last executing test programs: 9.298914691s ago: executing program 3 (id=2714): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 9.172227477s ago: executing program 3 (id=2716): fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x5b}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40002}, 0x94) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x400800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r5, r5, 0x0, 0x40008) close_range(r0, 0xffffffffffffffff, 0x0) 8.896528505s ago: executing program 2 (id=2718): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 8.71426594s ago: executing program 0 (id=2719): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) 7.640169913s ago: executing program 2 (id=2724): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6.729138068s ago: executing program 2 (id=2726): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 6.450453773s ago: executing program 1 (id=2727): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) getcwd(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) 5.437747379s ago: executing program 1 (id=2729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='wchan\x00') socket$kcm(0x10, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r3) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.334528205s ago: executing program 4 (id=2730): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="05042bbd7000f6dbdf250100000008000100", @ANYRES32=r3], 0xa0}, 0x1, 0x0, 0x0, 0x4008491}, 0x44084) 5.20433138s ago: executing program 0 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_unix(&(0x7f0000004ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00', &(0x7f0000005a00), 0x0, &(0x7f0000005a40)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1d, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x4240) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000000c0)={0x3, 0x60000000, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1}, 0xfffffffe}], 0x1, 0x2030, 0x0) 3.697171182s ago: executing program 0 (id=2732): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000500)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80003, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000001c0)=0x10000, 0x4) write(r3, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {}, 0x73, 0x9, 0x2, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{}, {0x8}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@inet=@rpfilter={{}, {0x2}}]}, @common=@inet=@TEE={0x0, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'ip6erspan0\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x444) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000440)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x72, {0x2, 0x4e21, @multicast2}, 'bridge_slave_1\x00'}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 3.659933999s ago: executing program 4 (id=2733): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.562414937s ago: executing program 1 (id=2734): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000340)=0xc) r1 = socket$inet6(0xa, 0x3, 0x40) bind(r1, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 3.445977782s ago: executing program 1 (id=2735): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.215644467s ago: executing program 1 (id=2736): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac01, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.940355632s ago: executing program 3 (id=2737): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.939706151s ago: executing program 4 (id=2738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xaf5f38f7904dd4fb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0xc884) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.827061411s ago: executing program 3 (id=2739): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) getcwd(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) 1.965379s ago: executing program 4 (id=2740): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.964824076s ago: executing program 2 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.811036202s ago: executing program 3 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.665110718s ago: executing program 4 (id=2743): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000340)=0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="05042bbd7000f6dbdf250100000008000100", @ANYRES32=r3], 0xa0}, 0x1, 0x0, 0x0, 0x4008491}, 0x44084) 1.574011281s ago: executing program 2 (id=2744): socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000000000030000000700000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = dup(0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r5 = dup(r3) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, r1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 579.537436ms ago: executing program 0 (id=2745): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 396.066214ms ago: executing program 1 (id=2746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) dup3(r2, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x5a1600, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 153.698441ms ago: executing program 4 (id=2747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r5 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$UHID_CREATE(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xeeee8000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0xfc, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x83}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x8080000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0xfc, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x5, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffbfffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 120.914911ms ago: executing program 2 (id=2748): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4084) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0xd) accept4(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 90.725035ms ago: executing program 0 (id=2749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008051}, 0x4844) 45.008247ms ago: executing program 3 (id=2750): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xdb3, 0x0, 0xa190, 0x1, 0x6}) 0s ago: executing program 0 (id=2751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): hcd [ 322.861264][T10285] lab-pc-1200 [ 322.865176][T10285] lab-pc-1200ai [ 322.868756][T10285] lab-pc+ [ 322.871790][T10285] comedi: valid board names for atmio16 driver are: [ 322.878424][T10285] atmio16 [ 322.881464][T10285] atmio16d [ 322.884653][T10285] comedi: valid board names for ni_at_ao driver are: [ 322.891332][T10285] at-ao-6 [ 322.894410][T10285] at-ao-10 [ 322.897526][T10285] comedi: valid board names for ni_at_a2150 driver are: [ 322.905120][T10285] ni_at_a2150 [ 322.908795][T10285] comedi: valid board names for adq12b driver are: [ 322.916294][T10285] adq12b [ 322.919252][T10285] comedi: valid board names for mpc624 driver are: [ 322.925827][T10285] mpc624 [ 322.928771][T10285] comedi: valid board names for c6xdigio driver are: [ 322.938872][T10285] c6xdigio [ 322.942013][T10285] comedi: valid board names for aio_iiro_16 driver are: [ 322.949436][T10285] aio_iiro_16 [ 322.954942][T10285] comedi: valid board names for aio_aio12_8 driver are: [ 322.961907][T10285] aio_aio12_8 [ 322.965328][T10285] aio_ai12_8 [ 322.968709][T10285] aio_ao12_4 [ 322.971999][T10285] comedi: valid board names for fl512 driver are: [ 322.978461][T10285] fl512 [ 322.981317][T10285] comedi: valid board names for dmm32at driver are: [ 322.988043][T10285] dmm32at [ 322.991082][T10285] comedi: valid board names for dt282x driver are: [ 322.997631][T10285] dt2821 [ 323.000575][T10285] dt2821-f [ 323.003727][T10285] dt2821-g [ 323.006846][T10285] dt2823 [ 323.009785][T10285] dt2824-pgh [ 323.013135][T10285] dt2824-pgl [ 323.014378][ T5609] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 323.016423][T10285] dt2825 [ 323.016433][T10285] dt2827 [ 323.016439][T10285] dt2828 [ 323.016445][T10285] dt2829 [ 323.016451][T10285] dt21-ez [ 323.016458][T10285] dt23-ez [ 323.016465][T10285] dt24-ez [ 323.027022][ T5609] usb 2-1: can't read configurations, error -61 [ 323.028341][T10285] dt24-ez-pgl [ 323.033639][ T5609] usb usb2-port1: attempt power cycle [ 323.035886][T10285] comedi: valid board names for dt2817 driver are: [ 323.035898][T10285] dt2817 [ 323.035904][T10285] comedi: valid board names for dt2815 driver are: [ 323.035913][T10285] dt2815 [ 323.035919][T10285] comedi: valid board names for dt2814 driver are: [ 323.035928][T10285] dt2814 [ 323.092883][T10285] comedi: valid board names for dt2811 driver are: [ 323.099439][T10285] dt2811-pgh [ 323.102976][T10285] dt2811-pgl [ 323.106956][T10285] comedi: valid board names for dt2801 driver are: [ 323.113538][T10285] dt2801 [ 323.116484][T10285] comedi: valid board names for das6402 driver are: [ 323.123155][T10285] das6402-12 [ 323.126461][T10285] das6402-16 [ 323.129750][T10285] comedi: valid board names for das1800 driver are: [ 323.137404][T10285] das-1701st [ 323.140748][T10285] das-1701st-da [ 323.144422][T10285] das-1702st [ 323.147749][T10285] das-1702st-da [ 323.151336][T10285] das-1702hr [ 323.154700][T10285] das-1702hr-da [ 323.159773][T10285] das-1701ao [ 323.163175][T10285] das-1702ao [ 323.166504][T10285] das-1801st [ 323.169832][T10285] das-1801st-da [ 323.173466][T10285] das-1802st [ 323.176800][T10285] das-1802st-da [ 323.180390][T10285] das-1802hr [ 323.183815][T10285] das-1802hr-da [ 323.187403][T10285] das-1801hc [ 323.190727][T10285] das-1802hc [ 323.194271][T10285] das-1801ao [ 323.197769][T10285] das-1802ao [ 323.201110][T10285] comedi: valid board names for das800 driver are: [ 323.207808][T10285] das-800 [ 323.210889][T10285] cio-das800 [ 323.214290][T10285] das-801 [ 323.217366][T10285] cio-das801 [ 323.220700][T10285] das-802 [ 323.223887][T10285] cio-das802 [ 323.227230][T10285] cio-das802/16 [ 323.230840][T10285] comedi: valid board names for isa-das08 driver are: [ 323.237705][T10285] isa-das08 [ 323.240943][T10285] das08-pgm [ 323.244310][T10285] das08-pgh [ 323.247557][T10285] das08-pgl [ 323.250843][T10285] das08-aoh [ 323.254189][T10285] das08-aol [ 323.257464][T10285] das08-aom [ 323.262053][T10285] das08/jr-ao [ 323.265641][T10285] das08jr-16-ao [ 323.269283][T10285] pc104-das08 [ 323.272761][T10285] das08jr/16 [ 323.276112][T10285] comedi: valid board names for das16m1 driver are: [ 323.282862][T10285] das16m1 [ 323.285956][T10285] comedi: valid board names for dac02 driver are: [ 323.292452][T10285] dac02 [ 323.296170][T10285] comedi: valid board names for rti802 driver are: [ 323.305507][T10285] rti802 [ 323.308513][T10285] comedi: valid board names for rti800 driver are: [ 323.315186][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 323.327155][T10285] rti800 [ 323.330152][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 323.342031][T10285] rti815 [ 323.345068][T10285] comedi: valid board names for pcm3724 driver are: [ 323.353072][T10285] pcm3724 [ 323.353703][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 323.370283][T10285] comedi: valid board names for pcl818 driver are: [ 323.376831][T10285] pcl818l [ 323.379849][T10285] pcl818h [ 323.383031][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 323.392255][T10285] pcl818hd [ 323.395927][ T5699] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 323.402691][ T5609] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 323.404696][T10285] pcl818hg [ 323.416179][T10285] pcl818 [ 323.419143][T10285] pcl718 [ 323.425081][ T5699] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 323.429467][ T5609] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 323.433291][T10285] pcm3718 [ 323.446125][ T5609] usb 2-1: can't read configurations, error -61 [ 323.456779][ T5699] usb 4-1: USB disconnect, device number 39 [ 323.471518][T10285] comedi: valid board names for pcl816 driver are: [ 323.489177][T10285] pcl816 [ 323.493854][T10285] pcl814b [ 323.496901][T10285] comedi: valid board names for pcl812 driver are: [ 323.503783][T10285] pcl812 [ 323.506736][T10285] pcl812pg [ 323.509845][T10285] acl8112pg [ 323.513122][T10285] acl8112dg [ 323.516333][T10285] acl8112hg [ 323.519515][T10285] a821pgl [ 323.522526][T10285] a821pglnda [ 323.527037][T10285] a821pgh [ 323.530554][T10285] a822pgl [ 323.536074][T10285] a822pgh [ 323.540574][T10285] a823pgl [ 323.544729][T10285] a823pgh [ 323.556995][T10285] pcl813 [ 323.559939][T10285] pcl813b [ 323.563008][T10285] acl8113 [ 323.566792][T10285] iso813 [ 323.569719][T10285] acl8216 [ 323.573078][T10285] a826pg [ 323.577517][T10285] comedi: valid board names for pcl730 driver are: [ 323.585168][T10285] pcl730 [ 323.588143][T10285] iso730 [ 323.591133][T10285] acl7130 [ 323.594249][T10285] pcm3730 [ 323.597267][T10285] pcl725 [ 323.600192][T10285] p8r8dio [ 323.603358][T10285] acl7225b [ 323.603357][ T5609] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 323.606474][T10285] p16r16dio [ 323.676607][ T5609] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 323.684422][ T5609] usb 2-1: can't read configurations, error -61 [ 323.690968][ T5609] usb usb2-port1: unable to enumerate USB device [ 323.724409][T10285] pcl733 [ 323.727869][T10285] pcl734 [ 323.730804][T10285] opmm-1616-xt [ 323.734326][T10285] pearl-mm-p [ 323.738072][T10285] ir104-pbf [ 323.741284][T10285] comedi: valid board names for pcl726 driver are: [ 323.748091][T10285] pcl726 [ 323.751092][T10285] pcl727 [ 323.754057][T10285] pcl728 [ 323.756980][T10285] acl6126 [ 323.759984][T10285] acl6128 [ 323.763036][T10285] comedi: valid board names for pcl724 driver are: [ 323.769521][T10285] pcl724 [ 323.773894][T10285] pcl722 [ 323.776851][T10285] pcl731 [ 323.779773][T10285] acl7122 [ 323.782896][T10285] acl7124 [ 323.787740][T10285] pet48dio [ 323.790859][T10285] pcmio48 [ 323.793924][T10285] onyx-mm-dio [ 323.797283][T10285] comedi: valid board names for pcl711 driver are: [ 323.803803][T10285] pcl711 [ 323.806726][T10285] pcl711b [ 323.809733][T10285] acl8112hg [ 323.812953][T10285] acl8112dg [ 323.816138][T10285] comedi: valid board names for amplc_pc263 driver are: [ 323.824677][T10285] pc263 [ 323.827534][T10285] comedi: valid board names for amplc_pc236 driver are: [ 323.834538][T10285] pc36at [ 323.837464][T10285] comedi: valid board names for amplc_dio200 driver are: [ 323.844587][T10285] pc212e [ 323.847516][T10285] pc214e [ 323.850433][T10285] pc215e [ 323.853381][T10285] pc218e [ 323.858006][T10285] pc272e [ 323.860959][T10285] comedi: valid board names for comedi_parport driver are: [ 323.868230][T10285] comedi_parport [ 323.871880][T10285] comedi: valid board names for comedi_test driver are: [ 323.880430][T10285] comedi_test [ 323.883863][T10285] comedi: valid board names for comedi_bond driver are: [ 323.890789][T10285] comedi_bond [ 323.907084][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 324.379683][ T803] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 324.556386][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.619027][ T803] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 324.655364][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.721455][ T803] usb 1-1: config 0 descriptor?? [ 324.818383][ T803] pwc: Askey VC010 type 2 USB webcam detected. [ 324.938127][ T5728] usb 3-1: USB disconnect, device number 36 [ 325.167841][ T803] pwc: recv_control_msg error -32 req 02 val 2b00 [ 325.175828][ T803] pwc: recv_control_msg error -32 req 02 val 2700 [ 325.189854][ T803] pwc: recv_control_msg error -32 req 02 val 2c00 [ 325.349858][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.358098][ T5728] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 325.432910][ T24] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 325.440990][ T803] pwc: recv_control_msg error -71 req 04 val 1300 [ 325.451739][T10337] syzkaller0: entered promiscuous mode [ 325.458492][T10337] syzkaller0: entered allmulticast mode [ 325.464250][ T803] pwc: recv_control_msg error -71 req 04 val 1400 [ 325.471175][ T803] pwc: recv_control_msg error -71 req 02 val 2000 [ 325.478859][ T803] pwc: recv_control_msg error -71 req 02 val 2100 [ 325.485798][ T803] pwc: recv_control_msg error -71 req 04 val 1500 [ 325.492734][ T803] pwc: recv_control_msg error -71 req 02 val 2500 [ 325.493942][ T5609] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 325.499664][ T803] pwc: recv_control_msg error -71 req 02 val 2400 [ 325.516996][ T803] pwc: recv_control_msg error -71 req 02 val 2600 [ 325.527017][ T803] pwc: recv_control_msg error -71 req 02 val 2900 [ 325.534009][ T803] pwc: recv_control_msg error -71 req 02 val 2800 [ 325.541174][ T803] pwc: recv_control_msg error -71 req 04 val 1100 [ 325.548428][ T803] pwc: recv_control_msg error -71 req 04 val 1200 [ 325.559115][ T803] pwc: Registered as video103. [ 325.565302][ T5728] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 325.583250][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.584747][ T803] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 325.609428][ T803] usb 1-1: USB disconnect, device number 36 [ 325.618845][ T5728] usb 3-1: Product: syz [ 325.642513][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 325.658160][ T5728] usb 3-1: Manufacturer: syz [ 325.666492][ T5728] usb 3-1: SerialNumber: syz [ 325.682775][ T24] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 325.694744][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.703541][ T5609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.714786][ T5609] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.729848][ T24] usb 4-1: Product: syz [ 325.734700][ T24] usb 4-1: Manufacturer: syz [ 325.739379][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.747861][ T24] usb 4-1: SerialNumber: syz [ 325.762376][ T5609] usb 5-1: config 0 descriptor?? [ 325.790908][ T24] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 325.799912][ T5609] pwc: Askey VC010 type 2 USB webcam detected. [ 326.136360][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 326.148607][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 326.194798][ T5609] pwc: recv_control_msg error -32 req 02 val 2b00 [ 326.202143][ T5609] pwc: recv_control_msg error -32 req 02 val 2700 [ 326.210529][ T5609] pwc: recv_control_msg error -32 req 02 val 2c00 [ 326.218811][ T5609] pwc: recv_control_msg error -32 req 04 val 1000 [ 326.226254][ T5609] pwc: recv_control_msg error -32 req 04 val 1300 [ 326.235221][ T5609] pwc: recv_control_msg error -32 req 04 val 1400 [ 326.242758][ T5609] pwc: recv_control_msg error -32 req 02 val 2000 [ 326.249979][ T5609] pwc: recv_control_msg error -32 req 02 val 2100 [ 326.257456][ T5609] pwc: recv_control_msg error -32 req 04 val 1500 [ 326.265008][ T5609] pwc: recv_control_msg error -32 req 02 val 2500 [ 326.272188][ T5609] pwc: recv_control_msg error -32 req 02 val 2400 [ 326.279594][ T5609] pwc: recv_control_msg error -32 req 02 val 2600 [ 326.287001][ T5609] pwc: recv_control_msg error -32 req 02 val 2900 [ 326.495397][ T5609] pwc: recv_control_msg error -71 req 04 val 1100 [ 326.503890][ T5609] pwc: recv_control_msg error -71 req 04 val 1200 [ 326.520331][ T5609] pwc: Registered as video103. [ 326.530053][ T5609] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 326.574636][ T5609] usb 5-1: USB disconnect, device number 34 [ 326.805701][ T24] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 326.843973][ T24] usb 4-1: USB disconnect, device number 40 [ 327.328134][T10350] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1644'. [ 327.485352][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 327.666735][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 327.693850][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 327.713086][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 327.725837][ T5728] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 327.745990][ T5728] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 327.777678][ T5728] usb 3-1: USB disconnect, device number 37 [ 327.786531][ T29] audit: type=1400 audit(1777379857.350:448): avc: denied { map } for pid=10358 comm="syz.0.1649" path="socket:[27190]" dev="sockfs" ino=27190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 327.838923][ T29] audit: type=1400 audit(1777379857.350:449): avc: denied { read accept } for pid=10358 comm="syz.0.1649" path="socket:[27190]" dev="sockfs" ino=27190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 328.022753][ T5797] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 328.052675][ T803] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 328.186454][ T5797] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.186498][ T5797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 328.186521][ T5797] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 328.188363][ T5797] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.188388][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.188406][ T5797] usb 1-1: Product: syz [ 328.188418][ T5797] usb 1-1: Manufacturer: syz [ 328.188431][ T5797] usb 1-1: SerialNumber: syz [ 328.257451][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 328.257483][ T803] usb 4-1: can't read configurations, error -61 [ 328.382729][ T803] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 328.401681][T10359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.412116][T10359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.432637][ T5699] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 328.466948][T10372] syz.2.1655 (10372): drop_caches: 2 [ 328.484754][T10372] 9p: Bad value for 'rfdno' [ 328.713773][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 328.742386][ T5699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.760817][ T803] usb 4-1: can't read configurations, error -61 [ 328.772650][ T5699] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 328.785933][ T803] usb usb4-port1: attempt power cycle [ 328.851161][ T5699] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.862947][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.871693][ T5699] usb 5-1: Product: syz [ 328.876031][ T5699] usb 5-1: Manufacturer: syz [ 328.883475][ T5699] usb 5-1: SerialNumber: syz [ 329.145475][ T5699] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 329.162691][ T803] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 329.183064][T10359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.194439][ T5699] usb 5-1: USB disconnect, device number 35 [ 329.215735][T10359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.223565][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 329.240975][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'. [ 329.245101][ T803] usb 4-1: can't read configurations, error -61 [ 329.778003][ T5797] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 329.784600][ T5797] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 329.792098][ T5797] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 329.799036][ T5797] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 329.820350][ T5797] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 329.836531][ T5797] usb 1-1: USB disconnect, device number 37 [ 329.847614][ T5797] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 329.922646][ T803] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 329.938598][ T29] audit: type=1400 audit(1777379859.510:450): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 329.957597][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 329.975780][ T803] usb 4-1: can't read configurations, error -61 [ 329.989534][ T803] usb usb4-port1: unable to enumerate USB device [ 330.112680][ T5699] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 330.168917][T10413] ±ÿ: renamed from lo (while UP) [ 330.273772][ T5699] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 330.282055][ T5699] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 330.292385][ T5699] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.302207][ T5699] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 330.313713][ T803] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 330.321304][ T5699] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.335735][ T5699] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.345433][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.358416][ T5699] usbtmc 5-1:16.0: bulk endpoints not found [ 330.493057][ T5609] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 330.505224][ T803] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 330.514078][ T803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 330.524780][ T803] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 330.534866][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.543057][ T803] usb 2-1: Product: syz [ 330.547272][ T803] usb 2-1: Manufacturer: syz [ 330.551861][ T803] usb 2-1: SerialNumber: syz [ 330.558731][ T803] usb 2-1: config 0 descriptor?? [ 330.561650][ T5728] usb 5-1: USB disconnect, device number 36 [ 330.622777][ T5727] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 330.643865][ T5609] usb 3-1: config 0 has no interfaces? [ 330.651000][ T5609] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 330.660236][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.668427][ T5609] usb 3-1: Product: syz [ 330.672692][ T5609] usb 3-1: Manufacturer: syz [ 330.677300][ T5609] usb 3-1: SerialNumber: syz [ 330.683921][ T5609] usb 3-1: config 0 descriptor?? [ 330.784068][ T5727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.794427][ T5727] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 330.803587][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.822994][ T5727] usb 1-1: config 0 descriptor?? [ 330.835946][ T5727] pwc: Askey VC010 type 2 USB webcam detected. [ 330.907008][ T5728] usb 3-1: USB disconnect, device number 38 [ 330.945691][ T5610] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 330.972242][ T803] mos7840 2-1:0.0: required endpoints missing [ 330.988159][ T803] usb 2-1: USB disconnect, device number 46 [ 331.135736][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 331.237681][ T5727] pwc: recv_control_msg error -32 req 02 val 2b00 [ 331.260178][ T5727] pwc: recv_control_msg error -32 req 02 val 2700 [ 331.271505][ T5727] pwc: recv_control_msg error -32 req 02 val 2c00 [ 331.281463][ T5727] pwc: recv_control_msg error -32 req 04 val 1000 [ 331.290611][ T5727] pwc: recv_control_msg error -32 req 04 val 1300 [ 331.498156][ T5727] pwc: recv_control_msg error -71 req 02 val 2000 [ 331.506197][ T5727] pwc: recv_control_msg error -71 req 02 val 2100 [ 331.517052][ T5727] pwc: recv_control_msg error -71 req 04 val 1500 [ 331.522698][ T803] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 331.524290][ T5727] pwc: recv_control_msg error -71 req 02 val 2500 [ 331.544623][ T5727] pwc: recv_control_msg error -71 req 02 val 2400 [ 331.561045][ T5727] pwc: recv_control_msg error -71 req 02 val 2600 [ 331.585656][ T5727] pwc: recv_control_msg error -71 req 02 val 2900 [ 331.599911][ T5727] pwc: recv_control_msg error -71 req 02 val 2800 [ 331.609261][ T5727] pwc: recv_control_msg error -71 req 04 val 1100 [ 331.623004][ T5727] pwc: recv_control_msg error -71 req 04 val 1200 [ 331.636116][ T5727] pwc: Registered as video103. [ 331.651792][ T5727] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 331.688121][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 331.697887][ T5727] usb 1-1: USB disconnect, device number 38 [ 331.716835][ T5797] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 331.731521][ T803] usb 4-1: can't read configurations, error -61 [ 331.873060][ T803] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 331.904675][ T5797] usb 3-1: Using ep0 maxpacket: 32 [ 331.911458][ T5797] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 331.920361][ T5797] usb 3-1: config 0 has no interface number 0 [ 331.929083][ T5797] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 331.938535][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.946933][ T5797] usb 3-1: Product: syz [ 331.951246][ T5797] usb 3-1: Manufacturer: syz [ 331.957057][ T5797] usb 3-1: SerialNumber: syz [ 331.967576][ T5797] usb 3-1: config 0 descriptor?? [ 332.023281][ T5699] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 332.047346][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.058781][ T803] usb 4-1: can't read configurations, error -61 [ 332.083872][ T803] usb usb4-port1: attempt power cycle [ 332.233708][T10481] netlink: 'syz.1.1704': attribute type 2 has an invalid length. [ 332.241685][T10481] netlink: 'syz.1.1704': attribute type 2 has an invalid length. [ 332.296139][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 332.307483][ T5699] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 332.317090][ T5699] usb 5-1: config 0 has no interface number 0 [ 332.324168][ T5699] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.355671][ T5699] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.414217][ T5699] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 332.432912][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.515498][ T5797] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 332.532204][ T5797] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 332.541504][ T5699] usb 5-1: Product: syz [ 332.546723][ T5699] usb 5-1: Manufacturer: syz [ 332.551669][ T5699] usb 5-1: SerialNumber: syz [ 332.560637][ T5699] usb 5-1: config 0 descriptor?? [ 332.582671][ T803] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 332.601319][ T5699] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.618137][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.626233][ T803] usb 4-1: can't read configurations, error -61 [ 332.782716][ T803] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 332.827420][ T803] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.835104][ T5699] usb 5-1: qt2_attach - failed to power on unit: -71 [ 332.846275][ T5699] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 332.856506][ T803] usb 4-1: can't read configurations, error -61 [ 332.866228][ T803] usb usb4-port1: unable to enumerate USB device [ 332.986385][ T5699] usb 5-1: USB disconnect, device number 37 [ 333.153376][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1708'. [ 333.487362][T10496] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.061962][ T5797] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 334.098195][ T5797] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 334.124397][ T5797] usb 3-1: USB disconnect, device number 39 [ 334.264372][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 334.280086][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 334.780550][T10530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 334.787065][T10530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.795238][T10530] vhci_hcd vhci_hcd.0: Device attached [ 335.096770][T10532] vhci_hcd: connection closed [ 335.097352][ T5610] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 335.104524][ T63] vhci_hcd vhci_hcd.1: stop threads [ 335.112844][ T5610] Bluetooth: hci4: Injecting HCI hardware error event [ 335.124778][ T5610] Bluetooth: hci4: hardware error 0x00 [ 335.150776][ T63] vhci_hcd vhci_hcd.1: release socket [ 335.173093][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 335.182704][ T5609] usb 36-1: SetAddress Request (6) to port 0 [ 335.190466][ T5609] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 335.242672][ T5609] usb 36-1: enqueue for inactive port 0 [ 335.328879][T10547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 335.367055][T10547] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1728'. [ 335.385468][T10547] team0: No ports can be present during mode change [ 335.942889][ T5797] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 336.053481][ T5609] usb usb36-port1: attempt power cycle [ 336.207845][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 336.224058][ T5797] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 336.263861][ T5797] usb 1-1: config 0 has no interface number 0 [ 336.271018][ T5797] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.353892][T10572] netlink: 'syz.3.1737': attribute type 2 has an invalid length. [ 336.362294][T10572] netlink: 'syz.3.1737': attribute type 2 has an invalid length. [ 336.559738][ T5802] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 336.586216][ T5797] usb 1-1: config 0 interface 85 has no altsetting 0 [ 336.644436][ T5797] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 336.661766][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.681981][ T5797] usb 1-1: Product: syz [ 336.698952][ T5797] usb 1-1: Manufacturer: syz [ 336.708564][ T5797] usb 1-1: SerialNumber: syz [ 336.726191][ T5797] usb 1-1: config 0 descriptor?? [ 336.754694][ T5802] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 336.762510][ T5802] usb 5-1: can't read configurations, error -61 [ 336.769692][ T5609] usb usb36-port1: unable to enumerate USB device [ 336.906276][ T5802] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 337.086270][ T5802] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 337.100882][ T5802] usb 5-1: can't read configurations, error -61 [ 337.118477][ T5802] usb usb5-port1: attempt power cycle [ 337.162674][ T5727] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 337.170384][ T5609] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 337.185774][ T5610] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 337.275785][ T5797] appletouch 1-1:0.85: Geyser mode initialized. [ 337.285382][ T5797] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input17 [ 337.572734][ T5802] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 337.647266][ T5802] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 337.688009][ T5802] usb 5-1: can't read configurations, error -61 [ 337.741873][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 337.750553][ T5609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.761425][ T5609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 337.777743][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.788257][ T5727] usb 4-1: config 0 has no interfaces? [ 337.795737][ T5727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.795854][ T5609] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.814510][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.822503][ T5727] usb 4-1: SerialNumber: syz [ 337.827993][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.837055][ T5727] usb 4-1: config 0 descriptor?? [ 337.842240][ T5609] usb 2-1: Product: syz [ 337.846636][ T5609] usb 2-1: Manufacturer: syz [ 337.852436][ T5609] usb 2-1: SerialNumber: syz [ 337.872705][ T5802] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 337.894785][ T5802] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 337.903998][ T5802] usb 5-1: can't read configurations, error -61 [ 337.910701][ T5802] usb usb5-port1: unable to enumerate USB device [ 337.933877][ T5727] usb 1-1: USB disconnect, device number 39 [ 337.954624][ T5727] appletouch 1-1:0.85: input: appletouch disconnected [ 338.055651][ T5728] usb 4-1: USB disconnect, device number 49 [ 338.085763][ T5609] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 338.106280][ T5609] usb 2-1: USB disconnect, device number 47 [ 338.592850][ T5609] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 338.619077][ T29] audit: type=1400 audit(1777379868.190:451): avc: denied { ioctl } for pid=10624 comm="syz.2.1762" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 338.764888][ T5609] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 338.785787][ T5609] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 338.797759][ T5609] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.809483][ T5609] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 338.822146][ T5609] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.834055][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1766'. [ 338.846250][ T5609] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.855704][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.871569][T10634] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1766'. [ 338.883492][T10634] team0: No ports can be present during mode change [ 339.151885][ T5609] usb 2-1: usb_control_msg returned -71 [ 339.162620][ T5609] usbtmc 2-1:16.0: can't read capabilities [ 339.202327][ T5609] usb 2-1: USB disconnect, device number 48 [ 339.442670][ T5797] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 339.603591][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 339.611758][ T5797] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 339.624960][ T5797] usb 4-1: config 0 has no interface number 0 [ 339.631213][ T5797] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.108322][ T5797] usb 4-1: config 0 interface 85 has no altsetting 0 [ 340.130855][T10661] ceph: No mds server is up or the cluster is laggy [ 340.139919][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 340.148345][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 340.156051][ T5797] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 340.183786][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.201716][ T5797] usb 4-1: Product: syz [ 340.208609][ T5797] usb 4-1: Manufacturer: syz [ 340.220106][ T5797] usb 4-1: SerialNumber: syz [ 340.230026][ T5797] usb 4-1: config 0 descriptor?? [ 340.450380][ T29] audit: type=1400 audit(1777379870.020:452): avc: denied { accept } for pid=10675 comm="syz.2.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 340.500496][T10678] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1784'. [ 340.623341][ T5728] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 340.853733][ T5797] appletouch 4-1:0.85: Geyser mode initialized. [ 340.873917][ T5728] usb 1-1: config 0 has no interfaces? [ 340.905528][ T5728] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 340.951808][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.977917][ T5797] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input18 [ 341.005278][ T5728] usb 1-1: config 0 descriptor?? [ 341.059294][ T5797] usb 4-1: USB disconnect, device number 50 [ 341.097861][ T5797] appletouch 4-1:0.85: input: appletouch disconnected [ 341.234471][ T5609] usb 1-1: USB disconnect, device number 40 [ 341.512637][ T5699] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 341.512722][ T5728] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 341.665121][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.680078][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 341.695827][ T5699] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.703928][ T5728] usb 3-1: config 0 has no interfaces? [ 341.705233][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.714183][ T5728] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 341.718789][ T5699] usb 2-1: Product: syz [ 341.728040][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.731783][ T5699] usb 2-1: Manufacturer: syz [ 341.740917][ T5728] usb 3-1: Product: syz [ 341.745111][ T5699] usb 2-1: SerialNumber: syz [ 341.749270][T10698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1574906631 (3149813262 ns) > initial count (1841593562 ns). Using initial count to start timer. [ 341.781166][ T5728] usb 3-1: Manufacturer: syz [ 341.786412][ T5728] usb 3-1: SerialNumber: syz [ 341.798421][ T5728] usb 3-1: config 0 descriptor?? [ 341.836715][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1794'. [ 341.846708][T10701] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1794'. [ 341.965677][ T5699] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 342.081487][ T5699] usb 2-1: USB disconnect, device number 49 [ 342.332126][ T5802] usb 3-1: USB disconnect, device number 40 [ 342.652675][ T5699] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 342.732654][ T803] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 342.792743][ T5728] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 342.796010][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1806'. [ 342.810203][T10726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1806'. [ 342.821006][ T5699] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 342.830686][ T5699] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 342.853701][ T5699] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.865529][ T5699] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 342.876940][ T5699] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.887121][ T5699] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.900148][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.909858][ T29] audit: type=1400 audit(1777379872.480:453): avc: denied { create } for pid=10728 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.910144][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 342.939546][ T803] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 342.944913][ T29] audit: type=1400 audit(1777379872.510:454): avc: denied { getopt } for pid=10728 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 342.954460][ T803] usb 4-1: config 0 has no interface number 0 [ 342.979728][ T803] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.992322][ T803] usb 4-1: config 0 interface 85 has no altsetting 0 [ 342.994375][ T5728] usb 5-1: config 0 has no interfaces? [ 343.001864][ T803] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 343.014402][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.023732][ T5728] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 343.034640][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.051617][ T5728] usb 5-1: config 0 descriptor?? [ 343.093950][ T803] usb 4-1: Product: syz [ 343.574570][ T5699] usb 2-1: usb_control_msg returned -71 [ 343.580232][ T5699] usbtmc 2-1:16.0: can't read capabilities [ 343.587068][ T803] usb 4-1: Manufacturer: syz [ 343.591692][ T803] usb 4-1: SerialNumber: syz [ 343.762990][ T5699] usb 2-1: USB disconnect, device number 50 [ 343.808310][ T803] usb 4-1: config 0 descriptor?? [ 343.989025][ T24] usb 5-1: USB disconnect, device number 42 [ 344.221132][T10750] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 344.373132][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 344.425123][ T803] appletouch 4-1:0.85: Geyser mode initialized. [ 344.445338][ T803] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input19 [ 345.190615][ T803] usb 4-1: USB disconnect, device number 51 [ 345.196652][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 345.682734][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 345.693094][ T5609] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 345.979839][ T803] appletouch 4-1:0.85: input: appletouch disconnected [ 346.009891][ T5609] usb 2-1: config 0 has no interfaces? [ 346.020616][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.058575][ T5609] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 346.080703][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.121109][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.138612][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.174702][ T5609] usb 2-1: Product: syz [ 346.188435][ T5609] usb 2-1: Manufacturer: syz [ 346.206506][ T5609] usb 2-1: SerialNumber: syz [ 346.253751][ T24] usb 5-1: config 0 descriptor?? [ 346.346193][ T5609] usb 2-1: config 0 descriptor?? [ 346.435260][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 346.624947][ T9] usb 2-1: USB disconnect, device number 51 [ 346.697120][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1825'. [ 346.713410][T10783] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1825'. [ 346.727096][T10783] team0: No ports can be present during mode change [ 346.734777][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 346.748827][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 346.761591][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 346.781564][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 346.800721][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 346.813097][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 346.833115][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 346.879816][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 346.903311][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 347.482281][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 347.489928][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 347.699348][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 347.934690][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 347.955221][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 347.983390][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 348.000224][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.020712][ T24] pwc: Registered