last executing test programs: 2m30.439375216s ago: executing program 4 (id=9510): syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m30.383357907s ago: executing program 4 (id=9511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0xc, &(0x7f0000000480)={0x8, 0x120000000000}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00012000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9eb"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) 2m29.290769663s ago: executing program 4 (id=9519): r0 = socket$unix(0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 2m29.072822595s ago: executing program 4 (id=9522): write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32=r3, @ANYBLOB="0600150007"], 0x44}}, 0x0) 2m28.131522889s ago: executing program 4 (id=9529): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty, 0x1}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 2m27.88118676s ago: executing program 4 (id=9532): creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304944) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r2, 0x82}], 0x1, 0x0, 0x0, 0x0) 2m12.6823288s ago: executing program 32 (id=9532): creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304944) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) pipe2$watch_queue(&(0x7f0000000540), 0x80) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r2, 0x82}], 0x1, 0x0, 0x0, 0x0) 4.867618258s ago: executing program 5 (id=10512): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x4436, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffffffff7f}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x0, @win={{0x0, 0x3, 0x7, 0x6}, 0x6, 0x4, &(0x7f0000000300)={{0xdc, 0x3, 0x6, 0x7ff}, &(0x7f00000002c0)={{0x1, 0x7, 0x80000001, 0x3}, &(0x7f0000000280)={{0x13, 0x10000, 0xc, 0x8}, &(0x7f00000001c0)={{0xffff, 0x7, 0x7, 0x8}}}}}, 0x6, &(0x7f0000000400)="4318e7dceaad39a5ff00daf7b6d7d0461f35216db6a576fa917dc6f796380a491c6e33405ba7b4e174370b2bab3b26ae54626a254fb20140239173689b712caf4aeaff8e62531017f2dc43fe409ae5d5b7a71020e6a7f146aa87ad0375e0fafd5bf106c1a40166743f579fc837b6b531d0bab987f22e546f568014fb5afa3e31ede9661bf0f169a1c5354de5e01afc3033b941c5bde89c08", 0x9}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x121942, 0xeadf) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x33, 0x3, "fd02b21edf8b721e23f27031bf525638f1ff9637df495f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1f"}]}], {0x14}}, 0x7c}}, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4}) 4.621381304s ago: executing program 5 (id=10514): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000001000000000000060400000000612e2e00d56672e2e7f10cad7d802b00176c3fa2c590f0315f331103a48cf068f80088aad62ae7050b2ab2c1b1177162e6e906d1a575e040a08ff34822128292e2ebf4e914"], &(0x7f0000002900)=""/4109, 0x29, 0x100d, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x202800, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1862, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) 4.462914706s ago: executing program 5 (id=10518): socket$packet(0x11, 0x2, 0x300) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2040, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102da297f203d1b01471e57010203010902240001fbb8184b09043d0f02aad03d0909050dfeff01090600090506024000030d"], 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) syz_usb_disconnect(r2) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000140)={0x20, 0x7, 0x34, "c4232474ad1ca4bc8a46ae3cf0b9e9fe9572a750e721bb40f3084a153810a89d93f7e1571d218ad4e714d9813d7ff84ee17f6512"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r2, 0x80085502, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x2000000000006) lseek(r5, 0x8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2.621907291s ago: executing program 0 (id=10539): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x8, 0x82}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, 0x0, &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 2.595750776s ago: executing program 1 (id=10540): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000600)="974501000000000001008cc5ffffffff0a30", 0x12}, {&(0x7f0000001f40)="7414ee835cfeb7c104", 0x9}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 2.462195711s ago: executing program 0 (id=10542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) dup3(r4, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) getpid() openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.446610392s ago: executing program 1 (id=10543): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000001940)={0xdeb, 0xd, 0x1, 0x0, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x8000, 0x3}, 0x8) 1.855549137s ago: executing program 3 (id=10549): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e", 0x20}], 0x1}, 0x20040008) 1.830827909s ago: executing program 3 (id=10551): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x100, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 1.794460844s ago: executing program 2 (id=10552): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000002280)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2, 0x9, 0x0) 1.794052165s ago: executing program 2 (id=10553): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) 1.73341701s ago: executing program 2 (id=10554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000020000000000000400170285000000110000008500000005"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e02742e8680d85ff9782762f86dd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.732958773s ago: executing program 2 (id=10555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 1.731202007s ago: executing program 2 (id=10556): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 1.488467613s ago: executing program 0 (id=10557): set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.485594319s ago: executing program 1 (id=10558): r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x20042095, 0x0, 0x0) 1.485315897s ago: executing program 3 (id=10559): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 1.348420318s ago: executing program 3 (id=10560): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1.340033065s ago: executing program 1 (id=10561): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.126829221s ago: executing program 5 (id=10562): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000070324884c06100001bdb00205f8b771142a45"], 0x2d) preadv(r1, &(0x7f0000000380), 0x0, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.114727931s ago: executing program 3 (id=10563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 1.056657057s ago: executing program 0 (id=10564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e980d78ad62cee000000e5a73f1ab50787ff", 0x0, 0x78, 0x0, 0x34, 0x0, &(0x7f0000000740)="020c2e7d4434cb5778886a65887a26b6cf7fde78f912d855ac9e4d00000000d10021048539d10f406607cc01000100000000000b", 0x0}, 0x50) 1.055952994s ago: executing program 3 (id=10565): syz_emit_ethernet(0x5c, &(0x7f0000000040)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x26, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x12, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "58792d34239a"}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x32, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) 955.553653ms ago: executing program 0 (id=10566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000200000000000004001702850000001100000085000000050000"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e02742e8680d85ff9782762f86dd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 955.104526ms ago: executing program 0 (id=10567): socket(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000388a80e008100450008060104600006032b00000000000000eb782f000000000000155b31d889b2dc7d4c71471da2b0320e"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 838.528461ms ago: executing program 5 (id=10568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02200000002b"}) 823.496981ms ago: executing program 1 (id=10569): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 823.011678ms ago: executing program 2 (id=10570): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b000000000001090224000100004000090400000103004000092100000001220500090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="0000f20000000000000000"], 0x0, 0x0, 0x0, 0x0}) 211.669219ms ago: executing program 5 (id=10571): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 0s ago: executing program 1 (id=10572): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000480)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000440)="7f", 0x46, 0x5}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000000)='y', 0x1, 0x87}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000002500), 0x0, 0x1000000007}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000400)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): roduct: syz [ 1783.108837][ T6889] usb 2-1: Manufacturer: syz [ 1783.124857][ T6889] cdc_wdm 2-1:1.0: skipping garbage [ 1783.136428][ T6889] cdc_wdm 2-1:1.0: skipping garbage [ 1783.459493][T19498] hid_parser_main: 28 callbacks suppressed [ 1783.459515][T19498] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1783.473800][T19498] HID 045e:07da: Invalid code 65791 type 1 [ 1783.481761][ T6889] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1783.487667][ T6889] cdc_wdm 2-1:1.0: Unknown control protocol [ 1783.500316][ T6889] usb 2-1: USB disconnect, device number 59 [ 1783.506555][T19498] HID 045e:07da: Invalid code 768 type 1 [ 1783.513688][T19498] HID 045e:07da: Invalid code 769 type 1 [ 1783.531398][T19498] HID 045e:07da: Invalid code 770 type 1 [ 1783.541325][T19498] HID 045e:07da: Invalid code 771 type 1 [ 1783.550422][T19498] HID 045e:07da: Invalid code 772 type 1 [ 1783.564225][T19498] HID 045e:07da: Invalid code 773 type 1 [ 1783.577341][T19498] HID 045e:07da: Invalid code 774 type 1 [ 1783.594364][T19498] HID 045e:07da: Invalid code 775 type 1 [ 1783.611236][T19498] HID 045e:07da: Invalid code 776 type 1 [ 1783.639763][T19498] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0019/input/input15 [ 1783.714276][T19498] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1784.186563][T19498] usb 3-1: USB disconnect, device number 84 [ 1784.240872][T19508] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1784.424545][T19508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.436795][T19508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.446904][T19508] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1784.457717][T19508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.468055][T19508] usb 1-1: config 0 descriptor?? [ 1784.471228][ T6889] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1784.631428][ T6889] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1784.646609][ T6889] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1784.655729][ T6889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.663847][ T6889] usb 4-1: Product: syz [ 1784.668016][ T6889] usb 4-1: Manufacturer: syz [ 1784.674638][ T6889] usb 4-1: SerialNumber: syz [ 1784.730035][ T7529] netlink: 'syz.4.9511': attribute type 1 has an invalid length. [ 1784.737864][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9511'. [ 1785.016057][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9506'. [ 1785.059034][ T6889] rtl8150 4-1:1.0: couldn't reset the device [ 1785.068329][ T6889] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1785.089164][ T6889] usb 4-1: USB disconnect, device number 104 [ 1785.182006][T19508] usb 1-1: language id specifier not provided by device, defaulting to English [ 1785.247442][ T7544] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1785.256710][ T7544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1786.236558][ T7566] 9pnet_fd: p9_fd_create_unix (7566): problem connecting socket: ./file0: -111 [ 1786.238662][ T30] audit: type=1400 audit(1781723700.578:1116): avc: denied { write } for pid=7562 comm="syz.3.9523" name="file0" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1786.271048][T19508] uclogic 0003:256C:006D.001A: v1 frame probing failed: -71 [ 1786.293958][T19508] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 1786.294102][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.307722][T19508] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 1786.307782][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.339630][T19508] usb 1-1: USB disconnect, device number 90 [ 1786.728423][ T7577] ubi: mtd0 is already attached to ubi16 [ 1787.094459][ T7577] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.9528'. [ 1788.505628][ T30] audit: type=1326 audit(1781723702.848:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.534028][T19508] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1788.542073][ T30] audit: type=1326 audit(1781723702.848:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.573000][ T30] audit: type=1326 audit(1781723702.888:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.600174][ T30] audit: type=1326 audit(1781723702.888:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.633248][ T30] audit: type=1326 audit(1781723702.888:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.662566][ T30] audit: type=1326 audit(1781723702.888:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.689491][ T30] audit: type=1326 audit(1781723702.888:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.716509][ T30] audit: type=1326 audit(1781723702.898:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.720933][ T5700] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1788.743044][ T30] audit: type=1326 audit(1781723702.898:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x7ffc0000 [ 1788.771008][T19508] usb 1-1: Using ep0 maxpacket: 16 [ 1788.783900][T19508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.796875][T19508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.806670][T19508] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1788.815817][T19508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.826907][T19508] usb 1-1: config 0 descriptor?? [ 1789.344092][ T5700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.367675][ T5700] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1789.391125][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.409756][ T5700] usb 2-1: config 0 descriptor?? [ 1789.629240][ T5700] usbhid 2-1:0.0: can't add hid device: -71 [ 1789.635486][T19508] corsair 0003:1B1C:1B02.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 1789.648897][ T5700] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1789.661654][ T5700] usb 2-1: USB disconnect, device number 60 [ 1789.960865][T19498] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1790.091130][T19508] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1790.221287][T19498] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1790.230254][ T5700] usb 1-1: USB disconnect, device number 91 [ 1790.244946][T19498] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1790.254101][T19498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.274991][T19498] usb 3-1: Product: syz [ 1790.279164][T19498] usb 3-1: Manufacturer: syz [ 1790.283919][T19498] usb 3-1: SerialNumber: syz [ 1790.292428][T19508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.304340][T19508] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1790.318751][T19508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.335617][T19508] usb 2-1: config 0 descriptor?? [ 1790.750145][T19498] rtl8150 3-1:1.0: couldn't reset the device [ 1790.756308][T19498] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1790.767682][T19498] usb 3-1: USB disconnect, device number 85 [ 1791.694175][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1791.694192][ T30] audit: type=1400 audit(1781723706.038:1206): avc: denied { nlmsg_write } for pid=7649 comm="syz.3.9552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1791.736630][ T7651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1791.871078][T19508] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1791.880297][T19508] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 1791.900221][T19508] usb 2-1: USB disconnect, device number 61 [ 1791.906163][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1792.038031][ T30] audit: type=1326 audit(1781723706.378:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7647 comm="syz.2.9551" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ca99ce59 code=0x0 [ 1792.350873][T19502] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1792.502000][T19502] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1792.512092][T19502] usb 4-1: config 0 has no interface number 0 [ 1792.518774][T19502] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.530687][T19502] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1792.546556][T19502] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1792.555967][T19502] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1792.564474][T19502] usb 4-1: Product: syz [ 1792.568647][T19502] usb 4-1: SerialNumber: syz [ 1792.576518][T19502] usb 4-1: config 0 descriptor?? [ 1792.588712][T19502] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1792.690992][T19508] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1792.791159][ T5734] usb 4-1: USB disconnect, device number 105 [ 1792.857408][T19508] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1792.877153][T19508] usb 2-1: config 0 has no interface number 0 [ 1792.894177][T19508] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1792.915659][T19508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.925410][T19508] usb 2-1: Product: syz [ 1792.929849][T19508] usb 2-1: Manufacturer: syz [ 1792.945346][T19508] usb 2-1: SerialNumber: syz [ 1792.971072][T19508] usb 2-1: config 0 descriptor?? [ 1793.036439][T19508] usb 2-1: selecting invalid altsetting 1 [ 1793.063263][T19508] dvb_ttusb_budget: ttusb_init_controller: error [ 1793.095814][T19508] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1793.131923][T19508] DVB: Unable to find symbol stv0299_attach() [ 1793.156374][T19508] DVB: Unable to find symbol tda8083_attach() [ 1793.162648][T19508] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1793.230449][T19502] usb 2-1: USB disconnect, device number 62 [ 1793.240214][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9564'. [ 1793.955765][ T7708] ubi: mtd0 is already attached to ubi16 [ 1794.053735][ T30] audit: type=1400 audit(1781723708.398:1208): avc: denied { prog_load } for pid=7706 comm="syz.1.9570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1794.078157][ T7710] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.9570'. [ 1794.110143][ T30] audit: type=1400 audit(1781723708.428:1209): avc: denied { bpf } for pid=7706 comm="syz.1.9570" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1794.149575][ T30] audit: type=1400 audit(1781723708.428:1210): avc: denied { perfmon } for pid=7706 comm="syz.1.9570" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1794.340942][T19508] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1794.430921][T19498] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1794.553581][T19508] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1794.562815][T19508] usb 3-1: not running at top speed; connect to a high speed hub [ 1794.953172][T19508] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1794.962319][T19508] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1794.970610][T19508] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.985106][T19508] usb 3-1: config 14 has no interface number 0 [ 1794.995449][ T7723] bridge0: port 3(wlan1) entered blocking state [ 1795.001825][ T7723] bridge0: port 3(wlan1) entered disabled state [ 1795.008257][ T7723] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 1795.016334][ T7723] mac80211_hwsim hwsim58 wlan1: entered promiscuous mode [ 1795.024228][ T7723] bridge0: port 3(wlan1) entered blocking state [ 1795.030533][ T7723] bridge0: port 3(wlan1) entered forwarding state [ 1795.057489][ T6925] bridge0: port 3(wlan1) entered disabled state [ 1795.063993][ T6560] Bluetooth: hci5: unexpected subevent 0x0e length: 32 > 15 [ 1795.071394][ T6560] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1795.086917][T19508] usb 3-1: config 14 has no interface number 1 [ 1795.094478][T19508] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1795.105648][T19508] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1795.117771][T19508] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1795.129955][T19508] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1795.141347][T19508] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1795.148189][T19508] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1795.157373][T19508] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1795.166750][T19508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.175669][T19508] usb 3-1: Product: syz [ 1795.179967][T19508] usb 3-1: Manufacturer: syz [ 1795.186039][T19508] usb 3-1: SerialNumber: syz [ 1795.520855][T19498] usb 1-1: Using ep0 maxpacket: 16 [ 1795.527846][T19498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.538978][T19498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.548746][T19498] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1795.557791][T19498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.589828][T19498] usb 1-1: config 0 descriptor?? [ 1795.700910][T19508] legousbtower 3-1:14.57: interrupt endpoints not found [ 1795.796777][ T7730] 9pnet_virtio: no channels available for device syz [ 1796.849091][T19508] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1796.884686][T19508] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1797.066712][T19498] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 1797.180879][T19502] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1797.264167][T19498] corsair 0003:1B1C:1B02.001C: Failed to get K90 initial state (error -71). [ 1797.275483][T19498] usb 1-1: USB disconnect, device number 92 [ 1797.330947][T19502] usb 4-1: Using ep0 maxpacket: 16 [ 1797.337415][T19502] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1797.347619][T19502] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1797.359279][T19502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1797.370399][T19502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1797.383061][T19502] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1797.392134][T19502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.400106][T19502] usb 4-1: Product: syz [ 1797.404412][T19502] usb 4-1: Manufacturer: syz [ 1797.409013][T19502] usb 4-1: SerialNumber: syz [ 1797.415233][T19502] usb 4-1: config 0 descriptor?? [ 1797.585893][ T7741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1797.687849][T19502] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1797.721370][T19502] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1797.900523][T19502] usb 4-1: USB disconnect, device number 106 [ 1797.949809][ T30] audit: type=1400 audit(1781723712.288:1211): avc: denied { map_create } for pid=7743 comm="syz.0.9581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1798.351263][ T7712] usb 3-1: LEGO USB Tower reset control request failed [ 1798.370159][T19508] usb 3-1: USB disconnect, device number 86 [ 1798.381557][T19508] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1798.400770][ T7755] ubi: mtd0 is already attached to ubi16 [ 1798.920580][ T7758] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1799.036591][ T7764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.094645][ T7764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.245459][ T7767] bridge0: port 3(wlan1) entered blocking state [ 1799.252884][ T7767] bridge0: port 3(wlan1) entered disabled state [ 1799.259269][ T7767] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 1799.267284][ T7767] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 1799.300975][ T6560] Bluetooth: hci3: unexpected subevent 0x0e length: 32 > 15 [ 1799.308615][ T6560] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1799.338307][ T7764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.457644][ T7764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.765017][T20591] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.780051][T20591] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.795561][T20591] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.810458][T20591] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.857709][T19508] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1800.017559][ T30] audit: type=1400 audit(1781723714.358:1212): avc: denied { override_creds } for pid=7779 comm="syz.2.9594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1800.061849][T19508] usb 2-1: Using ep0 maxpacket: 16 [ 1800.074646][T19508] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1800.098182][T19508] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.129425][T19508] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1800.148691][T19508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.163655][T19508] usb 2-1: Product: syz [ 1800.175748][T19508] usb 2-1: Manufacturer: syz [ 1800.180974][T19508] usb 2-1: SerialNumber: syz [ 1800.201179][T19508] usb 2-1: 0:2 : does not exist [ 1800.354922][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9600'. [ 1800.572912][T19508] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1800.616200][ T7801] netlink: 'syz.2.9602': attribute type 4 has an invalid length. [ 1800.626720][T19508] usb 2-1: USB disconnect, device number 63 [ 1800.659243][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1800.688057][ T7803] syzkaller1: entered promiscuous mode [ 1800.695954][ T7803] syzkaller1: entered allmulticast mode [ 1801.049492][ T7816] netlink: 'syz.0.9607': attribute type 3 has an invalid length. [ 1801.058110][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9607'. [ 1801.310846][ T5734] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1801.678065][T19508] IPVS: starting estimator thread 0... [ 1801.770897][ T7823] IPVS: using max 107 ests per chain, 256800 per kthread [ 1801.864636][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.194102][ T5734] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1802.203840][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.223041][ T5734] usb 3-1: config 0 descriptor?? [ 1802.386558][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1802.394448][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1802.401821][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1802.409356][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1802.417559][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1802.447158][ T5734] usbhid 3-1:0.0: can't add hid device: -71 [ 1802.454482][ T5734] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1802.479100][ T5734] usb 3-1: USB disconnect, device number 87 [ 1802.490533][ T7841] netlink: 'syz.3.9616': attribute type 4 has an invalid length. [ 1803.313749][ T30] audit: type=1400 audit(1781723717.658:1213): avc: denied { map_read map_write } for pid=7851 comm="syz.1.9618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1803.455400][ T7835] lo speed is unknown, defaulting to 1000 [ 1803.601833][T19502] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1803.667133][ T7862] 9pnet_virtio: no channels available for device syz [ 1803.700932][ T5734] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1803.875051][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.922142][ T5734] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1803.965631][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.085570][ T5734] usb 3-1: config 0 descriptor?? [ 1804.367974][ T5734] usb 3-1: can't set config #0, error -71 [ 1804.387011][ T5734] usb 3-1: USB disconnect, device number 88 [ 1804.460974][ T5616] Bluetooth: hci2: command tx timeout [ 1804.474810][ T7864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1804.678710][ T30] audit: type=1400 audit(1781723719.018:1214): avc: denied { prog_run } for pid=7867 comm="syz.2.9622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1804.883085][T19502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.893816][T19502] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1804.915514][T19502] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1804.924951][T19502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1804.943154][ T30] audit: type=1400 audit(1781723719.288:1215): avc: denied { write } for pid=7871 comm="syz.2.9624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1804.967113][T19502] usb 1-1: SerialNumber: syz [ 1805.111890][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.121066][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.132425][ T7835] bridge_slave_0: entered allmulticast mode [ 1805.149380][ T7835] bridge_slave_0: entered promiscuous mode [ 1805.158907][ T7881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9624'. [ 1805.177043][T19502] usb 1-1: 0:2 : does not exist [ 1805.182045][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.193082][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.226350][T19502] usb 1-1: USB disconnect, device number 93 [ 1805.236546][ T7835] bridge_slave_1: entered allmulticast mode [ 1805.247724][ T7835] bridge_slave_1: entered promiscuous mode [ 1805.309514][ T7885] ubi: mtd0 is already attached to ubi16 [ 1805.310302][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.338942][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.554050][ T7887] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1805.585293][ T7835] team0: Port device team_slave_0 added [ 1805.599564][ T7835] team0: Port device team_slave_1 added [ 1805.629014][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.636270][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.664825][ T7835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.678114][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.686619][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.714784][ T7835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.757842][ T7835] hsr_slave_0: entered promiscuous mode [ 1805.765168][ T7835] hsr_slave_1: entered promiscuous mode [ 1805.771574][ T7835] debugfs: 'hsr0' already exists in 'hsr' [ 1805.777676][ T7835] Cannot create hsr debugfs directory [ 1805.806675][ T30] audit: type=1400 audit(1781723720.148:1216): avc: denied { setopt } for pid=7890 comm="syz.3.9628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1805.900727][ T7893] netlink: 'syz.3.9628': attribute type 4 has an invalid length. [ 1806.534862][ T5616] Bluetooth: hci2: command tx timeout [ 1806.576321][ T7835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1806.624395][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1806.634162][ T7835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1806.649625][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1806.657544][ T7835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1806.666654][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1806.675412][ T7835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1806.744972][ T30] audit: type=1400 audit(1781723721.088:1217): avc: denied { accept } for pid=7901 comm="syz.0.9632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1806.776152][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1807.112112][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.126378][ T7835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.154290][ T7835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1807.164780][ T7835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1807.195355][T30174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.202500][T30174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1807.214779][ T7920] ubi: mtd0 is already attached to ubi16 [ 1807.224068][T30174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.231141][T30174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1807.449415][ T7921] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.9636'. [ 1807.736640][ T7926] kvm: kvm [7924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x318 [ 1807.746301][ T7926] kvm: kvm [7924]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1807.755715][ T7926] kvm: kvm [7924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe80 [ 1807.766107][ T7926] kvm: kvm [7924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x308000003000 [ 1807.828346][ T7835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.096365][ T7835] veth0_vlan: entered promiscuous mode [ 1808.110381][ T7835] veth1_vlan: entered promiscuous mode [ 1808.138679][ T7835] veth0_macvtap: entered promiscuous mode [ 1808.148493][ T7835] veth1_macvtap: entered promiscuous mode [ 1808.164425][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.178399][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.195279][T20591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.214585][T20591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.227862][T20591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.243856][T20591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.270873][ T5707] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1808.289010][T20591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.310305][T20591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.334859][T20591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.343448][T20591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.441527][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 1808.455422][ T5707] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1808.470216][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1808.483622][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1808.602623][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1808.616061][ T5616] Bluetooth: hci2: command tx timeout [ 1808.624869][ T5707] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1808.635239][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.644027][ T5707] usb 4-1: Product: syz [ 1808.648253][ T5707] usb 4-1: Manufacturer: syz [ 1808.653160][ T5707] usb 4-1: SerialNumber: syz [ 1808.659082][ T5707] usb 4-1: config 0 descriptor?? [ 1808.916673][ T30] audit: type=1326 audit(1781723723.238:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.5.9643" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f798f39ce59 code=0x0 [ 1808.955001][ T5707] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1808.979878][ T5707] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1809.013396][ T5707] usb 4-1: USB disconnect, device number 107 [ 1809.071022][ T5557] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1809.152494][ T7974] ubi: mtd0 is already attached to ubi16 [ 1809.234829][ T5557] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1809.272371][T19512] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1809.388675][ T5557] usb 1-1: not running at top speed; connect to a high speed hub [ 1809.421706][ T7976] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.9649'. [ 1809.442278][ T5557] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1809.451911][ T5557] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1809.460972][ T5557] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.472675][ T5557] usb 1-1: config 14 has no interface number 0 [ 1809.478959][ T5557] usb 1-1: config 14 has no interface number 1 [ 1809.521206][ T5557] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1809.536462][T19512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1809.555173][T19512] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1809.567292][ T5557] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1809.586516][T19512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1809.596331][ T5557] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1809.609331][T19512] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1809.626134][ T5557] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1809.637642][T19512] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1809.648713][ T5557] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1809.656854][T19512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.731601][ T5557] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1809.740772][ T5557] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1809.755446][T19512] usb 3-1: config 0 descriptor?? [ 1809.760390][ T5557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.769226][ T5557] usb 1-1: Product: syz [ 1809.776489][ T5557] usb 1-1: Manufacturer: syz [ 1809.781581][ T5557] usb 1-1: SerialNumber: syz [ 1810.151171][T19512] hdpvr 3-1:0.0: unexpected answer of status request, len 23 [ 1810.162472][T19512] hdpvr 3-1:0.0: device init failed [ 1810.167763][T19512] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1810.234423][ T5557] legousbtower 1-1:14.57: interrupt endpoints not found [ 1811.025300][ T5616] Bluetooth: hci2: command tx timeout [ 1811.033577][ T5557] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1811.082436][ T5557] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1811.637851][ T8020] ubi: mtd0 is already attached to ubi16 [ 1811.665894][ T6889] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1811.693056][ T5707] usb 1-1: USB disconnect, device number 94 [ 1811.724211][ T5707] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 1812.076510][ T8023] netlink: 1216 bytes leftover after parsing attributes in process `syz.5.9662'. [ 1812.226578][ T6889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.299851][ T5557] usb 3-1: USB disconnect, device number 89 [ 1812.310004][ T6889] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1812.328216][ T6889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.344914][ T6889] usb 2-1: config 0 descriptor?? [ 1812.402433][ T8027] overlayfs: missing 'lowerdir' [ 1812.610033][ T30] audit: type=1400 audit(1781723726.848:1219): avc: denied { read } for pid=8031 comm="syz.3.9669" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1812.615262][ T6889] usbhid 2-1:0.0: can't add hid device: -71 [ 1812.643794][ T6889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1812.648113][ T30] audit: type=1400 audit(1781723726.848:1220): avc: denied { open } for pid=8031 comm="syz.3.9669" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1812.654630][ T6889] usb 2-1: USB disconnect, device number 64 [ 1813.230872][ T6889] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1813.473155][ T6889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1813.693213][ T6889] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1813.702997][ T6889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.731143][ T6889] usb 2-1: config 0 descriptor?? [ 1814.120839][ T5734] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1814.256157][ T8069] overlayfs: missing 'lowerdir' [ 1814.335317][ T5734] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1814.344140][ T5734] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1814.356790][ T5734] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1814.365970][ T5734] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1814.560967][ T5734] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1814.587322][ T5734] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1814.602366][ T5700] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1814.617235][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1814.631895][ T5734] usb 1-1: Product: syz [ 1814.640990][ T5734] usb 1-1: Manufacturer: syz [ 1814.673341][ T5734] cdc_wdm 1-1:1.0: skipping garbage [ 1814.689269][ T6889] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1814.696014][ T5734] cdc_wdm 1-1:1.0: skipping garbage [ 1814.698219][ T6889] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 1814.714288][ T5734] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1814.722575][ T5734] cdc_wdm 1-1:1.0: Unknown control protocol [ 1814.780730][ T5700] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1814.854984][ T5700] usb 6-1: not running at top speed; connect to a high speed hub [ 1814.950596][ T5700] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1815.066083][ T30] audit: type=1400 audit(1781723729.398:1221): avc: denied { read write } for pid=8061 comm="syz.0.9675" name="cdc-wdm0" dev="devtmpfs" ino=5573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1815.096301][ T30] audit: type=1400 audit(1781723729.408:1222): avc: denied { open } for pid=8061 comm="syz.0.9675" path="/dev/cdc-wdm0" dev="devtmpfs" ino=5573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1815.096412][ T5700] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1815.136385][ T6889] usb 2-1: USB disconnect, device number 65 [ 1815.136427][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1815.198232][ T5557] usb 1-1: USB disconnect, device number 95 [ 1815.234854][ T5700] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.245390][ T5700] usb 6-1: config 14 has no interface number 0 [ 1815.254080][ T5700] usb 6-1: config 14 has no interface number 1 [ 1815.260313][ T5700] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1815.271148][ T5700] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1815.288565][ T5700] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1815.300687][ T5700] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1815.312358][ T8086] netlink: 'syz.2.9684': attribute type 1 has an invalid length. [ 1815.320114][ T8086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1815.327341][ T8086] IPv6: NLM_F_CREATE should be set when creating new route [ 1815.334568][ T8086] IPv6: NLM_F_CREATE should be set when creating new route [ 1815.343527][ T5700] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1815.350336][ T5700] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1815.359472][ T5700] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1815.369238][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.379083][ T5700] usb 6-1: Product: syz [ 1815.383451][ T5700] usb 6-1: Manufacturer: syz [ 1815.388077][ T5700] usb 6-1: SerialNumber: syz [ 1815.809659][ T5700] legousbtower 6-1:14.57: interrupt endpoints not found [ 1816.270481][ T5700] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1816.283398][ T5700] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1816.974136][ T8151] fuse: Bad value for 'fd' [ 1817.091378][ T6889] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1817.147002][ T30] audit: type=1326 audit(1781723731.488:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.182351][ T30] audit: type=1326 audit(1781723731.488:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.238650][ T30] audit: type=1326 audit(1781723731.518:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.306558][ T6889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1817.324808][ T6889] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1817.340965][ T30] audit: type=1326 audit(1781723731.518:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.377754][ T6889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1817.452945][ T6889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1817.470042][ T6889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1817.483153][ T5557] usb 6-1: USB disconnect, device number 2 [ 1817.701002][ T30] audit: type=1326 audit(1781723731.558:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.793351][ T6889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1817.802531][ T6889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1817.810540][ T6889] usb 1-1: Product: syz [ 1817.834924][ T30] audit: type=1326 audit(1781723731.558:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.862470][ T30] audit: type=1326 audit(1781723731.558:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.895545][ T5557] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1817.896176][ T30] audit: type=1326 audit(1781723731.558:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.1.9700" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1817.931326][ T6889] usb 1-1: Manufacturer: syz [ 1817.960438][ T6889] cdc_wdm 1-1:1.0: skipping garbage [ 1817.973982][ T6889] cdc_wdm 1-1:1.0: skipping garbage [ 1817.985245][ T6889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1817.994770][ T6889] cdc_wdm 1-1:1.0: Unknown control protocol [ 1818.437581][ T5734] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1818.860955][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 1818.867458][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.827804][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1819.842994][ T5734] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1819.843060][ T6889] usb 1-1: USB disconnect, device number 96 [ 1819.852416][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.853662][ T5734] usb 2-1: config 0 descriptor?? [ 1820.140596][ T5557] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1820.411321][ T5557] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1820.423088][ T5734] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 1820.429249][ T5557] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1820.434640][ T5734] hid_map_usage: 4377 callbacks suppressed [ 1820.434654][ T5734] HID 045e:07da: Invalid code 65791 type 1 [ 1820.453022][ T5557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.463823][ T5557] usb 3-1: Product: syz [ 1820.464025][ T5734] HID 045e:07da: Invalid code 768 type 1 [ 1820.468022][ T5557] usb 3-1: Manufacturer: syz [ 1820.480907][ T5734] HID 045e:07da: Invalid code 769 type 1 [ 1820.484930][ T5557] usb 3-1: SerialNumber: syz [ 1820.491107][ T5734] HID 045e:07da: Invalid code 770 type 1 [ 1820.491123][ T5734] HID 045e:07da: Invalid code 771 type 1 [ 1820.491137][ T5734] HID 045e:07da: Invalid code 772 type 1 [ 1820.491150][ T5734] HID 045e:07da: Invalid code 773 type 1 [ 1820.491164][ T5734] HID 045e:07da: Invalid code 774 type 1 [ 1820.491178][ T5734] HID 045e:07da: Invalid code 775 type 1 [ 1820.491192][ T5734] HID 045e:07da: Invalid code 776 type 1 [ 1820.503186][ T5734] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001D/input/input18 [ 1820.629893][ T5734] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1820.740868][ T6889] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1820.860943][ T5734] usb 2-1: USB disconnect, device number 66 [ 1820.898955][ T5557] rtl8150 3-1:1.0: couldn't reset the device [ 1820.917631][ T5557] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1820.926219][ T6889] usb 1-1: Using ep0 maxpacket: 32 [ 1820.945356][ T6889] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1820.969853][ T5557] usb 3-1: USB disconnect, device number 90 [ 1820.978047][ T6889] usb 1-1: config 0 has no interface number 0 [ 1820.992404][ T6889] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1821.009950][ T6889] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1821.023335][ T6889] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1821.032707][ T6889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.040736][ T6889] usb 1-1: Product: syz [ 1821.046499][ T6889] usb 1-1: Manufacturer: syz [ 1821.051798][ T6889] usb 1-1: SerialNumber: syz [ 1821.057706][ T6889] usb 1-1: config 0 descriptor?? [ 1821.290415][ T6889] radio-si470x 1-1:0.35: this is not a si470x device. [ 1821.343381][ T6889] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1821.567975][ T6889] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1822.019884][ T8237] netlink: 'syz.2.9720': attribute type 3 has an invalid length. [ 1822.027698][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9720'. [ 1822.089354][ T6889] usb 1-1: USB disconnect, device number 97 [ 1822.103051][ T6889] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1822.177609][ T8243] overlayfs: missing 'lowerdir' [ 1822.397687][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1822.397705][ T30] audit: type=1400 audit(1781723736.738:1243): avc: denied { write } for pid=8249 comm="syz.3.9726" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1822.429517][ T8252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1822.569055][ T8256] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1823.590222][ T8275] overlayfs: missing 'lowerdir' [ 1825.446824][ T957] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1825.863192][ T8318] ceph: No mds server is up or the cluster is laggy [ 1826.194306][ T957] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1826.202973][ T957] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1826.225408][ T957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1826.234580][ T957] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1826.248074][ T957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1826.263507][ T957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1826.307152][ T957] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1826.316918][ T957] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1826.325096][ T957] usb 4-1: Product: syz [ 1826.334886][ T957] usb 4-1: Manufacturer: syz [ 1826.407669][ T8310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1826.437357][ T957] cdc_wdm 4-1:1.0: skipping garbage [ 1826.447276][ T957] cdc_wdm 4-1:1.0: skipping garbage [ 1826.476638][ T957] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1826.483039][ T957] cdc_wdm 4-1:1.0: Unknown control protocol [ 1826.708911][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.715567][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.721807][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.728376][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.734571][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.741137][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.747335][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.753902][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.760094][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.766661][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.774029][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.780600][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.786938][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.793511][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.799706][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.806270][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.812498][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.819083][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.825274][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1826.831841][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1826.844340][T19508] usb 4-1: USB disconnect, device number 108 [ 1826.850321][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1826.990823][ T957] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1827.210895][ T957] usb 2-1: Using ep0 maxpacket: 32 [ 1827.248222][ T8351] 9pnet_virtio: no channels available for device syz [ 1828.147403][ T957] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1828.163921][ T957] usb 2-1: config 0 has no interface number 0 [ 1828.184719][ T957] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1828.227534][ T957] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1828.243259][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.251962][ T957] usb 2-1: Product: syz [ 1828.256257][ T957] usb 2-1: Manufacturer: syz [ 1828.295586][ T957] usb 2-1: SerialNumber: syz [ 1828.316453][ T957] usb 2-1: config 0 descriptor?? [ 1828.329262][ T957] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1828.347835][ T957] em28xx 2-1:0.132: Video interface 132 found: [ 1828.851726][ T957] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1828.940839][ T6889] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1829.340969][ T6560] Bluetooth: hci3: command 0x0406 tx timeout [ 1829.390848][ T6889] usb 1-1: Using ep0 maxpacket: 32 [ 1829.398326][ T6889] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1829.406613][ T6889] usb 1-1: config 0 has no interface number 0 [ 1829.413102][ T6889] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1829.425448][ T6889] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1829.438187][ T6889] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1829.447338][ T6889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.455537][ T6889] usb 1-1: Product: syz [ 1829.459763][ T6889] usb 1-1: Manufacturer: syz [ 1829.464415][ T6889] usb 1-1: SerialNumber: syz [ 1829.471083][ T6889] usb 1-1: config 0 descriptor?? [ 1829.555112][ T957] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1829.569427][ T957] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 1829.576350][ T957] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1829.692364][ T8384] 9pnet_virtio: no channels available for device syz [ 1829.704289][ T8384] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1829.769798][ T8384] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1829.779839][ T8384] overlayfs: failed to look up (tracing) for ino (-66) [ 1829.809020][ T957] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1829.818955][ T957] em28xx 2-1:0.132: analog set to bulk mode. [ 1829.826006][ T5734] em28xx 2-1:0.132: Registering V4L2 extension [ 1829.898352][ T957] usb 2-1: USB disconnect, device number 67 [ 1830.031661][ T957] em28xx 2-1:0.132: Disconnecting em28xx [ 1830.516656][ T5734] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1830.569340][ T6889] radio-si470x 1-1:0.35: this is not a si470x device. [ 1830.689546][ T6889] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1830.706682][ T6889] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1830.734327][ T5734] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1830.800440][ T5734] em28xx 2-1:0.132: No AC97 audio processor [ 1830.850078][ T5734] videodev: could not get a free minor [ 1830.882706][ T5734] em28xx 2-1:0.132: unable to register video device (error=-23). [ 1830.907792][ T5734] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1830.924526][ T6889] usb 1-1: USB disconnect, device number 98 [ 1830.931731][ T957] em28xx 2-1:0.132: Closing input extension [ 1830.944804][ T6889] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1830.946717][ T957] em28xx 2-1:0.132: Freeing device [ 1834.383616][ T8455] tipc: Enabling of bearer rejected, failed to enable media [ 1834.392885][ T8455] tipc: Started in network mode [ 1834.392960][ T8455] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1834.393565][ T8455] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1834.394218][ T8455] tipc: Enabled bearer , priority 10 [ 1835.400866][ T957] tipc: Node number set to 1 [ 1836.220581][ T30] audit: type=1400 audit(1781723750.558:1244): avc: denied { mounton } for pid=8456 comm="syz.2.9795" path="/215/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1836.852573][ T957] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1837.091721][ T957] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1837.124090][ T957] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1837.141660][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.157520][ T957] usb 2-1: Product: syz [ 1837.166345][ T957] usb 2-1: Manufacturer: syz [ 1837.175981][ T957] usb 2-1: SerialNumber: syz [ 1837.425493][ T30] audit: type=1400 audit(1781723751.768:1245): avc: denied { unmount } for pid=4611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1837.454234][ T957] rtl8150 2-1:1.0: couldn't reset the device [ 1837.469447][ T957] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1837.495785][ T957] usb 2-1: USB disconnect, device number 68 [ 1838.918278][ T8503] 9pnet_virtio: no channels available for device syz [ 1839.916588][ T8510] ubi: mtd0 is already attached to ubi16 [ 1840.202297][ T8510] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.9811'. [ 1840.301242][ T5557] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1840.512798][ T5734] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1840.707844][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 1840.761627][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1840.819319][ T5734] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1840.848949][ T5557] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1840.861780][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.922910][ T5734] usb 1-1: config 0 descriptor?? [ 1840.967302][T19498] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1841.254510][ T5557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.264932][ T5557] usb 3-1: config 0 has no interface number 0 [ 1841.271359][ T5557] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1841.286186][ T5557] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1841.295492][ T5557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.304634][ T5557] usb 3-1: Product: syz [ 1841.309408][ T5557] usb 3-1: Manufacturer: syz [ 1841.314566][ T5557] usb 3-1: SerialNumber: syz [ 1841.323432][ T5557] usb 3-1: config 0 descriptor?? [ 1841.332132][ T5557] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input19 [ 1841.415321][ T5734] usbhid 1-1:0.0: can't add hid device: -71 [ 1841.432528][T19498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.432780][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1841.449525][T19498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.461942][T19498] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1841.471047][T19498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.497096][T19498] usb 2-1: config 0 descriptor?? [ 1841.504600][ T5734] usb 1-1: USB disconnect, device number 99 [ 1841.513118][ T30] audit: type=1400 audit(1781723755.858:1246): avc: denied { getopt } for pid=8538 comm="syz.5.9823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1841.578731][ T5557] usb 3-1: USB disconnect, device number 91 [ 1841.719371][ T30] audit: type=1400 audit(1781723756.058:1247): avc: denied { ioctl } for pid=8543 comm="syz.3.9825" path="socket:[170910]" dev="sockfs" ino=170910 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1841.806609][ T8546] 9pnet_virtio: no channels available for device syz [ 1841.818811][ T8546] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1841.884227][ T8546] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1841.894547][ T8546] overlayfs: failed to look up (tracing) for ino (-66) [ 1842.010756][ T8547] ubi: mtd0 is already attached to ubi16 [ 1842.702618][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1842.727529][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1842.736192][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1842.748015][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1842.756451][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1842.775732][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1842.839252][ T8548] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.9826'. [ 1842.981614][T19498] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1843.018712][T19498] hid-thrustmaster 