 0 [ 676.826262][ T5799] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 676.841418][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.850425][ T5799] usb 6-1: Product: syz [ 676.854739][ T5799] usb 6-1: Manufacturer: syz [ 676.861848][ T5799] usb 6-1: SerialNumber: syz [ 676.870806][ T5799] usb 6-1: config 0 descriptor?? [ 676.879144][ T5799] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 677.047557][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 677.072839][ T10] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 677.132284][ T10] usb 4-1: USB disconnect, device number 80 [ 677.190383][ T5706] usb 6-1: USB disconnect, device number 15 [ 677.253608][T16019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.351335][T16019] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 677.399346][T16019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.467995][T16019] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 677.587130][T16019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.606359][T16019] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 677.627114][T16019] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 677.650032][T16019] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 677.684776][T16019] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 677.711152][T16019] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 677.740848][T16034] tipc: Started in network mode [ 677.758720][T16034] tipc: Node identity 7f000001, cluster identity 4711 [ 677.767578][T16036] netlink: 'syz.0.2784': attribute type 2 has an invalid length. [ 677.775884][T16034] tipc: Enabling of bearer rejected, failed to enable media [ 677.786618][T16036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2784'. [ 677.866775][T16040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 677.877679][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 677.977235][ T29] audit: type=1326 audit(677.930:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.1.2786" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff83739e019 code=0x0 [ 678.017773][T16039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=16039 comm=syz.5.2785 [ 678.097490][ T186] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 678.118449][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 678.126855][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.164347][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 678.200952][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 678.248853][ T10] usb 5-1: config 1 interface 2 has no altsetting 0 [ 678.268578][ T186] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 678.297194][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 678.325840][ T186] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1288, setting to 1024 [ 678.351058][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.383814][ T10] usb 5-1: Product: syz [ 678.396174][ T186] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.412238][ T10] usb 5-1: Manufacturer: syz [ 678.430168][ T186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.450967][ T10] usb 5-1: SerialNumber: syz [ 678.489967][ T186] usb 1-1: Product: 俇ﺰ삆傃ꆻ遦♻租玝牯豧齞ዒ㜰ᳶ쏏엎쒤㶂짫愈힇핪웦୽殍뀫鉃䮬ꮉ蕆溳밠险꧉鏉䋢쑳犮ffi趇ಫ衚樆鹈㊤촯庍푡食솚蝐ꎡḲ꼁 [ 678.578427][ T10] snd-ua101 5-1:1.1: invalid format type [ 678.595270][ T186] usb 1-1: Manufacturer: 㸬ꈇ৏釮잙痊蠈蓑錜ۘ巛ꍴ뽳㕦ъ㨀鋨ꌩ릥侽뽨羬獌堺搗ꂮ뛛藵謼嗭㟙䢇憽ﭴ䄠㓒ያ蔠ᬟ騋幉涫鑖ꩡ飍ﱺꋧ鐌㹼稽敿ꂓᥛ⪮⥔姗銲㘡ퟦ᭹Ꞛﲂ䰣泇⎁᐀奭ꖲ␫⛈堚ᮾ■䚪ꏾ럂呈籦文럼땊ࠝ刿佉଄e쾪෾銛蹏⸮࿷ [ 678.634077][ T10] snd-ua101 5-1:1.0: invalid num_altsetting [ 678.657632][ T10] usb 5-1: selecting invalid altsetting 0 [ 678.756771][ T186] usb 1-1: SerialNumber: ࠉ [ 678.761871][ T10] usb 5-1: selecting invalid altsetting 0 [ 678.791767][ T10] usbtest 5-1:1.2: probe with driver usbtest failed with error -22 [ 678.844375][ T10] usb 5-1: selecting invalid altsetting 0 [ 678.883508][ T10] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 678.934401][ T10] usb 5-1: selecting invalid altsetting 0 [ 678.967763][ T10] snd-ua101 5-1:1.2: probe with driver snd-ua101 failed with error -22 [ 679.038415][T16036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.104259][T16036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.172184][ T186] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 679.258714][ T5713] usb 5-1: USB disconnect, device number 90 [ 679.404535][ T186] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 679.455048][ T186] usb 1-1: unit 3 not found! [ 679.585950][ T186] usb 1-1: USB disconnect, device number 79 [ 679.717732][ T5713] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 679.958909][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 680.019266][ T5713] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 680.062097][ T9731] udevd[9731]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 680.125758][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.196360][ T5713] usb 5-1: Product: syz [ 680.280618][ T5713] usb 5-1: Manufacturer: syz [ 680.404890][ T5713] usb 5-1: SerialNumber: syz [ 680.680162][ T5713] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 680.860444][T16120] binder: BINDER_SET_CONTEXT_MGR already set [ 680.878047][ T5713] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 680.921668][T16120] binder: 16119:16120 ioctl 4018620d 200000001000 returned -16 [ 680.968408][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 680.981008][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 680.989857][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 680.998538][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 681.006130][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 681.030856][ T5713] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 681.048264][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 681.055721][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 681.063324][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 681.074559][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 681.087959][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 681.174253][ T5713] usb 5-1: media controller created [ 681.226388][T16077] infiniband syz1: set down [ 681.251801][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 681.274151][T16077] infiniband syz1: added bridge_slave_1 [ 681.318289][ T5706] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 681.346459][T16077] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 681.381280][ T5713] zl10353_read_register: readreg error (reg=127, ret==-71) [ 681.425687][T16077] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 681.472278][ T5713] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 681.500036][T16077] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 681.517453][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 681.528734][ T5713] usb 5-1: USB disconnect, device number 91 [ 681.548801][ T5706] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 681.603337][ T5706] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 681.615216][ T3304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.642472][T16077] RDS/IB: syz1: added [ 681.648014][T16077] smc: adding ib device syz1 with port count 1 [ 681.665123][ T5706] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice= 0.40 [ 681.679704][ T3304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56872 - 0 [ 681.691441][T16077] smc: ib device syz1 port 1 has no pnetid [ 681.699597][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.717492][ T5706] usb 6-1: Product: syz [ 681.729485][ T5706] usb 6-1: Manufacturer: syz [ 681.749698][ T5706] usb 6-1: SerialNumber: syz [ 681.822568][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 681.873213][T16129] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2797'. [ 682.015519][ T5706] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.059064][ T5706] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 682.097599][ T5706] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.124088][ T3304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.139782][ T5706] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 682.171262][ T3304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56872 - 0 [ 682.183119][ T5706] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.362158][ T5706] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 682.424808][ T5706] usb 6-1: USB disconnect, device number 16 [ 682.461788][ T3304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.504258][ T9960] udevd[9960]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 682.523446][ T3304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56872 - 0 [ 682.738032][T16138] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2798'. [ 683.171312][ T4927] Bluetooth: hci1: command tx timeout [ 683.674949][T16145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1793 sclass=netlink_tcpdiag_socket pid=16145 comm=syz.5.2798 [ 683.773546][ T3304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.820588][ T3304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56872 - 0 [ 683.863670][T16138] team0 (unregistering): Port device team_slave_0 removed [ 683.886757][T16138] team0 (unregistering): Port device team_slave_1 removed [ 683.928535][T16115] lo speed is unknown, defaulting to 1000 [ 684.091927][ T5799] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 684.340800][ T5799] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.4a [ 684.365307][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.411134][ T5799] usb 5-1: Product: syz [ 684.429532][ T5799] usb 5-1: Manufacturer: syz [ 684.456349][ T5799] usb 5-1: SerialNumber: syz [ 684.505316][ T5799] usb 5-1: config 0 descriptor?? [ 684.693276][ T3304] bridge_slave_1: left allmulticast mode [ 684.718485][ T3304] bridge_slave_1: left promiscuous mode [ 684.748784][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.765430][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.805658][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.943616][ T3304] bridge_slave_0: left allmulticast mode [ 684.982287][ T5799] usb 5-1: Firmware version (0.0) predates our first public release. [ 684.999199][ T3304] bridge_slave_0: left promiscuous mode [ 685.043072][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.056135][ T5799] usb 5-1: Please update to version 0.2 or newer [ 685.249681][ T4927] Bluetooth: hci1: command tx timeout [ 685.436059][ T29] audit: type=1400 audit(685.400:1492): avc: denied { write } for pid=16155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.586641][ T29] audit: type=1400 audit(685.540:1493): avc: denied { write } for pid=16186 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.734542][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.740924][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.765845][ T3304] team0: Port device geneve1 removed [ 685.833671][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.851527][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.866589][ T3304] bond0 (unregistering): Released all slaves [ 685.882151][ T3304] bond1 (unregistering): Released all slaves [ 685.906687][ T3304] bond2 (unregistering): Released all slaves [ 685.933016][ T3304] bond3 (unregistering): Released all slaves [ 686.003784][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 686.137425][ T3304] tipc: Left network mode [ 686.154092][ T5799] usb 5-1: USB disconnect, device number 92 [ 686.343415][T16194] netlink: 'syz.5.2808': attribute type 49 has an invalid length. [ 686.413649][T16195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=16195 comm=syz.5.2808 [ 686.856620][ T3304] IPVS: stopping master sync thread 15743 ... [ 686.877983][ T5799] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 687.094211][ T5799] usb 5-1: Using ep0 maxpacket: 16 [ 687.168860][ T5799] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 687.233907][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.268683][T16211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2811'. [ 687.277803][T16211] netlink: 90 bytes leftover after parsing attributes in process `syz.5.2811'. [ 687.289430][T16211] netlink: 90 bytes leftover after parsing attributes in process `syz.5.2811'. [ 687.326202][T16211] qnx6: unable to read the first superblock [ 687.333499][T16211] qnx6: unable to read the first superblock [ 687.339526][T16211] qnx6: unable to read the first superblock [ 687.348377][ T4927] Bluetooth: hci1: command tx timeout [ 687.365978][ T5799] usb 5-1: Product: syz [ 687.402441][ T5799] usb 5-1: Manufacturer: syz [ 687.445721][ T5799] usb 5-1: SerialNumber: syz [ 687.482897][ T29] audit: type=1400 audit(687.430:1494): avc: denied { write } for pid=16196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.764213][ T5799] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 687.785973][ T29] audit: type=1400 audit(687.740:1495): avc: denied { write } for pid=16221 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.854476][ T5799] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 687.914318][ T5799] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 687.957458][ T5706] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 687.989769][ T5799] usb 5-1: media controller created [ 688.076641][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 688.088583][T16115] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.144863][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.154491][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 688.180263][ T5706] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 688.196335][T16115] bridge_slave_0: entered allmulticast mode [ 688.240403][ T5706] usb 6-1: config 0 has no interface number 0 [ 688.272525][T16115] bridge_slave_0: entered promiscuous mode [ 688.285526][ T5706] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 688.308936][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 688.346808][T16115] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.358999][ T5706] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 688.376978][ T5799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 688.400562][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.433369][ T5706] usb 6-1: config 0 interface 41 has no altsetting 0 [ 688.459911][T16115] bridge_slave_1: entered allmulticast mode [ 688.485603][ T5706] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 688.510412][T16115] bridge_slave_1: entered promiscuous mode [ 688.517545][ T5799] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 688.539972][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.582960][ T5799] usb 5-1: USB disconnect, device number 93 [ 688.605830][ T5706] usb 6-1: Product: syz [ 688.642841][ T5706] usb 6-1: Manufacturer: syz [ 688.670433][ T5706] usb 6-1: SerialNumber: syz [ 688.684838][ T3304] hsr_slave_0: left promiscuous mode [ 688.711992][ T5706] usb 6-1: config 0 descriptor?? [ 688.727858][ T3304] hsr_slave_1: left promiscuous mode [ 688.738086][T16222] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 688.759637][ T3304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.787652][T16222] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 688.824692][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.860619][ T3304] batman_adv: batadv0: Interface deactivated:  [ 688.885984][ T3304] batman_adv: batadv0: Removing interface:  [ 689.040877][T16220] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 689.050064][ T3304] veth1_macvtap: left promiscuous mode [ 689.073347][T16220] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 689.083092][ T3304] veth0_macvtap: left promiscuous mode [ 689.112557][ T3304] veth1_vlan: left promiscuous mode [ 689.141171][ T3304] veth0_vlan: left promiscuous mode [ 689.270654][T16244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=16244 comm=syz.1.2816 [ 689.396299][T16248] comedi comedi1: dt2815: I/O base address or length out of range [ 689.408038][ T5624] Bluetooth: hci1: command tx timeout [ 689.550944][T16252] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 689.602626][ T29] audit: type=1400 audit(689.560:1496): avc: denied { relabelto } for pid=16245 comm="syz.3.2817" name="591" dev="tmpfs" ino=3227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 689.754362][ T29] audit: type=1400 audit(689.600:1497): avc: denied { associate } for pid=16245 comm="syz.3.2817" name="591" dev="tmpfs" ino=3227 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 689.837561][ T13] Bluetooth: Error in BCSP hdr checksum [ 689.925877][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 689.943482][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 690.054734][T13875] smbdirect: ib_dev[syz0] removed [ 690.088258][ T5799] lo speed is unknown, defaulting to 1000 [ 690.098285][ T5706] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 690.108766][T16250] pim6reg1: entered promiscuous mode [ 690.142232][T16250] pim6reg1: entered allmulticast mode [ 690.151667][ T5799] syz0: Port: 1 Link DOWN [ 690.187613][ T5706] usb 6-1: USB disconnect, device number 17 [ 690.258715][T10452] Bluetooth: Error in BCSP hdr checksum [ 690.325172][T16115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.371689][T16115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.495320][T16115] team0: Port device team_slave_0 added [ 690.548689][T16115] team0: Port device team_slave_1 added [ 690.558928][T16267] gadgetfs: bound to dummy_udc driver [ 691.205566][ T5706] kernel write not supported for file /dummy_udc (pid: 5706 comm: kworker/0:4) [ 691.219351][ T29] audit: type=1400 audit(691.160:1498): avc: denied { mounton } for pid=16264 comm="syz.1.2821" path="/586/gadget/ep1in-bulk" dev="gadgetfs" ino=56913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=file permissive=1 [ 691.500577][ T5624] Bluetooth: hci2: command 0x1003 tx timeout [ 691.509494][ T4927] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 691.535588][T16115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.573255][ T29] audit: type=1400 audit(691.520:1499): avc: denied { read } for pid=16273 comm="syz.5.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 691.606319][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.826343][T16115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.900407][T16115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.946498][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.999643][ T29] audit: type=1400 audit(691.940:1500): avc: denied { write } for pid=16261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.046551][ T5706] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 692.077593][T16115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.183481][ T3304] IPVS: stop unused estimator thread 0... [ 692.193881][ T29] audit: type=1400 audit(692.160:1501): avc: denied { write } for pid=16293 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.249863][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 692.288502][ T5706] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 692.333442][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.681361][ T5706] usb 6-1: Product: syz [ 692.688082][T16115] hsr_slave_0: entered promiscuous mode [ 692.733443][ T5706] usb 6-1: Manufacturer: syz [ 692.751327][T16115] hsr_slave_1: entered promiscuous mode [ 692.779463][ T5706] usb 6-1: SerialNumber: syz [ 692.801598][T16115] debugfs: 'hsr0' already exists in 'hsr' [ 692.829745][T16115] Cannot create hsr debugfs directory [ 692.863488][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 693.027575][ T186] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 693.050226][ T5706] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 693.101187][ T5706] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.159039][ T5706] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 693.246171][ T186] usb 4-1: config index 0 descriptor too short (expected 36, got 30) [ 693.298682][ T5706] usb 6-1: media controller created [ 693.309510][ T186] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 693.382021][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.405757][ T186] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 693.501440][ T186] usb 4-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 693.539729][ T5706] zl10353_read_register: readreg error (reg=127, ret==-71) [ 693.580779][ T186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.649965][ T186] usb 4-1: config 0 descriptor?? [ 693.666456][ T5706] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 693.701212][ T186] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 693.750430][ T5706] usb 6-1: USB disconnect, device number 18 [ 694.002003][ T186] usb 4-1: USB disconnect, device number 81 [ 694.034669][ T29] audit: type=1400 audit(694.000:1502): avc: denied { write } for pid=16302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.533190][ T29] audit: type=1400 audit(694.490:1503): avc: denied { write } for pid=16328 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.667916][ T186] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 694.858653][ T186] usb 6-1: Using ep0 maxpacket: 32 [ 694.883659][ T186] usb 6-1: config 8 has an invalid interface number: 96 but max is 0 [ 694.897504][ T5706] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 694.919971][ T186] usb 6-1: config 8 has an invalid interface number: 167 but max is 0 [ 694.952947][ T186] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 694.988160][ T186] usb 6-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 695.020064][ T186] usb 6-1: config 8 has no interface number 0 [ 695.039040][ T186] usb 6-1: config 8 has no interface number 1 [ 695.074177][ T186] usb 6-1: config 8 interface 96 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 695.085054][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 695.126239][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 695.161364][ T186] usb 6-1: config 8 interface 96 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 695.190288][ T5706] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 695.224382][ T5706] usb 4-1: config 7 has no interface number 0 [ 695.241083][ T186] usb 6-1: too many endpoints for config 8 interface 167 altsetting 162: 200, using maximum allowed: 30 [ 695.256086][ T5706] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.293160][ T186] usb 6-1: config 8 interface 167 altsetting 162 endpoint 0xA has an invalid bInterval 64, changing to 10 [ 695.308204][ T5706] usb 4-1: config 7 interface 187 has no altsetting 0 [ 695.339138][T16345] netlink: 'syz.4.2834': attribute type 12 has an invalid length. [ 695.349714][ T5706] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 695.371989][ T186] usb 6-1: config 8 interface 167 altsetting 162 has a duplicate endpoint with address 0x4, skipping [ 695.387657][T16345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16345 comm=syz.4.2834 [ 695.403212][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.447199][ T5706] usb 4-1: Product: syz [ 695.457394][ T186] usb 6-1: config 8 interface 167 altsetting 162 has a duplicate endpoint with address 0x9, skipping [ 695.477506][ T5706] usb 4-1: Manufacturer: syz [ 695.494975][ T5706] usb 4-1: SerialNumber: syz [ 695.511214][ T186] usb 6-1: config 8 interface 167 altsetting 162 has 4 endpoint descriptors, different from the interface descriptor's value: 200 [ 695.525396][T16347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16347 comm=syz.4.2834 [ 695.600926][ T186] usb 6-1: config 8 interface 167 has no altsetting 0 [ 695.645924][ T186] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a41, bcdDevice=64.07 [ 695.699818][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.762275][ T186] usb 6-1: Product: з [ 695.785186][ T186] usb 6-1: Manufacturer: ࠊ [ 695.805521][ T186] usb 6-1: SerialNumber: 䴙窘ꮀ蹣ꬖﭑ෎蛸럇惂宆쩏䩆鞙ີ荜豬섹㣗蜰뛂漯赬₦㯙໒禙꿍뮋⥗寲ะ拏嚃獺꫔㹔봢焁釉⢾氓⧳￧᪇E䥫⬘즭੭礎ꞔᩢ镃쫒풺粒죦뷑渔♵ꤊ잸藕絗ꑼ⛁በ╇袨ﷺ㚠ኑ㭚畮⍭ [ 696.402728][ T5706] usb 4-1: Cannot retrieve CPort count: -71 [ 696.439223][ T5706] usb 4-1: Cannot retrieve CPort count: -71 [ 696.479671][ T29] audit: type=1400 audit(696.430:1504): avc: denied { write } for pid=16343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.511185][ T5706] es2_ap_driver 4-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 696.629357][ T5706] usb 4-1: USB disconnect, device number 82 [ 696.737488][T16364] netlink: 'syz.3.2836': attribute type 8 has an invalid length. [ 696.745261][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 696.784886][ T29] audit: type=1400 audit(696.530:1505): avc: denied { name_bind } for pid=16365 comm="syz.4.2837" src=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 696.983985][ T29] audit: type=1400 audit(696.890:1506): avc: denied { write } for pid=16368 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.017024][ T186] usb 6-1: USB disconnect, device number 19 [ 697.296581][T16369] syzkaller1: entered promiscuous mode [ 697.302380][T16369] syzkaller1: entered allmulticast mode [ 697.617062][T16380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.708407][T16115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.787717][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 697.797073][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.831696][T16115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.870266][T16387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2841'. [ 697.921094][ T29] audit: type=1400 audit(697.880:1507): avc: denied { write } for pid=16375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.999011][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 698.015086][ T10] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 698.033025][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.059058][ T10] usb 4-1: Product: syz [ 698.071728][ T10] usb 4-1: Manufacturer: syz [ 698.084764][ T10] usb 4-1: SerialNumber: syz [ 698.089709][ T29] audit: type=1400 audit(698.040:1508): avc: denied { write } for pid=16401 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.114410][ T5706] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 698.291970][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 698.347246][ T10] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 698.356932][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.375534][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 698.391130][ T5706] usb 2-1: config 4 has an invalid interface number: 55 but max is 0 [ 698.400089][T16115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 698.409753][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 698.425045][ T5706] usb 2-1: config 4 has no interface number 0 [ 698.441703][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.451286][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 698.460432][ T5706] usb 2-1: config 4 interface 55 has no altsetting 0 [ 698.483426][ T5706] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 698.494134][ T10] usb 4-1: media controller created [ 698.511132][T16115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 698.524426][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.553145][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.580084][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.597575][ T5706] usb 2-1: Product: syz [ 698.623239][ T5706] usb 2-1: Manufacturer: syz [ 698.657401][ T5706] usb 2-1: SerialNumber: syz [ 698.732823][T16418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2845'. [ 699.290709][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 699.674810][T16396] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2838'. [ 699.812488][ T10] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 699.828300][T16427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2846'. [ 699.856724][T16421] IPVS: Error connecting to the multicast addr [ 699.910054][ T10] usb 4-1: USB disconnect, device number 83 [ 699.965560][T16115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.967109][T16396] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2838'. [ 700.020849][T16115] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.043513][T13888] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.045678][T13888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.057996][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.060025][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.122711][ T5799] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 700.269365][ T5799] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.269383][ T5799] usb 5-1: config 0 has no interface number 0 [ 700.269405][ T5799] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 700.269419][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.270842][ T5799] usb 5-1: config 0 descriptor?? [ 700.273542][ T5799] usb 5-1: selecting invalid altsetting 1 [ 700.273640][ T5799] dvb_ttusb_budget: ttusb_init_controller: error [ 700.273649][ T5799] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 700.479955][ T29] audit: type=1400 audit(700.430:1509): avc: denied { write } for pid=16415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.531379][ T5799] DVB: Unable to find symbol cx22700_attach() [ 700.651015][ T5799] DVB: Unable to find symbol tda10046_attach() [ 700.651039][ T5799] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 700.660780][ T5799] usb 5-1: USB disconnect, device number 94 [ 700.806747][ T29] audit: type=1400 audit(700.760:1510): avc: denied { write } for pid=16450 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.881542][ T186] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 701.034516][ T186] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 701.034537][ T186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.036134][ T186] usb 4-1: config 0 descriptor?? [ 701.038972][ T186] cp210x 4-1:0.0: cp210x converter detected [ 701.102486][ T5706] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 701.102557][ T5706] gspca_mr97310a: reg write [21] error -22 [ 701.102598][ T5706] mr97310a 2-1:4.55: probe with driver mr97310a failed with error -22 [ 701.142817][ T5706] usb 2-1: USB disconnect, device number 62 [ 701.246215][ T29] audit: type=1400 audit(701.200:1511): avc: denied { write } for pid=16463 comm="syz.4.