as video103. [ 348.065055][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 348.139965][ T24] usb 5-1: USB disconnect, device number 43 [ 348.162735][ T5699] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 348.813959][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.909860][ T5699] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.928017][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.952349][ T5699] usb 4-1: config 0 descriptor?? [ 348.989754][ T5699] pwc: Askey VC010 type 2 USB webcam detected. [ 349.428069][ T5699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 349.609012][ T5699] pwc: recv_control_msg error -32 req 02 val 2700 [ 349.634330][ T5699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 349.654371][ T5699] pwc: recv_control_msg error -32 req 04 val 1000 [ 349.675643][ T5699] pwc: recv_control_msg error -32 req 04 val 1300 [ 349.690829][ T5699] pwc: recv_control_msg error -32 req 04 val 1400 [ 349.704185][ T5699] pwc: recv_control_msg error -32 req 02 val 2000 [ 349.711395][ T5699] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.719178][ T5699] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.727676][ T5699] pwc: recv_control_msg error -32 req 02 val 2500 [ 349.735052][ T5699] pwc: recv_control_msg error -32 req 02 val 2400 [ 349.742187][ T5699] pwc: recv_control_msg error -32 req 02 val 2600 [ 349.749879][ T5699] pwc: recv_control_msg error -32 req 02 val 2900 [ 349.757102][ T5699] pwc: recv_control_msg error -71 req 02 val 2800 [ 349.770766][ T5699] pwc: recv_control_msg error -71 req 04 val 1100 [ 349.777768][ T5699] pwc: recv_control_msg error -71 req 04 val 1200 [ 349.792535][ T5699] pwc: Registered as video103. [ 349.809851][ T5699] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 349.839957][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 349.866028][T10819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1836'. [ 349.866882][ T5699] usb 4-1: USB disconnect, device number 52 [ 349.887110][T10819] team0: No ports can be present during mode change [ 349.994985][ T5609] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 350.157984][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 350.186485][ T5609] usb 1-1: Using ep0 maxpacket: 16 [ 350.207145][T10828] 9p: Bad value for 'rfdno' [ 350.209863][ T5609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.235677][ T5609] usb 1-1: config 0 has no interfaces? [ 350.240227][T10826] syz.4.1839 (10826): drop_caches: 2 [ 350.261536][ T5609] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.295689][ T5609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 350.328965][ T5609] usb 1-1: SerialNumber: syz [ 350.468200][ T5609] usb 1-1: config 0 descriptor?? [ 350.726679][ T5609] usb 1-1: USB disconnect, device number 41 [ 351.513646][ T803] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 352.132636][ T803] usb 2-1: Using ep0 maxpacket: 32 [ 352.140144][ T803] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.148589][ T803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.159533][ T803] usb 2-1: config 0 has no interface number 0 [ 352.177311][ T803] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.195609][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.211854][ T803] usb 2-1: Product: syz [ 352.220217][ T803] usb 2-1: Manufacturer: syz [ 352.236516][ T803] usb 2-1: SerialNumber: syz [ 352.252534][ T803] usb 2-1: config 0 descriptor?? [ 352.267126][ T803] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 352.288024][ T803] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 352.425915][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1848'. [ 352.458722][T10852] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1848'. [ 352.492662][T10852] team0: No ports can be present during mode change [ 352.752675][ T46] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 352.862721][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 352.915664][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 352.922299][ T46] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 352.932455][ T46] usb 3-1: config 0 has no interface number 0 [ 352.941220][ T46] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.952992][ T46] usb 3-1: config 0 interface 85 has no altsetting 0 [ 352.975395][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 352.989097][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.997364][ T46] usb 3-1: Product: syz [ 353.001572][ T46] usb 3-1: Manufacturer: syz [ 353.006523][ T46] usb 3-1: SerialNumber: syz [ 353.022311][ T46] usb 3-1: config 0 descriptor?? [ 353.033539][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 353.048587][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.058541][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.075551][T10878] syzkaller0: entered promiscuous mode [ 353.080372][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 353.081418][T10878] syzkaller0: entered allmulticast mode [ 353.093720][ T24] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 353.113220][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.124191][ T24] usb 1-1: Product: syz [ 353.129570][ T24] usb 1-1: Manufacturer: syz [ 353.135046][ T24] usb 1-1: SerialNumber: syz [ 353.272799][ T5609] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 353.298440][T10883] ±ÿ: renamed from lo (while UP) [ 353.444123][ T5609] usb 4-1: Using ep0 maxpacket: 16 [ 353.452429][ T46] appletouch 3-1:0.85: Geyser mode initialized. [ 353.460092][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.478249][ T46] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input22 [ 353.489399][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.510485][ T5609] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.538978][ T5609] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.555761][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 353.574392][ T24] usb 1-1: USB disconnect, device number 42 [ 353.582034][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.615907][ T5609] usb 4-1: config 0 descriptor?? [ 353.858363][ T5699] usb 3-1: USB disconnect, device number 41 [ 353.884172][ T5699] appletouch 3-1:0.85: input: appletouch disconnected [ 354.038967][ T5609] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 354.050137][ T5609] hid_parser_main: 57 callbacks suppressed [ 354.050158][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.063334][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.070573][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.078089][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.086158][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.093539][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.100781][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.108077][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.115317][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.122526][ T5609] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 354.131169][ T5609] HID 045e:07da: Invalid code 65791 type 1 [ 354.138085][ T5609] HID 045e:07da: Invalid code 768 type 1 [ 354.145130][ T5609] HID 045e:07da: Invalid code 769 type 1 [ 354.157244][ T5609] HID 045e:07da: Invalid code 770 type 1 [ 354.165331][ T5609] HID 045e:07da: Invalid code 771 type 1 [ 354.172391][ T5609] HID 045e:07da: Invalid code 772 type 1 [ 354.180778][ T5609] HID 045e:07da: Invalid code 773 type 1 [ 354.187414][ T5609] HID 045e:07da: Invalid code 774 type 1 [ 354.193128][ T5609] HID 045e:07da: Invalid code 775 type 1 [ 354.198771][ T5609] HID 045e:07da: Invalid code 776 type 1 [ 354.230992][ T5609] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input23 [ 354.295583][ T5699] usb 2-1: USB disconnect, device number 52 [ 354.376427][ T5609] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 354.418477][ T5609] usb 4-1: USB disconnect, device number 53 [ 354.500586][T10913] syzkaller0: entered promiscuous mode [ 354.506206][T10913] syzkaller0: entered allmulticast mode [ 354.533174][T10909] fido_id[10909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 354.572660][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 354.832346][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 354.840739][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 354.847859][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 354.928055][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.085190][ T9] usb 1-1: config 0 descriptor?? [ 355.770966][T10923] 9p: Bad value for 'rfdno' [ 355.862455][ T29] audit: type=1400 audit(1777379885.430:455): avc: denied { map } for pid=10929 comm="syz.3.1875" path="socket:[29987]" dev="sockfs" ino=29987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.916043][ T29] audit: type=1400 audit(1777379885.430:456): avc: denied { accept } for pid=10929 comm="syz.3.1875" path="socket:[29987]" dev="sockfs" ino=29987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 355.970484][T10934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1877'. [ 356.626502][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 356.632851][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 356.644647][ T9] usb 1-1: USB disconnect, device number 43 [ 356.718726][ T29] audit: type=1400 audit(1777379886.290:457): avc: denied { relabelfrom } for pid=10946 comm="syz.3.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 357.216040][ T29] audit: type=1400 audit(1777379886.290:458): avc: denied { relabelto } for pid=10946 comm="syz.3.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 358.684842][T10981] netlink: 'syz.2.1892': attribute type 4 has an invalid length. [ 359.042737][ T29] audit: type=1400 audit(1777379888.430:459): avc: denied { firmware_load } for pid=10975 comm="syz.3.1891" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 359.171959][T10981] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1892'. [ 359.652275][T10982] syz.3.1891 (10982) used greatest stack depth: 19304 bytes left [ 359.708294][ T29] audit: type=1400 audit(1777379888.600:460): avc: denied { read } for pid=10975 comm="syz.3.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.817926][ T29] audit: type=1400 audit(1777379888.650:461): avc: denied { setopt } for pid=10975 comm="syz.3.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.964413][T10993] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1895'. [ 362.211113][ T29] audit: type=1400 audit(1777379891.780:462): avc: denied { compute_member } for pid=11018 comm="syz.4.1904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 363.885823][ T29] audit: type=1400 audit(1777379893.460:463): avc: denied { read } for pid=11046 comm="syz.3.1913" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 363.919543][ T29] audit: type=1400 audit(1777379893.490:464): avc: denied { open } for pid=11046 comm="syz.3.1913" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.358000][ T29] audit: type=1400 audit(1777379893.500:465): avc: denied { map } for pid=11046 comm="syz.3.1913" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.382097][ T29] audit: type=1400 audit(1777379893.500:466): avc: denied { execute } for pid=11046 comm="syz.3.1913" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 365.783460][T11079] xt_hashlimit: size too large, truncated to 1048576 [ 365.851246][T11082] binder: 11081:11082 ioctl c0306201 200000000040 returned -22 [ 365.868159][T11080] xt_hashlimit: size too large, truncated to 1048576 [ 366.329050][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 368.532536][ T5728] kernel write not supported for file /input/event2 (pid: 5728 comm: kworker/1:8) [ 368.601486][ T29] audit: type=1400 audit(1777379898.170:467): avc: denied { ioctl } for pid=11123 comm="syz.2.1937" path="/dev/usbmon8" dev="devtmpfs" ino=740 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 368.889590][T11136] syz.2.1944 (11136): drop_caches: 2 [ 368.951075][T11136] 9p: Bad value for 'rfdno' [ 369.362133][ T29] audit: type=1400 audit(1777379898.930:468): avc: denied { setopt } for pid=11144 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.435766][ T29] audit: type=1400 audit(1777379898.930:469): avc: denied { write } for pid=11144 comm="syz.4.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.574678][T11150] xt_hashlimit: size too large, truncated to 1048576 [ 373.034494][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.034558][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.762804][ T5728] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 373.942803][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 374.021842][ T5728] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 374.143201][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.187753][ T5728] usb 2-1: config 0 has no interface number 0 [ 374.220112][ T5728] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 374.241645][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.272531][ T5728] usb 2-1: Product: syz [ 374.277386][ T5728] usb 2-1: Manufacturer: syz [ 374.296521][ T5728] usb 2-1: SerialNumber: syz [ 374.308643][ T5728] usb 2-1: config 0 descriptor?? [ 374.567355][ T5728] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 374.576622][ T5728] uvcvideo 2-1:0.31: No valid video chain found. [ 375.610628][T11238] ubi: mtd0 is already attached to ubi16 [ 375.639902][ T5699] usb 2-1: USB disconnect, device number 53 [ 376.902663][ T5699] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 377.074346][ T5699] usb 3-1: config 0 has no interfaces? [ 377.088131][ T5699] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 377.109071][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.139798][ T5699] usb 3-1: config 0 descriptor?? [ 377.347330][T11265] tipc: Enabling of bearer rejected, failed to enable media [ 377.400106][ T5728] usb 3-1: USB disconnect, device number 42 [ 377.603498][T11270] ubi: mtd0 is already attached to ubi16 [ 377.627303][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 378.037819][ T29] audit: type=1326 audit(1777379907.600:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f19cdd9 code=0x7ffc0000 [ 378.124997][ T29] audit: type=1326 audit(1777379907.610:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f19cdd9 code=0x7ffc0000 [ 378.201863][ T29] audit: type=1326 audit(1777379907.650:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fc97f19cdd9 code=0x7ffc0000 [ 378.337412][ T29] audit: type=1326 audit(1777379907.650:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f19cdd9 code=0x7ffc0000 [ 378.406392][ T29] audit: type=1326 audit(1777379907.650:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.4.