0003:044F:B65D.001E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 1843.062441][T19498] hid-thrustmaster 0003:044F:B65D.001E: Wrong number of endpoints? [ 1843.087200][ C0] hid-thrustmaster 0003:044F:B65D.001E: URB to get model id failed with error -71 [ 1843.120082][T19498] usb 2-1: USB disconnect, device number 69 [ 1843.141700][ T8555] fido_id[8555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1843.737797][ T8572] netlink: 5280 bytes leftover after parsing attributes in process `syz.5.9834'. [ 1844.788226][ T5616] Bluetooth: hci5: unexpected subevent 0x0e length: 32 > 15 [ 1844.795715][ T5616] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1844.838647][ T957] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1844.992805][ T957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1845.010946][ T957] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1845.030742][ T957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1845.044047][ T957] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1845.054620][ T957] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1845.063717][ T957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.074239][ T957] usb 4-1: config 0 descriptor?? [ 1845.143259][T19498] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1845.284608][ T957] hdpvr 4-1:0.0: unexpected answer of status request, len 41 [ 1845.292882][ T957] hdpvr 4-1:0.0: device init failed [ 1845.298137][ T957] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1845.320816][T19498] usb 6-1: Using ep0 maxpacket: 16 [ 1845.327089][T19498] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.338916][T19498] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1845.349764][T19498] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1845.358824][T19498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.367310][T19498] usb 6-1: Product: syz [ 1845.371934][T19498] usb 6-1: Manufacturer: syz [ 1845.376704][T19498] usb 6-1: SerialNumber: syz [ 1845.386361][T19498] usb 6-1: 0:2 : does not exist [ 1845.510884][T19512] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1845.591661][T19498] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1845.635028][T19498] usb 6-1: USB disconnect, device number 3 [ 1845.655682][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1845.671912][T19512] usb 3-1: Using ep0 maxpacket: 16 [ 1845.678297][T19512] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.689328][T19512] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1845.704102][T19512] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1845.715802][T19512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.729778][T19512] usb 3-1: Product: syz [ 1845.734792][T19512] usb 3-1: Manufacturer: syz [ 1845.739423][T19512] usb 3-1: SerialNumber: syz [ 1845.756172][T19512] usb 3-1: 0:2 : does not exist [ 1845.962151][T19512] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1845.989978][T19512] usb 3-1: USB disconnect, device number 92 [ 1847.429575][T19498] usb 4-1: USB disconnect, device number 109 [ 1847.434712][ T8623] fuse: Bad value for 'fd' [ 1847.518931][ T8629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9856'. [ 1847.602084][ T8629] syzkaller1: entered promiscuous mode [ 1847.610753][ T8629] syzkaller1: entered allmulticast mode [ 1847.691084][ T8633] bridge0: port 3(wlan1) entered blocking state [ 1847.697433][ T8633] bridge0: port 3(wlan1) entered disabled state [ 1847.703910][ T8633] mac80211_hwsim hwsim60 wlan1: entered allmulticast mode [ 1847.712012][ T8633] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 1847.719721][ T8633] bridge0: port 3(wlan1) entered blocking state [ 1847.726025][ T8633] bridge0: port 3(wlan1) entered forwarding state [ 1847.733233][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.751206][ T5616] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15 [ 1847.758879][ T5616] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1847.783198][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1848.436533][ T957] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1848.706446][ T1083] bridge0: port 3(wlan1) entered disabled state [ 1848.812077][ T8662] fuse: Bad value for 'fd' [ 1848.891565][ T957] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1848.907499][ T957] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1848.936619][ T957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.975137][ T957] usb 4-1: Product: syz [ 1849.001717][ T957] usb 4-1: Manufacturer: syz [ 1849.085347][ T957] usb 4-1: SerialNumber: syz [ 1849.779363][ T8636] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9859'. [ 1849.832560][ T8673] lo speed is unknown, defaulting to 1000 [ 1849.864606][ T957] rtl8150 4-1:1.0: couldn't reset the device [ 1849.879780][ T957] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1849.899801][ T957] usb 4-1: USB disconnect, device number 110 [ 1850.840880][ T5734] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1851.014963][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.085245][ T5734] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1851.177339][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.318596][ T5734] usb 4-1: config 0 descriptor?? [ 1851.673032][ T5734] usbhid 4-1:0.0: can't add hid device: -71 [ 1851.743438][ T5734] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1851.799852][ T5734] usb 4-1: USB disconnect, device number 111 [ 1851.823201][ T5700] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1852.227560][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1852.262603][ T5700] usb 1-1: not running at top speed; connect to a high speed hub [ 1852.272181][ T5700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1852.283407][ T5700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 129, changing to 4 [ 1852.302571][ T5700] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1852.327745][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.347367][ T5700] usb 1-1: Product: syz [ 1852.361925][ T5700] usb 1-1: Manufacturer: syz [ 1852.377511][ T5700] usb 1-1: SerialNumber: syz [ 1852.399892][ T8709] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1852.590871][ T5734] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1852.625689][ T5700] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1852.659332][ T5700] usb 1-1: MIDIStreaming interface descriptor not found [ 1852.789736][ T5734] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.891989][ T5734] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1852.963535][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.978282][ T5700] usb 1-1: USB disconnect, device number 100 [ 1852.998819][ T5734] usb 4-1: config 0 descriptor?? [ 1853.001716][ T8727] kvm: kvm [8726]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x318 [ 1853.019685][ T8727] kvm: kvm [8726]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1853.032512][ T8727] kvm: kvm [8726]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe80 [ 1853.042057][ T6196] udevd[6196]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1853.042956][ T8727] kvm: kvm [8726]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x308000003000 [ 1853.250880][T19498] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1853.405100][T19498] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1853.494992][T19498] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.590753][T19498] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1853.674386][T19498] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1853.721582][T19498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.876854][T19498] usb 6-1: config 0 descriptor?? [ 1854.141100][ T5734] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1854.150295][ T5734] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 1854.175776][ T5734] usb 4-1: USB disconnect, device number 112 [ 1854.175828][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1854.205970][ T30] audit: type=1400 audit(1781723768.548:1248): avc: denied { relabelfrom } for pid=8749 comm="syz.1.9900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1854.227202][ T30] audit: type=1400 audit(1781723768.548:1249): avc: denied { relabelto } for pid=8749 comm="syz.1.9900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1854.459246][T19498] hid (null): report_id 0 is invalid [ 1854.476081][T19498] hid-steam 0003:28DE:1102.001F: report_id 0 is invalid [ 1854.495490][T19498] hid-steam 0003:28DE:1102.001F: item 0 0 1 8 parsing failed [ 1854.521234][T19498] hid-steam 0003:28DE:1102.001F: steam_probe:parse of hid interface failed [ 1854.533075][T19498] hid-steam 0003:28DE:1102.001F: probe with driver hid-steam failed with error -22 [ 1854.592345][ T5700] usb 6-1: USB disconnect, device number 4 [ 1855.245668][ T8781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.512266][T19498] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1855.787115][T19498] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.809606][T19498] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1855.824557][T19498] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1855.842598][T19498] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1855.860149][T19498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.880204][T19498] usb 4-1: config 0 descriptor?? [ 1856.025402][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1856.067214][ T8806] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9921'. [ 1856.230808][ T8812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1856.346629][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.101034][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.137298][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.154420][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.159820][ T8820] syzkaller1: entered promiscuous mode [ 1857.162656][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.189601][ T8820] syzkaller1: entered allmulticast mode [ 1857.189655][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.209371][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.229263][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.247611][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.258824][T19498] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 1857.277611][T19498] dragonrise 0003:0079:0006.0020: hidraw0: USB HID v0.08 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 1857.291504][T19498] dragonrise 0003:0079:0006.0020: no inputs found [ 1857.306405][T19498] dragonrise 0003:0079:0006.0020: force feedback init failed [ 1857.332299][T19498] usb 4-1: USB disconnect, device number 113 [ 1857.361020][T19512] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1857.376469][ T8822] fido_id[8822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1857.551381][T19512] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1857.570066][T19512] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1857.579648][T19512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.589068][T19512] usb 1-1: Product: syz [ 1857.594228][T19512] usb 1-1: Manufacturer: syz [ 1857.599475][T19512] usb 1-1: SerialNumber: syz [ 1857.851134][ T8839] 9pnet_virtio: no channels available for device syz [ 1858.218871][T19512] rtl8150 1-1:1.0: couldn't reset the device [ 1858.234246][T19512] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1858.273792][T19512] usb 1-1: USB disconnect, device number 101 [ 1859.431411][T19502] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1859.610870][T19502] usb 3-1: Using ep0 maxpacket: 32 [ 1859.629842][T19502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.648578][T19502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.668879][T19502] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1859.687739][T19502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.714183][T19502] usb 