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 701.341162][T16115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.443195][ T186] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 701.460211][ T186] usb 4-1: cp210x converter now attached to ttyUSB0 [ 701.478373][T16115] veth0_vlan: entered promiscuous mode [ 701.506307][T16115] veth1_vlan: entered promiscuous mode [ 701.564061][T16115] veth0_macvtap: entered promiscuous mode [ 701.574705][T16115] veth1_macvtap: entered promiscuous mode [ 701.589969][ T29] audit: type=1400 audit(701.530:1512): avc: denied { write } for pid=16456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.609395][T16115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.624671][T16115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.632163][T13875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.632305][T13875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.632375][T13875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.632468][T13875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.669481][ T186] usb 4-1: USB disconnect, device number 84 [ 701.692745][ T186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 701.697836][ T186] cp210x 4-1:0.0: device disconnected [ 701.799966][ T29] audit: type=1400 audit(701.760:1513): avc: denied { write } for pid=16475 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.056413][T13880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.056431][T13880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.061838][T16464] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 702.422507][T10452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.422524][T10452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.451721][ T29] audit: type=1400 audit(702.410:1514): avc: denied { setopt } for pid=16483 comm="syz.4.2850" lport=45994 faddr=2001:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 702.755985][T16494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16494 comm=syz.3.2851 [ 702.756609][T16494] ffs_data_put(): freeing [ 703.153576][ T29] audit: type=1400 audit(703.120:1515): avc: denied { write } for pid=16482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.556770][ T29] audit: type=1400 audit(703.510:1516): avc: denied { write } for pid=16506 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.635847][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.645587][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.647233][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.647886][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.648716][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.936449][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 706.252130][T16539] kvm: kvm [16538]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000080 [ 706.315028][T16539] kvm: kvm [16538]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 707.045213][ T5611] Bluetooth: hci2: command tx timeout [ 707.771995][T16572] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 709.088239][ T5611] Bluetooth: hci2: command tx timeout [ 709.193157][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2873'. [ 709.306557][T16581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.070814][T16592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2873'. [ 710.105027][T16592] bond1: entered promiscuous mode [ 710.114886][T16592] bond1: entered allmulticast mode [ 710.171101][T16581] dummy0: entered promiscuous mode [ 710.183949][T16581] dummy0: entered allmulticast mode [ 710.198578][T16581] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 710.297956][ T5706] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 710.344526][T16594] gadgetfs: bound to dummy_udc driver [ 710.379893][T16597] loop4: detected capacity change from 0 to 7 [ 710.468727][T16597] Dev loop4: unable to read RDB block 7 [ 710.478373][ T5706] usb 5-1: Using ep0 maxpacket: 8 [ 710.493559][T16597] loop4: AHDI p2 p3 [ 710.504957][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.534213][T16597] loop4: partition table partially beyond EOD, truncated [ 710.546155][T16597] loop4: p3 start 335544320 is beyond EOD, truncated [ 710.554656][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.607767][ T5713] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 710.617521][ T5706] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 710.641706][ C0] gadgetfs: connected [ 710.645980][ T5713] gadgetfs: disconnected [ 710.679718][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.719748][T16593] gadgetfs: suspended from state 2 [ 710.732672][ T5706] usb 5-1: config 0 descriptor?? [ 710.987925][ T5713] usb 1-1: device not accepting address 80, error -71 [ 711.003593][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.022559][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.040030][T16516] bridge_slave_0: entered allmulticast mode [ 711.070654][T16516] bridge_slave_0: entered promiscuous mode [ 711.094106][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.109579][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.126108][T16516] bridge_slave_1: entered allmulticast mode [ 711.141789][T16516] bridge_slave_1: entered promiscuous mode [ 711.167514][ T5611] Bluetooth: hci2: command tx timeout [ 711.195710][ T5706] shield 0003:0955:7214.0019: unknown main item tag 0x2 [ 711.221761][ T5706] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 711.240133][T16516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.255520][ T5706] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 711.273674][T16516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.283653][ T5706] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 711.299036][ T5706] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 711.312700][ T5706] shield 0003:0955:7214.0019: unknown main item tag 0x0 [ 711.331711][ T5706] shield 0003:0955:7214.0019: unexpected long global item [ 711.340437][T16516] team0: Port device team_slave_0 added [ 711.346552][ T5706] shield 0003:0955:7214.0019: Parse failed [ 711.354265][T16516] team0: Port device team_slave_1 added [ 711.370144][ T5706] shield 0003:0955:7214.0019: probe with driver shield failed with error -22 [ 711.412837][ T5706] usb 5-1: USB disconnect, device number 95 [ 