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97f19cdd9 code=0x7ffc0000 [ 378.566230][ T9] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 379.692150][T11295] tipc: Enabling of bearer rejected, failed to enable media [ 380.230788][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.279039][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.302833][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 380.322352][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.353388][T11302] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2006'. [ 380.375176][ T9] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 380.590901][T11312] ±ÿ: renamed from lo (while UP) [ 381.039190][T11320] tipc: Enabling of bearer rejected, failed to enable media [ 381.344618][ T803] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 381.907834][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.947425][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.954913][ T29] audit: type=1400 audit(1777379911.520:475): avc: denied { mount } for pid=11337 comm="syz.2.2019" name="/" dev="ramfs" ino=32058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 382.018183][ T29] audit: type=1400 audit(1777379911.560:476): avc: denied { create } for pid=11337 comm="syz.2.2019" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 382.199234][ T803] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 382.733964][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.807551][ T803] usb 2-1: config 0 descriptor?? [ 383.244937][T11357] tipc: Enabling of bearer rejected, failed to enable media [ 383.261784][ T803] usbhid 2-1:0.0: can't add hid device: -71 [ 383.286015][ T803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 383.325303][ T803] usb 2-1: USB disconnect, device number 54 [ 383.434820][ T9] usb 4-1: USB disconnect, device number 54 [ 384.730309][T11395] syzkaller0: entered promiscuous mode [ 384.746302][T11395] syzkaller0: entered allmulticast mode [ 385.143940][T11414] ubi: mtd0 is already attached to ubi16 [ 385.561025][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 385.609877][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2052'. [ 385.645580][T11420] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2052'. [ 385.738689][ T29] audit: type=1400 audit(1777379915.310:477): avc: denied { connect } for pid=11426 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.158031][T11422] netlink: 'syz.4.2053': attribute type 3 has an invalid length. [ 387.385210][T11456] netlink: 'syz.1.2066': attribute type 2 has an invalid length. [ 387.393063][T11456] netlink: 'syz.1.2066': attribute type 2 has an invalid length. [ 387.834613][ T5728] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 388.087017][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 388.117584][ T5728] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 388.137664][ T5728] usb 3-1: config 0 has no interface number 0 [ 388.152351][ T5728] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 388.184226][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.207316][ T5728] usb 3-1: Product: syz [ 388.218633][ T5728] usb 3-1: Manufacturer: syz [ 388.237356][ T5728] usb 3-1: SerialNumber: syz [ 388.261136][ T5728] usb 3-1: config 0 descriptor?? [ 388.492693][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 388.664549][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.694214][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 388.696326][ T5728] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 388.719567][ T5728] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 388.732039][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.752922][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.762520][ T9] usb 4-1: Product: syz [ 388.766071][T11482] syzkaller0: entered promiscuous mode [ 388.786869][ T9] usb 4-1: Manufacturer: syz [ 388.787149][T11482] syzkaller0: entered allmulticast mode [ 388.809641][ T9] usb 4-1: SerialNumber: syz [ 389.040100][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 389.074592][ T9] usb 4-1: USB disconnect, device number 55 [ 389.181201][T11493] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 389.189204][T11493] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 389.548369][ T5728] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 389.564571][ T5728] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 389.567413][ T9] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 389.576261][ T5728] usb 3-1: USB disconnect, device number 43 [ 389.771530][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.787921][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 389.809339][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.771555][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.779675][ T9] usb 4-1: Product: syz [ 390.783960][ T9] usb 4-1: Manufacturer: syz [ 390.789595][ T9] usb 4-1: SerialNumber: syz [ 391.011005][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 391.122031][ T9] usb 4-1: USB disconnect, device number 56 [ 391.532128][T11520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 391.834134][ T29] audit: type=1400 audit(1777379921.400:478): avc: denied { read } for pid=11536 comm="syz.2.2096" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.937812][ T29] audit: type=1400 audit(1777379921.510:479): avc: denied { read } for pid=11540 comm="syz.2.2097" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.970400][ T29] audit: type=1400 audit(1777379921.510:480): avc: denied { open } for pid=11540 comm="syz.2.2097" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 392.596018][T11508] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 392.605675][T11508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 392.617592][T11508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 393.192687][ T29] audit: type=1400 audit(1777379922.190:481): avc: denied { firmware_load } for pid=11504 comm="syz.4.2085" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 393.226115][T11544] tipc: Failed to obtain node identity [ 393.231639][T11544] tipc: Enabling of bearer rejected, failed to enable media [ 394.493033][ T5728] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 394.540066][T11563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 394.613286][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 394.687623][ T5728] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.782775][ T5728] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 395.085860][ T5728] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.114476][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.135939][ T5728] usb 3-1: Product: syz [ 395.148800][ T5728] usb 3-1: Manufacturer: syz [ 395.164075][ T5728] usb 3-1: SerialNumber: syz [ 395.396802][ T5728] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 395.433504][ T5728] usb 3-1: USB disconnect, device number 44 [ 395.462804][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 395.636128][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.660513][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.670340][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.700912][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 395.714020][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 395.728431][ T9] usb 1-1: Product: syz [ 395.732765][ T9] usb 1-1: Manufacturer: syz [ 395.737461][ T9] usb 1-1: SerialNumber: syz [ 395.856302][ T803] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 395.979273][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 396.018773][ T803] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 396.042990][ T803] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 396.056270][ T803] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.500453][ T803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.510143][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.546192][ T803] cdc_ether 3-1:16.0: probe with driver cdc_ether failed with error -22 [ 396.562673][ T29] audit: type=1400 audit(1777379926.130:482): avc: denied { read write } for pid=11568 comm="syz.0.2105" name="lp0" dev="devtmpfs" ino=3380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.596246][ T5609] usb 1-1: USB disconnect, device number 44 [ 396.628884][ T5609] usblp0: removed [ 396.639751][ T29] audit: type=1400 audit(1777379926.140:483): avc: denied { open } for pid=11568 comm="syz.0.2105" path="/dev/usb/lp0" dev="devtmpfs" ino=3380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.674729][ T29] audit: type=1400 audit(1777379926.160:484): avc: denied { ioctl } for pid=11568 comm="syz.0.2105" path="/dev/usb/lp0" dev="devtmpfs" ino=3380 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 396.748956][ T46] usb 3-1: USB disconnect, device number 45 [ 399.123372][T11660] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2141'. [ 399.136771][T11660] team0: No ports can be present during mode change [ 399.200284][ T29] audit: type=1400 audit(1777379928.730:485): avc: denied { ioctl } for pid=11662 comm="syz.3.2142" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.215749][T11683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2145'. [ 400.285704][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2145'. [ 401.421485][T11693] syzkaller0: entered promiscuous mode [ 401.442626][T11693] syzkaller0: entered allmulticast mode [ 405.173081][ T5699] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 405.360984][ T5699] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 405.380766][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.406336][ T5699] usb 1-1: Product: syz [ 405.422990][ T5699] usb 1-1: Manufacturer: syz [ 405.458996][ T5699] usb 1-1: SerialNumber: syz [ 406.687623][ T5699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 406.712607][ T5699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 407.564328][ T5699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 407.578089][ T5699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 407.595284][ T5699] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.654533][ T5699] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 408.610348][ T5699] usb 1-1: USB disconnect, device number 45 [ 410.342500][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 412.310744][T11877] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2215'. [ 412.343622][T11881] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2218'. [ 412.422791][ T803] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 412.588447][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.616969][ T803] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 412.642460][ T803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.663115][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.697621][ T803] usb 3-1: Product: syz [ 412.703578][ T803] usb 3-1: Manufacturer: syz [ 412.721159][T11894] netlink: 'syz.3.2222': attribute type 25 has an invalid length. [ 412.753719][ T803] usb 3-1: SerialNumber: syz [ 412.981028][ T803] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 413.021985][ T803] usb 3-1: USB disconnect, device number 46 [ 413.117986][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 413.138209][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'. [ 413.542684][ T803] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 414.360119][ T803] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 415.372604][ T803] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 416.124857][ T803] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.146347][ T803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.261268][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.299249][ T803] usb 3-1: can't set config #16, error -71 [ 416.331622][ T803] usb 3-1: USB disconnect, device number 47 [ 416.553367][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 416.587687][ T29] audit: type=1400 audit(1777379946.160:486): avc: denied { watch } for pid=11946 comm="syz.3.2241" path="/449/file0" dev="tmpfs" ino=2315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 416.709920][ T29] audit: type=1326 audit(1777379946.280:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 416.733812][ T29] audit: type=1326 audit(1777379946.280:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 416.745916][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 416.758863][ T29] audit: type=1326 audit(1777379946.310:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 416.791900][ T29] audit: type=1326 audit(1777379946.310:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 416.820928][ T29] audit: type=1326 audit(1777379946.310:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 416.845373][ T5802] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 416.937744][ T29] audit: type=1326 audit(1777379946.330:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 416.970208][ T29] audit: type=1326 audit(1777379946.470:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 417.052887][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.058658][ T29] audit: type=1326 audit(1777379946.470:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814fb9cdd9 code=0x7ffc0000 [ 417.102229][ T9] usb 2-1: Product: syz [ 417.981669][ T9] usb 2-1: Manufacturer: syz [ 418.042698][ T5802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 418.065593][ T9] usb 2-1: SerialNumber: syz [ 418.086027][ T5802] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 418.142050][ T5802] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.201916][ T5802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 418.226910][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 418.428639][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2242'. [ 418.451982][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2242'. [ 418.475670][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 418.594414][ T5802] usb 1-1: Product: syz [ 418.612023][ T5802] usb 1-1: Manufacturer: syz [ 418.631384][ T5802] usb 1-1: SerialNumber: syz [ 418.645864][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 418.682729][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 418.877998][ T5802] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 418.911686][T11969] 9p: Bad value for 'rfdno' [ 419.129831][ T5802] usb 1-1: USB disconnect, device number 46 [ 419.166497][T11971] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2249'. [ 419.193354][ T5802] usblp0: removed [ 419.280398][T11974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 419.825382][T11992] ubi: mtd0 is already attached to ubi16 [ 419.964865][T11997] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2259'. [ 420.214657][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 420.256625][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 420.794973][T12004] xt_TPROXY: Can be used only with -p tcp or -p udp [ 420.834453][ T29] audit: type=1400 audit(1777379950.401:495): avc: denied { search } for pid=12007 comm="syz.0.2263" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 420.862087][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 420.890413][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 420.890688][T12010] xt_hashlimit: size too large, truncated to 1048576 [ 420.957156][ T9] usb 2-1: USB disconnect, device number 55 [ 421.882839][T12026] ubi: mtd0 is already attached to ubi16 [ 421.891716][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 422.264458][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 422.349692][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 422.447610][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 422.454070][ T9] usb 2-1: config 0 has no interfaces? [ 422.460621][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.469991][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 422.481115][ T9] usb 2-1: SerialNumber: syz [ 422.488709][ T24] usb 3-1: device descriptor read/64, error -71 [ 422.490480][ T9] usb 2-1: config 0 descriptor?? [ 422.531275][ T5609] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 422.692383][ T5609] usb 1-1: no configurations [ 422.697095][ T5609] usb 1-1: can't read configurations, error -22 [ 422.723081][ T5728] usb 2-1: USB disconnect, device number 56 [ 422.744978][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 422.841498][ T5609] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 422.883868][ T24] usb 3-1: device descriptor read/64, error -71 [ 423.001848][ T24] usb usb3-port1: attempt power cycle [ 423.007462][ T5609] usb 1-1: no configurations [ 423.055749][ T5609] usb 1-1: can't read configurations, error -22 [ 423.062592][ T5609] usb usb1-port1: attempt power cycle [ 423.420021][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 423.438437][ T5609] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 423.483908][ T24] usb 3-1: device descriptor read/8, error -71 [ 423.491128][ T5609] usb 1-1: no configurations [ 423.496424][ T5609] usb 1-1: can't read configurations, error -22 [ 423.546112][T12062] ubi: mtd0 is already attached to ubi16 [ 423.555996][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 423.644193][ T5609] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 423.697226][ T5609] usb 1-1: no configurations [ 423.722921][ T5609] usb 1-1: can't read configurations, error -22 [ 423.736941][ T5609] usb usb1-port1: unable to enumerate USB device [ 423.881127][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 423.910260][ T24] usb 3-1: device descriptor read/8, error -71 [ 424.029896][ T24] usb usb3-port1: unable to enumerate USB device [ 426.059629][T12104] ubi: mtd0 is already attached to ubi16 [ 427.232837][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 429.352859][ T24] usb 2-1: device descriptor read/64, error -71 [ 429.616355][ T5609] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 429.624148][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 429.830350][ T24] usb 2-1: device descriptor read/64, error -71 [ 429.851224][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 429.853670][ T5609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.875065][ T5609] usb 1-1: config 0 has no interfaces? [ 429.885907][ T5609] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 429.898436][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.912784][ T5609] usb 1-1: Product: syz [ 429.924913][ T5609] usb 1-1: Manufacturer: syz [ 429.932597][T12145] fuse: Bad value for 'fd' [ 429.939400][ T5609] usb 1-1: SerialNumber: syz [ 429.949206][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 429.949220][ T29] audit: type=1400 audit(1777379958.926:498): avc: denied { bind } for pid=12146 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.988791][ T5609] usb 1-1: config 0 descriptor?? [ 429.994573][ T24] usb usb2-port1: attempt power cycle [ 430.311510][T12156] ubi: mtd0 is already attached to ubi16 [ 430.328078][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 430.572502][T12157] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2320'. [ 431.284964][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 431.633557][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 431.961109][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.026133][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 432.036037][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.058232][ T24] usb 4-1: config 0 descriptor?? [ 432.077920][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 432.131145][T12180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.364976][T12191] ubi: mtd0 is already attached to ubi16 [ 432.515351][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 432.573215][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 432.625838][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 432.674264][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 432.690034][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 432.697566][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 432.715939][ T9] usb 1-1: USB disconnect, device number 51 [ 432.718030][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 432.729873][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 432.738760][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 432.749091][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 432.756694][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 432.780067][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 432.974940][T12199] ubi: mtd0 is already attached to ubi16 [ 433.003623][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 433.029956][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 433.071643][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 433.081652][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 433.194886][ T24] pwc: Registered as video103. [ 433.535430][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 433.682890][ T24] usb 4-1: USB disconnect, device number 57 [ 434.103574][T12228] ubi: mtd0 is already attached to ubi16 [ 435.077220][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 435.098122][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 435.148437][T12248] ubi: mtd0 is already attached to ubi16 [ 435.157329][ T5610] Bluetooth: Frame is too long (len 12, expected len 4) [ 435.325863][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.346005][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 435.347486][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 435.355282][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.386769][ T9] usb 4-1: config 0 descriptor?? [ 435.407710][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 435.414173][ T24] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 435.414198][ T24] usb 1-1: config 0 has no interface number 0 [ 435.414232][ T24] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 435.414255][ T24] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 435.416487][ T24] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 435.440401][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.440447][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.624217][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.633162][ T24] usb 1-1: Product: syz [ 435.637384][ T24] usb 1-1: Manufacturer: syz [ 435.641996][ T24] usb 1-1: SerialNumber: syz [ 435.648487][ T24] usb 1-1: config 0 descriptor?? [ 435.654081][T12236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 435.661313][T12236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 436.165359][ T5802] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 436.179690][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 436.190328][T12236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 436.214188][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 436.233545][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 436.235888][T12236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 436.247998][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 436.255912][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 436.263143][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 436.270594][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 436.271012][T12266] syzkaller0: entered promiscuous mode [ 436.278888][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 436.282924][T12266] syzkaller0: entered allmulticast mode [ 436.291405][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 436.360488][ T5802] usb 3-1: config 0 has no interfaces? [ 436.368140][ T5802] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 436.385050][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.479237][ T5802] usb 3-1: Product: syz [ 436.483468][ T5802] usb 3-1: Manufacturer: syz [ 436.488154][ T5802] usb 3-1: SerialNumber: syz [ 436.496457][ T5802] usb 3-1: config 0 descriptor?? [ 436.519875][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 436.533211][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 436.540003][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 436.547714][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 436.559116][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 436.588301][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 436.606260][ T9] pwc: Registered as video103. [ 436.627733][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 436.732793][ T5802] usb 3-1: USB disconnect, device number 52 [ 436.798804][ T9] usb 4-1: USB disconnect, device number 58 [ 437.219729][T12283] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2364'. [ 437.229303][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2364'. [ 437.701284][T12293] syzkaller0: entered promiscuous mode [ 438.267626][T12293] syzkaller0: entered allmulticast mode [ 438.306177][T12295] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 438.315322][T12295] ±ÿþ€: renamed from team_slave_1 (while UP) [ 438.380321][ T29] audit: type=1400 audit(1777379966.815:499): avc: denied { create } for pid=12286 comm="syz.2.2366" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 438.409782][ T24] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 438.442537][ T24] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 438.586747][ T24] asix 1-1:0.34: probe with driver asix failed with error -71 [ 438.595195][ T29] audit: type=1400 audit(1777379967.002:500): avc: denied { unlink } for pid=5602 comm="syz-executor" name="file0" dev="tmpfs" ino=2475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 438.676065][ T24] usb 1-1: USB disconnect, device number 52 [ 438.875915][T12300] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2370'. [ 439.158709][ T29] audit: type=1400 audit(1777379967.292:501): avc: denied { getopt } for pid=12296 comm="syz.0.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.202260][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'. [ 439.229378][ T29] audit: type=1400 audit(1777379967.292:502): avc: denied { write } for pid=12296 comm="syz.0.2370" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 439.295374][ T29] audit: type=1400 audit(1777379967.358:503): avc: denied { checkpoint_restore } for pid=12296 comm="syz.0.2370" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.304970][T12303] ip6gre1: entered promiscuous mode [ 439.509679][T12303] ip6gre1: entered allmulticast mode [ 439.812943][T12311] netlink: 'syz.2.2371': attribute type 6 has an invalid length. [ 439.825466][T12311] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2371'. [ 440.047930][T12323] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2376'. [ 440.070593][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'. [ 442.409977][T12336] bridge_slave_0: left allmulticast mode [ 442.416697][T12336] bridge_slave_0: left promiscuous mode [ 442.422545][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.541645][T12336] bridge_slave_1: left allmulticast mode [ 442.547409][T12336] bridge_slave_1: left promiscuous mode [ 442.553562][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.759661][T12336] bond0: (slave bond_slave_0): Releasing backup interface [ 442.785579][T12336] bond0: (slave bond_slave_1): Releasing backup interface [ 442.815334][T12336] team0: Port device team_slave_0 removed [ 442.823087][T12336] team0: Port device 26±ÿþ€ removed [ 442.829189][T12336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.836647][T12336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.844773][T12336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.853736][T12336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.863008][T12336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 442.929026][T12348] syzkaller0: entered promiscuous mode [ 442.951911][T12348] syzkaller0: entered allmulticast mode [ 443.176687][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 443.401126][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 443.456052][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.546768][ T24] usb 4-1: config 0 has no interfaces? [ 443.620938][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 443.655688][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.670374][ T24] usb 4-1: Product: syz [ 443.678181][ T24] usb 4-1: Manufacturer: syz [ 443.686590][ T24] usb 4-1: SerialNumber: syz [ 443.698194][ T24] usb 4-1: config 0 descriptor?? [ 444.633038][T12373] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2392'. [ 446.050558][ T29] audit: type=1400 audit(1777379973.983:504): avc: denied { getopt } for pid=12394 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.159196][ T24] usb 4-1: USB disconnect, device number 59 [ 446.493215][T12399] TC_ACT_REPEAT abuse ? [ 448.611605][T12435] bond1: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.649557][T12435] bond1: (slave 26±ÿ): Enslaving as an active interface with an up link [ 448.691472][T12435] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 448.734470][ T5727] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 448.923312][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 448.936535][ T5802] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 448.937959][ T5727] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 448.978696][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.004053][ T5727] usb 2-1: config 0 has no interface number 0 [ 449.022270][ T5727] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.043313][ T5727] usb 2-1: config 0 interface 85 has no altsetting 0 [ 449.056363][ T5727] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 449.076768][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.090129][ T5727] usb 2-1: Product: syz [ 449.094337][ T5727] usb 2-1: Manufacturer: syz [ 449.100438][ T5727] usb 2-1: SerialNumber: syz [ 449.110733][ T5727] usb 2-1: config 0 descriptor?? [ 449.113593][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.161421][ T5802] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 449.193804][ T5802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.214281][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.233247][ T5802] usb 1-1: Product: syz [ 449.240642][ T5802] usb 1-1: Manufacturer: syz [ 449.254233][ T5802] usb 1-1: SerialNumber: syz [ 449.885779][ T5802] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 