3-1: config 0 descriptor?? [ 1859.768365][T19502] hub 3-1:0.0: USB hub found [ 1859.998374][T19502] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1860.051658][ T6560] Bluetooth: hci5: command 0x0406 tx timeout [ 1860.061025][T19512] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1860.222695][T19512] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1860.298215][T19512] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1860.349129][T19512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.402652][T19512] usb 1-1: Product: syz [ 1860.436807][T19512] usb 1-1: Manufacturer: syz [ 1860.489950][T19512] usb 1-1: SerialNumber: syz [ 1860.508892][T19502] hid-generic 0003:046D:C31C.0021: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1860.792930][ T8894] 9pnet_virtio: no channels available for device syz [ 1861.591323][T19502] usb 3-1: USB disconnect, device number 93 [ 1861.631237][T19512] rtl8150 1-1:1.0: couldn't reset the device [ 1861.652603][T19512] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1861.680388][T19512] usb 1-1: USB disconnect, device number 102 [ 1862.840398][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9964'. [ 1863.050790][ T8937] 9pnet_virtio: no channels available for device syz [ 1863.065087][ T8937] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1863.149312][ T8937] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1863.159370][ T8937] overlayfs: failed to look up (tracing) for ino (-66) [ 1863.985428][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9968'. [ 1864.164305][ T8950] overlayfs: failed to resolve './file0': -2 [ 1864.357420][ T8965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8728 sclass=netlink_route_socket pid=8965 comm=syz.5.9967 [ 1865.333561][ T8975] netlink: 'syz.1.9977': attribute type 1 has an invalid length. [ 1865.394099][ T8975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1865.401369][ T8975] IPv6: NLM_F_CREATE should be set when creating new route [ 1865.408588][ T8975] IPv6: NLM_F_CREATE should be set when creating new route [ 1866.098421][ T30] audit: type=1400 audit(1781723780.438:1250): avc: denied { attach_queue } for pid=8990 comm="syz.3.9986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1866.400908][ T5700] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1866.611461][ T5700] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1866.675705][ T5700] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1867.203910][ T5700] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1867.214581][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.222862][ T5700] usb 6-1: Product: syz [ 1867.227485][ T5700] usb 6-1: Manufacturer: syz [ 1867.233686][ T5700] usb 6-1: SerialNumber: syz [ 1867.254678][ T5700] usb 6-1: config 0 descriptor?? [ 1867.263375][ T8993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1867.291934][ T8993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1867.621455][ T8993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1867.633612][ T8993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1867.821068][ T5707] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1867.851511][ T5734] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1867.992240][ T5707] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1868.000311][ T5707] usb 4-1: not running at top speed; connect to a high speed hub [ 1868.008327][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 1868.014841][ T5707] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1868.023257][ T5707] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1868.032228][ T5707] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.042513][ T5734] usb 2-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1868.055524][ T5707] usb 4-1: config 14 has no interface number 0 [ 1868.061774][ T5707] usb 4-1: config 14 has no interface number 1 [ 1868.067992][ T5734] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1868.074810][ T5707] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1868.085642][ T5734] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1868.094683][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.102692][ T5707] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1868.114848][ T5707] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1868.126616][ T5734] usb 2-1: config 0 descriptor?? [ 1868.136117][ T5707] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1868.153721][ T5707] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1868.160512][ T5707] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1868.168748][ T5707] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1868.177927][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.186349][ T5707] usb 4-1: Product: syz [ 1868.190507][ T5707] usb 4-1: Manufacturer: syz [ 1868.195339][ T5707] usb 4-1: SerialNumber: syz [ 1868.469425][ T5700] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1868.484749][ T5700] usb 6-1: USB disconnect, device number 5 [ 1868.559510][ T5734] hid_parser_main: 28 callbacks suppressed [ 1868.559525][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x2 [ 1868.574874][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.585290][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.592498][ T957] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1868.600316][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.609177][ T5707] legousbtower 4-1:14.57: interrupt endpoints not found [ 1868.617513][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.626106][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.633476][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.640666][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.648869][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.656682][ T5734] zydacron 0003:13EC:0006.0022: unknown main item tag 0x0 [ 1868.664039][ T5734] zydacron 0003:13EC:0006.0022: unbalanced collection at end of report description [ 1868.676643][ T5734] zydacron 0003:13EC:0006.0022: parse failed [ 1868.683145][ T5734] zydacron 0003:13EC:0006.0022: probe with driver zydacron failed with error -22 [ 1868.765819][ T957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1868.800867][ T957] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1868.817959][ T957] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1868.821544][T19512] usb 2-1: USB disconnect, device number 70 [ 1868.827963][ T957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.843767][ T957] usb 3-1: Product: syz [ 1868.847961][ T957] usb 3-1: Manufacturer: syz [ 1868.874376][ T957] usb 3-1: SerialNumber: syz [ 1868.881792][ T957] usb 3-1: config 0 descriptor?? [ 1868.889770][ T9035] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1868.898394][ T9035] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1869.025702][ T5707] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1869.049297][ T5707] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1869.208476][ T9035] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1869.232666][ T9035] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1870.054652][ T6560] Bluetooth: hci2: link tx timeout [ 1870.091131][ T6560] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1870.099579][ T6560] Bluetooth: hci2: link tx timeout [ 1870.104857][ T6560] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1870.112723][ T6560] Bluetooth: hci2: link tx timeout [ 1870.117948][ T6560] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1870.125711][ T6560] Bluetooth: hci2: link tx timeout [ 1870.131095][ T6560] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1870.347712][ T9066] binder: 9065:9066 ioctl c0306201 200000000080 returned -14 [ 1870.371208][ T9066] binder: 9065:9066 ioctl c0306201 2000000003c0 returned -14 [ 1870.388188][ T957] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1870.477129][ T957] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, cc:06:d9:d6:34:13 [ 1870.530254][ T957] usb 3-1: USB disconnect, device number 94 [ 1870.559749][ T957] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 1870.605074][T19498] usb 4-1: USB disconnect, device number 114 [ 1870.690003][T19498] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1870.801441][ T9077] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1872.211591][ T6560] Bluetooth: hci2: command 0x0406 tx timeout [ 1872.258946][ T30] audit: type=1400 audit(1781723786.598:1251): avc: denied { write } for pid=9076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1872.367048][ T30] audit: type=1400 audit(1781723786.708:1252): avc: denied { write } for pid=9105 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1872.471061][ T5700] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1872.642358][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 1872.686651][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.726994][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.755879][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1872.840199][ T5700] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1873.270865][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.322845][ T5700] usb 4-1: config 0 descriptor?? [ 1873.422759][ T30] audit: type=1400 audit(1781723787.768:1253): avc: denied { write } for pid=9111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1873.622410][ T957] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1873.641732][ T30] audit: type=1400 audit(1781723787.978:1254): avc: denied { write } for pid=9142 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1873.722656][ T9145] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10030'. [ 1874.000277][ T5700] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0023/input/input21 [ 1874.107909][ T5700] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0023/input/input22 [ 1874.127318][ T957] usb 3-1: config 0 has no interfaces? [ 1874.141213][ T957] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1874.183297][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.201592][ T5700] kye 0003:0458:5011.0023: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1874.248849][ T957] usb 3-1: config 0 descriptor?? [ 1874.289679][ T5700] usb 4-1: USB disconnect, device number 115 [ 1874.295801][ T6560] Bluetooth: hci2: command 0x0406 tx timeout [ 1874.336153][ T9147] fido_id[9147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1874.486640][ T957] usb 3-1: USB disconnect, device number 95 [ 1875.103638][ T957] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1875.123612][ T9167] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10031'. [ 1875.279894][ T9173] netlink: 88 bytes leftover after parsing attributes in process `syz.5.10039'. [ 1875.506578][ T9173] syzkaller1: entered promiscuous mode [ 1875.514861][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.518909][ T9173] syzkaller1: entered allmulticast mode [ 1875.559919][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.606163][ T957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1875.647884][ T957] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1875.672303][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.703250][ T957] usb 3-1: config 0 descriptor?? [ 1876.066456][ T9190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8728 sclass=netlink_route_socket pid=9190 comm=syz.3.10038 [ 1876.159458][ T9191] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10043'. [ 1876.410846][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 1876.425022][ T957] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1877.062483][ T9201] syzkaller1: entered promiscuous mode [ 1877.367653][T19498] usb 3-1: USB disconnect, device number 96 [ 1877.388388][ T9201] syzkaller1: entered allmulticast mode [ 1877.690294][ T9218] overlayfs: failed to resolve './file1': -2 [ 