711.478673][T16516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.501957][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.557586][T16516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.591402][T16516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.606315][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.660614][T16516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.736320][T16611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.747959][T16516] hsr_slave_0: entered promiscuous mode [ 711.795564][T16516] hsr_slave_1: entered promiscuous mode [ 711.824565][T16516] debugfs: 'hsr0' already exists in 'hsr' [ 711.868571][T16516] Cannot create hsr debugfs directory [ 711.993160][T16626] tipc: Enabled bearer , priority 0 [ 712.083347][T16626] tipc: Resetting bearer [ 713.083537][T16642] program syz.5.2888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.188411][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 713.196015][ T5706] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 713.249427][ T5611] Bluetooth: hci2: command tx timeout [ 713.363984][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 713.385089][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.397197][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.433849][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.445427][ T5706] usb 5-1: config 0 interface 0 has no altsetting 0 [ 713.475828][ T5706] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 713.485015][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 713.533570][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.554831][ T10] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 714.220964][ T5706] usb 5-1: config 0 descriptor?? [ 714.235763][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.259185][ T5706] em28xx 5-1:0.0: audio device (2040:1605): interface 0, class 1 [ 714.283768][ T10] usb 1-1: Product: syz [ 714.303801][ T10] usb 1-1: Manufacturer: syz [ 714.327692][ T10] usb 1-1: SerialNumber: syz [ 714.358952][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [ 714.380969][T16516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.413710][ T10] scsi host1: usb-storage 1-1:1.0 [ 714.512072][ T10] usb 5-1: USB disconnect, device number 96 [ 714.583112][ T5714] usb 1-1: USB disconnect, device number 82 [ 714.766663][T16516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.843795][T16655] comedi comedi0: bad chanlist[0]=0x04000003 chan=3 range length=0 [ 714.996918][T16516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.166138][T16516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.349832][T16665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.367091][T16665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.384203][T16665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.409996][T16665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.157095][T16682] W [ 717.331164][T16693] netlink: 376 bytes leftover after parsing attributes in process `syz.0.2905'. [ 717.558853][ T5714] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 717.742958][ T5714] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.789837][ T5714] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.825359][T16704] kvm: kvm [16703]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 717.840205][ T5714] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 717.872138][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.905604][ T5714] usb 6-1: Product: syz [ 717.921146][ T5714] usb 6-1: Manufacturer: syz [ 717.936456][ T5714] usb 6-1: SerialNumber: syz [ 718.184161][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.249136][ T5714] usb 6-1: MBOX3: Invalid descriptor size=18. [ 718.295216][ T5714] usb 6-1: USB disconnect, device number 20 [ 718.324673][T16516] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.381714][T16516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.414117][T16516] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 718.453313][T16516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.495794][T16516] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 718.542018][T16516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 718.561610][T16516] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 718.594473][T16516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.766555][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.773430][ T5714] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 718.842627][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.875586][T13882] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.882712][T13882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.942214][T13882] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.949334][T13882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.959656][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 718.983346][ T5714] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 719.017495][ T5714] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 719.057733][ T5713] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 719.074548][ T5714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.101068][T16516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.131383][ T5714] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.264689][ T5714] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.288211][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.070926][ T5713] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 720.101761][ T5714] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 720.133346][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.163861][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.194287][ T5713] usb 5-1: config 0 descriptor?? [ 720.250859][T16748] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 720.291260][T16748] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 720.439981][ T5714] usb 1-1: usb_control_msg returned -32 [ 720.465856][ T5714] usbtmc 1-1:16.0: can't read capabilities [ 720.483204][T16758] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 720.514041][T16758] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 720.690776][T16764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16764 comm=syz.1.2925 [ 720.838219][ T5713] ath6kl: Failed to read usb control message: -71 [ 720.863956][ T5713] ath6kl: Unable to read the bmi data from the device: -71 [ 720.881989][T16769] binder: BINDER_SET_CONTEXT_MGR already set [ 720.897165][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.905888][ T5713] ath6kl: unable to read target info byte count: -71 [ 720.913280][T16769] binder: 16768:16769 ioctl 4018620d 200000004a80 returned -16 [ 720.982011][ T5713] ath6kl: Failed to init ath6kl core: -71 [ 721.010983][ T5713] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 721.068424][T16516] veth0_vlan: entered promiscuous mode [ 721.092271][ T5713] usb 5-1: USB disconnect, device number 97 [ 721.184661][T16516] veth1_vlan: entered promiscuous mode [ 721.322428][T16774] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 721.345452][T16516] veth0_macvtap: entered promiscuous mode [ 721.354774][T16516] veth1_macvtap: entered promiscuous mode [ 721.523881][ T5713] usb 1-1: USB disconnect, device number 83 [ 