449.919056][ T5802] usb 1-1: USB disconnect, device number 53 [ 450.082807][T12459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 450.401175][ T5720] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 450.678459][ T5727] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 450.723577][ T5720] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 450.844205][ T5720] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 450.911983][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 451.051017][ T5727] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.078488][ T5720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.099272][ T5727] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.110900][ T5720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.128744][ T5727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.138782][ T5720] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.154327][ T5727] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 451.169180][ T5720] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.182325][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.193914][ T5727] usb 3-1: config 0 descriptor?? [ 451.199199][ T5720] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.218994][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.252670][ T5720] usbtmc 1-1:16.0: bulk endpoints not found [ 451.418943][ T29] audit: type=1400 audit(1777379979.008:505): avc: denied { view } for pid=12480 comm="syz.3.2429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 451.498901][ T5720] usb 1-1: USB disconnect, device number 54 [ 451.715932][ T5802] usb 2-1: USB disconnect, device number 60 [ 451.913465][ T5727] usb 3-1: USB disconnect, device number 53 [ 452.022391][T12491] syz.1.2433 (12491): drop_caches: 2 [ 452.633310][ T29] audit: type=1400 audit(1777379980.150:506): avc: denied { map } for pid=12505 comm="syz.2.2439" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 453.740512][T12524] vlan0: entered promiscuous mode [ 453.759538][T12524] team0: Port device vlan0 added [ 453.782590][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 453.861978][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.895279][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.026109][T12529] team0: Device vlan0 failed to change mtu [ 454.073251][T12531] syzkaller0: entered promiscuous mode [ 454.099310][T12531] syzkaller0: entered allmulticast mode [ 456.361355][T12569] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2458'. [ 457.752639][ T5802] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 457.951930][ T5802] usb 2-1: Using ep0 maxpacket: 8 [ 457.969946][ T5802] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 457.992407][ T5802] usb 2-1: config 179 has no interface number 0 [ 458.009393][ T5802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 458.030891][ T5802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 458.053635][ T5802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.077807][ T5802] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 458.100411][ T5802] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 458.125253][ T5802] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 458.142369][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.166275][T12579] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 458.482505][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29 [ 458.688466][ T5727] usb 2-1: USB disconnect, device number 61 [ 458.688548][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 458.702955][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 459.460646][T12587] bridge0: port 2(syz_tun) entered blocking state [ 459.467824][T12587] bridge0: port 2(syz_tun) entered disabled state [ 459.475161][T12587] syz_tun: entered allmulticast mode [ 459.486344][T12587] syz_tun: entered promiscuous mode [ 459.492228][T12587] bridge0: port 2(syz_tun) entered blocking state [ 459.499723][T12587] bridge0: port 2(syz_tun) entered forwarding state [ 459.537232][T12595] syz.2.2468 (12595): drop_caches: 2 [ 459.593340][T12595] 9p: Bad value for 'rfdno' [ 460.453498][T12609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.472609][ T29] audit: type=1400 audit(1777379987.477:507): avc: denied { shutdown } for pid=12622 comm="syz.1.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.739262][T12637] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2482'. [ 461.167722][ T5610] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7 [ 461.175702][ T5610] Bluetooth: hci3: unexpected event for opcode 0x042d [ 461.223930][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.325687][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.493786][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.551652][T12656] netlink: 'syz.2.2488': attribute type 10 has an invalid length. [ 461.613214][T12658] netlink: 'syz.2.2488': attribute type 10 has an invalid length. [ 461.790172][T12658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.879365][T12658] team0: Port device bond0 added [ 462.220860][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 462.353028][T12676] syz.0.2497 (12676): drop_caches: 2 [ 462.423220][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 462.450963][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.495027][ T9] usb 2-1: config 0 has no interfaces? [ 462.523237][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 462.538997][ T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 462.563187][ T9] usb 2-1: Product: syz [ 462.570668][ T9] usb 2-1: SerialNumber: syz [ 462.584459][ T9] usb 2-1: config 0 descriptor?? [ 462.896041][T12691] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2501'. [ 463.428152][ T5802] usb 2-1: USB disconnect, device number 62 [ 463.623931][T12702] syzkaller0: entered promiscuous mode [ 463.645017][T12702] syzkaller0: entered allmulticast mode [ 464.116090][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 464.134300][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.164609][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.173924][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 464.183490][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.200943][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.210194][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 464.395595][ T29] audit: type=1800 audit(1777379991.155:508): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2509" name="/" dev="fuse" ino=4 res=0 errno=0 [ 464.478189][T12728] syz.1.2519 (12728): drop_caches: 2 [ 464.512797][T12728] 9p: Bad value for 'rfdno' [ 465.749146][T12735] macvlan2: entered promiscuous mode [ 465.795509][T12735] dummy0: entered promiscuous mode [ 465.880228][T12735] macvlan2: entered allmulticast mode [ 465.907191][T12735] dummy0: entered allmulticast mode [ 465.955945][T12732] NFSD: Failed to start, no listeners configured. [ 466.074448][T12744] syzkaller0: entered promiscuous mode [ 466.090719][T12744] syzkaller0: entered allmulticast mode [ 466.332897][ T29] audit: type=1326 audit(1777379992.970:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.2.2527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f16b9cdd9 code=0x0 [ 466.519262][T12755] veth1_to_batadv: entered promiscuous mode [ 466.536841][T12755] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 466.545193][T12755] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2531'. [ 466.677994][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.716825][ T5720] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 466.730429][ T5720] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 466.740241][T11211] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 466.749626][T11211] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 466.756657][T11211] wlan1: authentication with 08:02:11:00:00:00 timed out [ 466.786025][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.800546][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.911035][ T24] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 467.149151][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 467.162553][ T24] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 467.174294][ T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 467.186407][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.194648][ T24] usb 1-1: Product: syz [ 467.227591][ T24] usb 1-1: Manufacturer: syz [ 467.294231][ T24] usb 1-1: SerialNumber: syz [ 467.907888][T12786] comedi comedi3: pcl816: I/O port conflict (0x100,16) [ 467.925282][ T29] audit: type=1400 audit(1777379994.458:510): avc: denied { map } for pid=12785 comm="syz.2.2538" path="/dev/comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.100924][T12795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.409448][ T5727] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 468.577535][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 468.606640][ T5727] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 468.636942][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.655246][ T5727] usb 2-1: Product: syz [ 468.670553][ T5727] usb 2-1: Manufacturer: syz [ 468.693675][T12830] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 468.702007][ T5727] usb 2-1: SerialNumber: syz [ 468.721298][ T5727] usb 2-1: config 0 descriptor?? [ 468.743863][ T5727] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 468.769272][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 468.787433][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 468.825655][ T5727] dvb-usb: bulk message failed: -22 (5/0) [ 468.841930][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 468.990932][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.001363][ T5727] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 469.025218][ T5727] usb 2-1: media controller created [ 469.058063][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.578902][ T5727] usb 2-1: selecting invalid altsetting 3 [ 469.592569][ T5727] ttusb2: set interface to alts=3 failed [ 469.686009][ T5727] DVB: Unable to find symbol tda10086_attach() [ 469.708539][ T5727] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 469.810628][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 469.827847][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 469.838060][ T5727] dvb-usb: bulk message failed: -22 (5/0) [ 469.854632][ T5727] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 469.880865][ T5727] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 469.912016][ T5720] usb 1-1: USB disconnect, device number 55 [ 469.933357][ T5727] usb 2-1: USB disconnect, device number 63 [ 470.126623][ T5727] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 470.303221][T12878] syz.0.2565 (12878): drop_caches: 2 [ 471.445204][T12910] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2572'. [ 473.686608][ T5610] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 473.911494][T12978] netlink: 'syz.3.2592': attribute type 10 has an invalid length. [ 473.942853][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2592'. [ 473.980969][T12978] vxcan0: entered promiscuous mode [ 474.006878][T12978] vxcan0: entered allmulticast mode [ 474.030235][T12978] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 474.613597][ T5610] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 475.214122][ T29] audit: type=1400 audit(1777380001.280:511): avc: denied { write } for pid=13019 comm="syz.3.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 475.244960][T13018] syz.1.2604 (13018): drop_caches: 2 [ 475.897199][T12997] infiniband syz1: set active [ 475.919963][T12997] infiniband syz1: added syz_tun [ 476.146755][T12997] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 476.564228][T12997] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 476.595021][T12997] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 476.653235][T12997] RDS/IB: syz1: added [ 476.657876][T12997] smc: adding ib device syz1 with port count 1 [ 476.665515][T12997] smc: ib device syz1 port 1 has no pnetid [ 477.242227][T13066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.444886][T13066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.483615][T13066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.637484][ T5610] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 477.983575][ T5610] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 477.993999][ T5610] Bluetooth: hci2: Injecting HCI hardware error event [ 478.018399][ T5622] Bluetooth: hci2: hardware error 0x00 [ 478.195235][ T5727] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 478.701950][ T5727] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.763452][ T5727] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 478.816104][ T5727] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.874076][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 479.148329][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 479.166267][ T5727] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 479.175646][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 479.184954][ T5727] usb 2-1: Product: syz [ 479.189292][ T5727] usb 2-1: Manufacturer: syz [ 479.200355][ T5727] cdc_wdm 2-1:1.0: skipping garbage [ 479.208535][ T5727] cdc_wdm 2-1:1.0: skipping garbage [ 479.216091][ T5727] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 479.222236][ T5727] cdc_wdm 2-1:1.0: Unknown control protocol [ 479.533504][ T29] audit: type=1400 audit(1777380005.323:512): avc: denied { read write } for pid=13088 comm="syz.1.2629" name="cdc-wdm0" dev="devtmpfs" ino=3457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 479.624439][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 479.624601][ T5727] usb 2-1: USB disconnect, device number 64 [ 479.631250][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 479.631272][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 480.461096][ T5622] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 480.613370][ T29] audit: type=1400 audit(1777380005.360:513): avc: denied { open } for pid=13088 comm="syz.1.2629" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 481.149011][ T29] audit: type=1400 audit(1777380006.839:514): avc: denied { create } for pid=13123 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.774702][ T29] audit: type=1400 audit(1777380007.326:515): avc: denied { read } for pid=13123 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.844183][ T29] audit: type=1400 audit(1777380007.372:516): avc: denied { write } for pid=13123 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 482.016060][T13138] pim6reg: entered allmulticast mode [ 482.088909][T13138] team0: entered allmulticast mode [ 482.101200][T13138] team_slave_0: entered allmulticast mode [ 482.110814][T13138] team_slave_1: entered allmulticast mode [ 482.173410][T13138] vlan0: entered allmulticast mode [ 482.204573][T13138] veth0_vlan: entered allmulticast mode [ 