721.542361][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.591050][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.668186][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.768295][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.823993][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.862324][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.956709][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.995717][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.195448][ T3304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.261102][ T3304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.592218][T16844] tc action pedit offset 4 out of bounds [ 725.182871][ T29] audit: type=1400 audit(725.140:1517): avc: denied { write } for pid=16855 comm="syz.5.2955" name="header" dev="configfs" ino=30314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.335496][ T29] audit: type=1400 audit(725.230:1518): avc: denied { write } for pid=16855 comm="syz.5.2955" name="fs" dev="configfs" ino=30321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.470046][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 725.520748][ T29] audit: type=1400 audit(725.320:1519): avc: denied { write } for pid=16855 comm="syz.5.2955" name="c.1" dev="configfs" ino=19815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.576727][T16865] UDC core: g1: couldn't find an available UDC or it's busy [ 725.636649][ T29] audit: type=1400 audit(725.320:1520): avc: denied { write } for pid=16855 comm="syz.5.2955" name="c.1" dev="configfs" ino=19815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.777092][T16277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 725.791450][T16277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 725.810979][T16277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 725.822531][T16277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 725.831295][T16277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 725.900878][ T29] audit: type=1400 audit(725.390:1521): avc: denied { write } for pid=16855 comm="syz.5.2955" name="fs" dev="configfs" ino=30321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 727.314793][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'. [ 727.551236][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.784053][ T8655] syz_tun (unregistering): left allmulticast mode [ 727.862123][ T8655] syz_tun (unregistering): left promiscuous mode [ 727.890782][T16277] Bluetooth: hci4: command tx timeout [ 727.934406][ T8655] bridge0: port 1(syz_tun) entered disabled state [ 728.080382][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.198477][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.289505][ T48] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.539548][T16897] syzkaller0: entered promiscuous mode [ 728.565633][T16897] syzkaller0: entered allmulticast mode [ 729.969175][T16277] Bluetooth: hci4: command tx timeout [ 731.202562][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2978'. [ 731.224317][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2978'. [ 732.056600][T16277] Bluetooth: hci4: command tx timeout [ 733.978162][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2982'. [ 734.128813][T16277] Bluetooth: hci4: command tx timeout [ 734.317013][T16961] gadgetfs: bound to dummy_udc driver [ 734.597482][ T10] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 734.650186][ C0] gadgetfs: connected [ 734.669870][ T10] gadgetfs: disconnected [ 735.334755][T16981] tipc: Resetting bearer [ 735.361342][ T29] audit: type=1400 audit(735.320:1522): avc: denied { write } for pid=16966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.561349][ T29] audit: type=1400 audit(735.520:1523): avc: denied { write } for pid=16993 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.834741][T16999] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 736.332479][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.341515][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.350481][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.359454][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.368370][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.377208][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.386110][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.395007][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.404081][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.413041][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'. [ 736.508419][T17015] gadgetfs: bound to dummy_udc driver [ 736.787669][ T186] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 736.921639][ C0] gadgetfs: connected [ 736.932208][T17013] gadgetfs: suspended from state 3 [ 736.953726][T17013] gadgetfs: disconnected [ 737.278680][ T29] audit: type=1400 audit(737.230:1524): avc: denied { write } for pid=17016 comm="syz.3.2997" name="functions" dev="configfs" ino=10592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 737.319812][T10452] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.912545][ T29] audit: type=1400 audit(737.880:1525): avc: denied { write } for pid=17016 comm="syz.3.2997" name="c.1" dev="configfs" ino=19815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 737.996362][ T365] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.093970][ T29] audit: type=1400 audit(737.880:1526): avc: denied { write } for pid=17016 comm="syz.3.2997" name="c.1" dev="configfs" ino=19815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 738.377465][T10452] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.402166][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.422174][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.444633][T16872] bridge_slave_0: entered allmulticast mode [ 738.475255][T16872] bridge_slave_0: entered promiscuous mode [ 738.503947][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.524002][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.538268][ T29] audit: type=1400 audit(738.500:1527): avc: denied { write } for pid=17037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.568625][T16872] bridge_slave_1: entered allmulticast mode [ 738.586393][T16872] bridge_slave_1: entered promiscuous mode [ 738.664034][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.700276][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.720361][ T29] audit: type=1400 audit(738.680:1528): avc: denied { write } for pid=17059 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.924689][T16872] team0: Port device team_slave_0 added [ 741.764083][ T57] gretap0 (unregistering): left allmulticast mode [ 742.949172][T17098] program syz.4.3016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.018877][ T57] bond1 (unregistering): (slave geneve2): Releasing active interface [ 743.233914][ T57] bond4 (unregistering): (slave bridge2): Releasing active interface [ 743.272200][ T57] bridge2 (unregistering): left promiscuous mode [ 743.298071][ T57] bridge2 (unregistering): left allmulticast mode [ 743.393117][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.436065][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.479492][ T57] bond0 (unregistering): Released all slaves [ 743.518875][ T57] bond1 (unregistering): Released all slaves [ 743.569427][ T57] bond2 (unregistering): Released all slaves [ 743.619719][ T57] bond3 (unregistering): Released all slaves [ 743.695967][ T57] bond4 (unregistering): Released all slaves [ 743.758844][ T57] bond5 (unregistering): Released all slaves [ 743.828325][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 743.893179][T13880] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.948342][T16872] team0: Port device team_slave_1 added [ 744.081668][ T57] tipc: Disabling bearer [ 744.107081][ T57] tipc: Disabling bearer [ 744.124968][T17112] dummy_hcd dummy_hcd.0: remove, state 1 [ 744.139254][ T5706] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 744.252404][ T57] tipc: Left network mode [ 744.264077][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.272478][T17112] usb usb1: USB disconnect, device number 1 [ 744.280586][ T5706] usb usb1-port1: attempt power cycle [ 744.322805][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.524906][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.599291][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.665765][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.820631][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.859349][T17112] dummy_hcd dummy_hcd.0: stopped [ 744.945886][T17112] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 746.036764][T17123] __nla_validate_parse: 44 callbacks suppressed [ 746.036778][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3021'. [ 746.122052][T16872] hsr_slave_0: entered promiscuous mode [ 746.165682][T16872] hsr_slave_1: entered promiscuous mode [ 746.196691][T16872] debugfs: 'hsr0' already exists in 'hsr' [ 746.244710][T16872] Cannot create hsr debugfs directory [ 746.544841][ T29] audit: type=1400 audit(746.500:1529): avc: denied { write } for pid=17118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.872420][ T29] audit: type=1400 audit(746.820:1530): avc: denied { write } for pid=17134 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.930498][T17136] netlink: 'syz.5.3024': attribute type 1 has an invalid length. [ 746.941415][T17105] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 746.953471][T17105] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 746.961856][T17105] CPU: 0 UID: 0 PID: 17105 Comm: syz.0.3019 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.972759][T17105] Tainted: [L]=SOFTLOCKUP [ 746.977051][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 746.987085][T17105] RIP: 0010:set_link_state+0x27/0xc70 [ 746.992442][T17105] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 da 50 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 747.012106][T17105] RSP: 0018:ffffc90003f07850 EFLAGS: 00010046 [ 747.018146][T17105] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d11fe3 [ 747.026088][T17105] RDX: 0000000000000000 RSI: ffffffff87d11106 RDI: 0000000000000000 [ 747.034031][T17105] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 747.041982][T17105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 747.049925][T17105] R13: ffff88802b15c000 R14: 0000000000000000 R15: ffff88802b15cc00 [ 747.057869][T17105] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 747.066774][T17105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.073425][T17105] CR2: 0000000000000000 CR3: 000000007d95b000 CR4: 00000000003526f0 [ 747.081368][T17105] DR0: 0000000000000c45 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.089309][T17105] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 747.097265][T17105] Call Trace: [ 747.100518][T17105] [ 747.103427][T17105] ? __pfx_dummy_pullup+0x10/0x10 [ 747.108441][T17105] dummy_pullup+0xf3/0x170 [ 747.112835][T17105] ? __pfx_dummy_pullup+0x10/0x10 [ 747.117836][T17105] usb_gadget_disconnect_locked+0x142/0x4e0 [ 747.123730][T17105] gadget_unbind_driver+0xd8/0x4f0 [ 747.128831][T17105] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 747.134524][T17105] device_remove+0xcb/0x180 [ 747.139005][T17105] device_release_driver_internal+0x44e/0x620 [ 747.145047][T17105] driver_detach+0xd8/0x1b0 [ 747.149533][T17105] bus_remove_driver+0x13b/0x2e0 [ 747.154465][T17105] driver_unregister+0x76/0xb0 [ 747.159213][T17105] usb_gadget_unregister_driver+0x49/0x70 [ 747.164933][T17105] raw_release+0x19b/0x260 [ 747.169424][T17105] ? __pfx_raw_release+0x10/0x10 [ 747.174362][T17105] __fput+0x3ff/0xb50 [ 747.178422][T17105] task_work_run+0x150/0x240 [ 747.183086][T17105] ? __pfx_task_work_run+0x10/0x10 [ 747.188213][T17105] ? do_raw_spin_unlock+0x145/0x1e0 [ 747.193415][T17105] do_exit+0x951/0x2ae0 [ 747.197559][T17105] ? __pfx_do_exit+0x10/0x10 [ 747.202147][T17105] ? do_raw_spin_lock+0x128/0x260 [ 747.207186][T17105] ? find_held_lock+0x2b/0x80 [ 747.211846][T17105] ? get_signal+0x7e0/0x21e0 [ 747.216423][T17105] do_group_exit+0xd5/0x2a0 [ 747.220958][T17105] get_signal+0x1ec7/0x21e0 [ 747.225461][T17105] ? __down_common+0x6c5/0x8b0 [ 747.230213][T17105] ? __pfx_get_signal+0x10/0x10 [ 747.235054][T17105] ? down_interruptible+0x66/0xa0 [ 747.240072][T17105] ? rcu_is_watching+0x12/0xc0 [ 747.244832][T17105] arch_do_signal_or_restart+0x91/0x7e0 [ 747.250359][T17105] ? down_interruptible+0x66/0xa0 [ 747.255372][T17105] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.261502][T17105] ? __pfx_raw_ioctl+0x10/0x10 [ 747.266302][T17105] exit_to_user_mode_loop+0x139/0x6f0 [ 747.271673][T17105] ? rcu_is_watching+0x12/0xc0 [ 747.276534][T17105] do_syscall_64+0x666/0x870 [ 747.281117][T17105] ? clear_bhb_loop+0x40/0x90 [ 747.285772][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.291654][T17105] RIP: 0033:0x7ffadb39dcab [ 747.296041][T17105] Code: Unable to access opcode bytes at 0x7ffadb39dc81. [ 747.303038][T17105] RSP: 002b:00007ffadc2a5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.311455][T17105] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007ffadb39dcab [ 747.319411][T17105] RDX: 00007ffadc2a6fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 747.327366][T17105] RBP: 00007ffadc2a6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 747.335327][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 747.343284][T17105] R13: 0000000800000000 R14: 0000000000000003 R15: 00007ffadb45386a [ 747.351250][T17105] [ 747.354253][T17105] Modules linked in: [ 747.358122][T17105] ---[ end trace 0000000000000000 ]--- [ 747.363548][T17105] RIP: 0010:set_link_state+0x27/0xc70 [ 747.368917][T17105] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 da 50 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 747.388518][T17105] RSP: 0018:ffffc90003f07850 EFLAGS: 00010046 [ 747.394576][T17105] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d11fe3 [ 747.402560][T17105] RDX: 0000000000000000 RSI: ffffffff87d11106 RDI: 0000000000000000 [ 747.410513][T17105] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 747.418456][T17105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 747.426411][T17105] R13: ffff88802b15c000 R14: 0000000000000000 R15: ffff88802b15cc00 [ 747.434354][T17105] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 747.443267][T17105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.449910][T17105] CR2: 0000000000000000 CR3: 000000007d95b000 CR4: 00000000003526f0 [ 747.457945][T17105] DR0: 0000000000000c45 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.465896][T17105] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 747.473851][T17105] Kernel panic - not syncing: Fatal exception [ 747.479928][T17105] Kernel Offset: disabled [ 747.484227][T17105] Rebooting in 86400 seconds..