482.230071][T13142] team0: left allmulticast mode [ 482.261029][T13142] team_slave_0: left allmulticast mode [ 482.287645][T13142] team_slave_1: left allmulticast mode [ 482.368777][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 482.490934][ T29] audit: type=1400 audit(1777380008.018:517): avc: denied { getopt } for pid=13137 comm="syz.0.2648" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 482.714077][T13142] vlan0: left allmulticast mode [ 482.811735][T13142] veth0_vlan: left allmulticast mode [ 482.855489][T13142] pim6reg: left allmulticast mode [ 483.481449][ T29] audit: type=1400 audit(1777380009.019:518): avc: denied { ioctl } for pid=13167 comm="syz.1.2658" path="/545/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 484.440541][T13191] netlink: 'syz.2.2663': attribute type 4 has an invalid length. [ 485.044940][T13203] 9p: Bad value for 'rfdno' [ 485.608364][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 486.232677][T13228] netlink: 'syz.2.2678': attribute type 4 has an invalid length. [ 486.296985][T13230] IPv4: Oversized IP packet from 172.20.20.24 [ 486.304587][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 486.312100][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 487.545620][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 487.875393][T13270] pim6reg: entered allmulticast mode [ 487.902020][T13270] team0: entered allmulticast mode [ 487.907186][T13270] bond0: entered allmulticast mode [ 487.914508][T13270] team0: left allmulticast mode [ 487.926070][T13270] bond0: left allmulticast mode [ 487.931636][T13270] pim6reg: left allmulticast mode [ 489.349390][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 490.459830][ T29] audit: type=1400 audit(1777380015.551:519): avc: denied { write } for pid=13339 comm="syz.3.2716" path="socket:[40803]" dev="sockfs" ino=40803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 490.495036][T13345] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2716'. [ 490.654812][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 491.232708][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 491.237840][ T29] audit: type=1400 audit(1777380016.262:520): avc: denied { execute } for pid=13339 comm="syz.3.2716" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 491.272174][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 491.290267][ T9] usb 1-1: config 179 has no interface number 0 [ 491.297792][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 491.309401][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 491.321373][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.388817][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 491.411896][ T29] audit: type=1400 audit(1777380016.440:521): avc: denied { getopt } for pid=13359 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.435010][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 492.271647][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 492.360879][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.420699][T13360] fuse: Bad value for 'fd' [ 492.427995][ T29] audit: type=1400 audit(1777380017.385:522): avc: denied { getopt } for pid=13359 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.461154][T13348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.865802][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input30 [ 492.952310][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'. [ 493.232059][ T5797] usb 1-1: USB disconnect, device number 56 [ 493.232092][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 493.246238][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 493.521793][T13379] tipc: Enabling of bearer rejected, failed to enable media [ 494.134098][T13391] 9pnet_fd: p9_fd_create_unix (13391): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 494.213338][ T29] audit: type=1400 audit(1777380019.023:523): avc: denied { map } for pid=13386 comm="syz.0.2731" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 495.104512][T13393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2730'. [ 495.318631][ T5797] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 495.469298][ T29] audit: type=1400 audit(1777380019.023:524): avc: denied { execute } for pid=13386 comm="syz.0.2731" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 495.474241][ T5797] usb 3-1: device descriptor read/64, error -71 [ 495.806750][ T5797] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 495.988035][ T5797] usb 3-1: device descriptor read/64, error -71 [ 496.115717][ T5797] usb usb3-port1: attempt power cycle [ 496.149594][T13411] netlink: 'syz.3.2737': attribute type 4 has an invalid length. [ 496.546769][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'. [ 496.888515][ T5797] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 496.949566][ T5797] usb 3-1: device descriptor read/8, error -71 [ 496.986061][T13427] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 496.992569][T13427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 497.001054][T13427] vhci_hcd vhci_hcd.0: Device attached [ 497.141518][T13428] vhci_hcd: connection closed [ 497.144483][T12119] vhci_hcd vhci_hcd.1: stop threads [ 497.173659][T12119] vhci_hcd vhci_hcd.1: release socket [ 497.189490][T12119] vhci_hcd vhci_hcd.1: disconnect device [ 497.470630][T13437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2743'. [ 499.007274][ T29] audit: type=1400 audit(1777380023.543:525): avc: denied { listen } for pid=13447 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 499.099423][T13452] smc: removing ib device syz1 [ 499.117288][T13452] smbdirect: ib_dev[syz1] removed [ 499.584799][T13452] ------------[ cut here ]------------ [ 499.590286][T13452] !xa_empty(&pool->xa) [ 499.590293][T13452] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.4.2747/13452 [ 499.605686][T13452] Modules linked in: [ 499.609960][T13452] CPU: 1 UID: 0 PID: 13452 Comm: syz.4.2747 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.620894][T13452] Tainted: [L]=SOFTLOCKUP [ 499.625189][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.635260][T13452] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 499.641095][T13452] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 06 e9 4f f9 5b e9 00 35 d4 02 e8 fb e8 4f f9 90 <0f> 0b 90 e8 f2 e8 4f f9 5b c3 cc cc cc cc e8 07 a2 bd f9 eb d0 0f [ 499.660725][T13452] RSP: 0018:ffffc90006ad7160 EFLAGS: 00010246 [ 499.666785][T13452] RAX: 0000000000080000 RBX: ffff888078e25398 RCX: ffffc900070f9000 [ 499.674757][T13452] RDX: 0000000000080000 RSI: ffffffff88b8a625 RDI: ffff888078e25418 [ 499.682699][T13452] RBP: ffffffff88b70380 R08: 0000000000000005 R09: 0000000000000001 [ 499.690792][T13452] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888078e24698 [ 499.698889][T13452] R13: ffff888078e23fe0 R14: ffff888078e23fe0 R15: ffff888078e250f8 [ 499.706861][T13452] FS: 00007fc97ffb06c0(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 499.715765][T13452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.722339][T13452] CR2: 00007fc97f186400 CR3: 0000000026064000 CR4: 00000000003526f0 [ 499.730308][T13452] Call Trace: [ 499.733561][T13452] [ 499.736468][T13452] rxe_dealloc+0x25/0xc0 [ 499.740704][T13452] ib_dealloc_device+0x49/0x230 [ 499.745543][T13452] __ib_unregister_device+0x396/0x480 [ 499.750909][T13452] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 499.756691][T13452] ib_unregister_device_and_put+0x5a/0x80 [ 499.762424][T13452] nldev_dellink+0x2a7/0x3c0 [ 499.766992][T13452] ? __pfx_nldev_dellink+0x10/0x10 [ 499.772140][T13452] ? rcu_is_watching+0x12/0xc0 [ 499.776895][T13452] ? cap_capable+0x10b/0x440 [ 499.781533][T13452] ? bpf_lsm_capable+0x9/0x10 [ 499.786183][T13452] ? security_capable+0x80/0x260 [ 499.791108][T13452] ? ns_capable+0xd2/0xf0 [ 499.795434][T13452] ? __pfx_nldev_dellink+0x10/0x10 [ 499.800537][T13452] rdma_nl_rcv_msg+0x392/0x6f0 [ 499.805298][T13452] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 499.810569][T13452] ? __lock_acquire+0x4a5/0x2630 [ 499.815524][T13452] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 499.821917][T13452] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 499.828845][T13452] ? netlink_deliver_tap+0x1ae/0xcc0 [ 499.834121][T13452] netlink_unicast+0x585/0x850 [ 499.838863][T13452] ? __pfx_netlink_unicast+0x10/0x10 [ 499.844154][T13452] netlink_sendmsg+0x8b0/0xda0 [ 499.848917][T13452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.854175][T13452] ? pti_set_user_pgtbl+0x50/0x50 [ 499.859207][T13452] ____sys_sendmsg+0x9e1/0xb70 [ 499.863945][T13452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.869509][T13452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.874774][T13452] ? __pfx_futex_wake_mark+0x10/0x10 [ 499.880052][T13452] ___sys_sendmsg+0x190/0x1e0 [ 499.884717][T13452] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.889926][T13452] __sys_sendmsg+0x170/0x220 [ 499.894506][T13452] ? __pfx___sys_sendmsg+0x10/0x10 [ 499.899605][T13452] ? __x64_sys_futex+0x34f/0x4d0 [ 499.904536][T13452] ? rcu_is_watching+0x12/0xc0 [ 499.909315][T13452] do_syscall_64+0x10b/0xf80 [ 499.913880][T13452] ? clear_bhb_loop+0x40/0x90 [ 499.918535][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.924415][T13452] RIP: 0033:0x7fc97f19cdd9 [ 499.928811][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.948481][T13452] RSP: 002b:00007fc97ffb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.957135][T13452] RAX: ffffffffffffffda RBX: 00007fc97f415fa0 RCX: 00007fc97f19cdd9 [ 499.965104][T13452] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 499.973087][T13452] RBP: 00007fc97f232d69 R08: 0000000000000000 R09: 0000000000000000 [ 499.981029][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.988991][T13452] R13: 00007fc97f416038 R14: 00007fc97f415fa0 R15: 00007ffd964d8918 [ 499.996973][T13452] [ 499.999965][T13452] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 500.007218][T13452] CPU: 1 UID: 0 PID: 13452 Comm: syz.4.2747 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.018118][T13452] Tainted: [L]=SOFTLOCKUP [ 500.022409][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 500.032433][T13452] Call Trace: [ 500.035682][T13452] [ 500.038585][T13452] dump_stack_lvl+0x100/0x190 [ 500.043238][T13452] vpanic+0x552/0x970 [ 500.047191][T13452] ? __pfx_vpanic+0x10/0x10 [ 500.051709][T13452] panic+0xd1/0xe0 [ 500.055416][T13452] ? __pfx_panic+0x10/0x10 [ 500.059816][T13452] check_panic_on_warn.cold+0x19/0x34 [ 500.065167][T13452] ? rxe_pool_cleanup+0x46/0x60 [ 500.069998][T13452] __warn.cold+0x191/0x328 [ 500.074394][T13452] __report_bug+0x296/0x3d0 [ 500.078866][T13452] ? rxe_pool_cleanup+0x46/0x60 [ 500.083694][T13452] ? __pfx___report_bug+0x10/0x10 [ 500.088687][T13452] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 500.094463][T13452] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 500.100248][T13452] ? __flush_workqueue+0x426/0x1200 [ 500.105417][T13452] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 500.111022][T13452] ? rxe_pool_cleanup+0x46/0x60 [ 500.115848][T13452] report_bug+0xb2/0x220 [ 500.120060][T13452] ? rxe_pool_cleanup+0x46/0x60 [ 500.124895][T13452] handle_bug+0x16a/0x2a0 [ 500.129198][T13452] exc_invalid_op+0x17/0x50 [ 500.133677][T13452] asm_exc_invalid_op+0x1a/0x20 [ 500.138498][T13452] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 500.143932][T13452] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 06 e9 4f f9 5b e9 00 35 d4 02 e8 fb e8 4f f9 90 <0f> 0b 90 e8 f2 e8 4f f9 5b c3 cc cc cc cc e8 07 a2 bd f9 eb d0 0f [ 500.163521][T13452] RSP: 0018:ffffc90006ad7160 EFLAGS: 00010246 [ 500.169558][T13452] RAX: 0000000000080000 RBX: ffff888078e25398 RCX: ffffc900070f9000 [ 500.177498][T13452] RDX: 0000000000080000 RSI: ffffffff88b8a625 RDI: ffff888078e25418 [ 500.185457][T13452] RBP: ffffffff88b70380 R08: 0000000000000005 R09: 0000000000000001 [ 500.193396][T13452] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888078e24698 [ 500.201338][T13452] R13: ffff888078e23fe0 R14: ffff888078e23fe0 R15: ffff888078e250f8 [ 500.209281][T13452] ? __pfx_rxe_dealloc+0x10/0x10 [ 500.214195][T13452] ? rxe_pool_cleanup+0x45/0x60 [ 500.219026][T13452] rxe_dealloc+0x25/0xc0 [ 500.223242][T13452] ib_dealloc_device+0x49/0x230 [ 500.228066][T13452] __ib_unregister_device+0x396/0x480 [ 500.233421][T13452] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 500.239200][T13452] ib_unregister_device_and_put+0x5a/0x80 [ 500.244902][T13452] nldev_dellink+0x2a7/0x3c0 [ 500.249465][T13452] ? __pfx_nldev_dellink+0x10/0x10 [ 500.254583][T13452] ? rcu_is_watching+0x12/0xc0 [ 500.259323][T13452] ? cap_capable+0x10b/0x440 [ 500.263882][T13452] ? bpf_lsm_capable+0x9/0x10 [ 500.268530][T13452] ? security_capable+0x80/0x260 [ 500.273436][T13452] ? ns_capable+0xd2/0xf0 [ 500.277739][T13452] ? __pfx_nldev_dellink+0x10/0x10 [ 500.282829][T13452] rdma_nl_rcv_msg+0x392/0x6f0 [ 500.287583][T13452] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 500.292843][T13452] ? __lock_acquire+0x4a5/0x2630 [ 500.297764][T13452] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 500.304153][T13452] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 500.311069][T13452] ? netlink_deliver_tap+0x1ae/0xcc0 [ 500.316329][T13452] netlink_unicast+0x585/0x850 [ 500.321067][T13452] ? __pfx_netlink_unicast+0x10/0x10 [ 500.326326][T13452] netlink_sendmsg+0x8b0/0xda0 [ 500.331072][T13452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.336330][T13452] ? pti_set_user_pgtbl+0x50/0x50 [ 500.341335][T13452] ____sys_sendmsg+0x9e1/0xb70 [ 500.346067][T13452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.351323][T13452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.356587][T13452] ? __pfx_futex_wake_mark+0x10/0x10 [ 500.361843][T13452] ___sys_sendmsg+0x190/0x1e0 [ 500.366493][T13452] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.371677][T13452] __sys_sendmsg+0x170/0x220 [ 500.376243][T13452] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.381329][T13452] ? __x64_sys_futex+0x34f/0x4d0 [ 500.386248][T13452] ? rcu_is_watching+0x12/0xc0 [ 500.390988][T13452] do_syscall_64+0x10b/0xf80 [ 500.395556][T13452] ? clear_bhb_loop+0x40/0x90 [ 500.400208][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.406069][T13452] RIP: 0033:0x7fc97f19cdd9 [ 500.410465][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.430042][T13452] RSP: 002b:00007fc97ffb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.438425][T13452] RAX: ffffffffffffffda RBX: 00007fc97f415fa0 RCX: 00007fc97f19cdd9 [ 500.446373][T13452] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 500.454315][T13452] RBP: 00007fc97f232d69 R08: 0000000000000000 R09: 0000000000000000 [ 500.462263][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.470206][T13452] R13: 00007fc97f416038 R14: 00007fc97f415fa0 R15: 00007ffd964d8918 [ 500.478154][T13452] [ 500.481498][T13452] Kernel Offset: disabled [ 500.485794][T13452] Rebooting in 86400 seconds..