1877.898475][T19498] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1878.233710][T19498] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 1878.473941][T19498] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1878.487992][T19498] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1878.509631][T19498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.518171][T19512] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1878.531085][ T6560] Bluetooth: hci2: command 0x0406 tx timeout [ 1878.536441][T19498] usb 3-1: config 0 descriptor?? [ 1878.702275][T19512] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1878.732115][T19512] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1878.762163][T19512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.789373][T19512] usb 4-1: Product: syz [ 1878.790914][ T5734] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1878.810392][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10059'. [ 1878.820388][T19512] usb 4-1: Manufacturer: syz [ 1878.828179][T19512] usb 4-1: SerialNumber: syz [ 1878.993814][T19498] usbhid 3-1:0.0: can't add hid device: -71 [ 1878.997212][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 1879.410643][T19498] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1879.420855][T19498] usb 3-1: USB disconnect, device number 97 [ 1879.458870][ T5734] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1879.464196][T19512] rtl8150 4-1:1.0: couldn't reset the device [ 1879.490408][ T5734] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1879.490510][T19512] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1879.524982][ T5734] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1879.546225][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.567444][ T5734] usb 1-1: config 0 descriptor?? [ 1879.583421][T19512] usb 4-1: USB disconnect, device number 116 [ 1879.826600][ T5734] usbhid 1-1:0.0: can't add hid device: -71 [ 1879.845581][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1879.868996][ T5734] usb 1-1: USB disconnect, device number 103 [ 1880.030490][ T9251] overlayfs: failed to resolve './file1': -2 [ 1880.038001][ T9253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10065'. [ 1880.190999][ T9256] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10066'. [ 1880.258943][ T9263] syzkaller1: entered promiscuous mode [ 1880.541930][ T9263] syzkaller1: entered allmulticast mode [ 1881.300836][ T957] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1881.905377][ T957] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 1881.947365][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.991443][ T957] usb 1-1: Product: syz [ 1882.011421][ T957] usb 1-1: Manufacturer: syz [ 1882.031297][ T957] usb 1-1: SerialNumber: syz [ 1882.047152][ T957] usb 1-1: config 0 descriptor?? [ 1882.305740][ T957] usb 1-1: USB disconnect, device number 104 [ 1882.320997][T19512] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1882.476137][ T9309] netlink: 'syz.1.10083': attribute type 2 has an invalid length. [ 1882.500004][T19512] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1882.529880][T19512] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.546254][ T9309] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10083'. [ 1882.555743][T19512] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1882.580626][T19512] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1882.596178][T19512] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1882.634747][T19512] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1882.646228][T19512] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1882.656032][T19512] usb 4-1: string descriptor 0 read error: -22 [ 1882.663380][T19512] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1882.685928][T19512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.220398][ T9321] ceph: No mds server is up or the cluster is laggy [ 1883.702622][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10099'. [ 1884.039336][T19512] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 1884.060993][T19512] usb 4-1: Warning! Unlikely big volume step count (=3248), linear volume or wrong cval->res? [ 1884.090686][T19512] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -25831/-22583/1 [ 1884.194852][T19512] usb 4-1: USB disconnect, device number 117 [ 1884.717962][ T9377] tipc: Started in network mode [ 1884.723339][ T9377] tipc: Node identity 7f000001, cluster identity 4711 [ 1884.730351][ T9377] tipc: Enabling of bearer rejected, failed to enable media [ 1884.749486][ T9377] tipc: Enabling of bearer rejected, failed to enable media [ 1885.164024][ T9379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1885.826525][ T9391] ceph: No mds server is up or the cluster is laggy [ 1887.562185][ T9436] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10128'. [ 1887.826910][ T9441] ceph: No mds server is up or the cluster is laggy [ 1889.199580][ T9466] syzkaller0: entered promiscuous mode [ 1889.205200][ T9466] syzkaller0: entered allmulticast mode [ 1889.558847][ T9481] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10143'. [ 1889.833501][T19502] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1890.011391][T19502] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1890.025087][T19502] usb 2-1: not running at top speed; connect to a high speed hub [ 1890.041144][T19502] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1890.064669][T19502] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1890.086054][T19502] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.107294][T19502] usb 2-1: config 14 has no interface number 0 [ 1890.119772][T19502] usb 2-1: config 14 has no interface number 1 [ 1890.133805][T19502] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1890.156902][T19502] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1890.181355][T19502] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1890.264946][T19502] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1890.277562][T19502] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1890.287991][T19502] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1890.306915][T19502] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1890.328504][T19502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.356789][T19502] usb 2-1: Product: syz [ 1890.372784][T19502] usb 2-1: Manufacturer: syz [ 1890.386707][T19502] usb 2-1: SerialNumber: syz [ 1890.809500][T19502] legousbtower 2-1:14.57: interrupt endpoints not found [ 1891.211503][T19502] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1891.231853][T19502] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1891.249506][T19512] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1891.402050][T19512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.413857][T19512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.435333][T19512] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1891.444967][T19512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.461519][T19512] usb 1-1: config 0 descriptor?? [ 1891.941381][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1891.956115][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1891.974984][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1891.991242][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1892.037761][ C0] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1892.057376][ T5734] usb 2-1: USB disconnect, device number 71 [ 1892.234650][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1892.247844][ T5734] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1892.254204][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1892.274698][T19512] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0 [ 1892.297648][T19512] hid-thrustmaster 0003:044F:B65D.0025: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1892.322149][T19512] hid-thrustmaster 0003:044F:B65D.0025: Wrong number of endpoints? [ 1892.348676][ C0] hid-thrustmaster 0003:044F:B65D.0025: URB to get model id failed with error -71 [ 1892.366763][T19512] usb 1-1: USB disconnect, device number 105 [ 1893.269405][ T9600] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.10180'. [ 1893.381152][ T9601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1893.485225][ T9609] mac80211_hwsim hwsim53 ..ãc¤±: renamed from wlan1 (while UP) [ 1893.781186][ T5707] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1893.840964][ T5734] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1893.901730][ T9619] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10189'. [ 1893.944596][ T5707] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1893.958585][ T5707] usb 6-1: not running at top speed; connect to a high speed hub [ 1893.983286][ T5707] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1893.999770][ T5707] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1894.022094][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1894.034458][ T5707] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.049973][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1894.063107][ T5707] usb 6-1: config 14 has no interface number 0 [ 1894.072390][ T5734] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1894.083024][ T5707] usb 6-1: config 14 has no interface number 1 [ 1894.092883][ T5707] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1894.110827][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.120196][ T5734] usb 1-1: config 0 descriptor?? [ 1894.125221][ T5707] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1894.139298][ T5707] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1894.156180][ T5707] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1894.167564][ T5707] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1894.174580][ T5707] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1894.189647][ T5707] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1894.201411][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.219631][ T5707] usb 6-1: Product: syz [ 1894.231594][ T5707] usb 6-1: Manufacturer: syz [ 1894.249545][ T5707] usb 6-1: SerialNumber: syz [ 1894.666933][ T5734] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1894.679608][ T5734] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1894.689688][ T5734] hid-thrustmaster 0003:044F:B65D.0026: unknown main item tag 0x0 [ 1894.931902][ T5707] legousbtower 6-1:14.57: interrupt endpoints not found [ 1894.939010][ T5734] hid-thrustmaster 0003:044F:B65D.0026: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1894.962378][ T5734] hid-thrustmaster 0003:044F:B65D.0026: Wrong number of endpoints? [ 1894.975575][ C1] hid-thrustmaster 0003:044F:B65D.0026: URB to get model id failed with error -71 [ 1895.009125][ T5734] usb 1-1: USB disconnect, device number 106 [ 1895.071822][ T9642] fido_id[9642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1895.336550][ T5707] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1895.366283][ T5707] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1895.450818][ T9650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10201'. [ 1895.752576][ T9660] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10203'. [ 1896.279864][T19512] usb 6-1: USB disconnect, device number 6 [ 1896.295617][T19512] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1898.135474][T19502] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1898.301747][T19502] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1898.339005][T19502] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1898.381851][T19502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.427254][T19502] usb 3-1: Product: syz [ 1898.450228][T19502] usb 3-1: Manufacturer: syz [ 1898.469995][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10221'. [ 1898.479655][T19502] usb 3-1: SerialNumber: syz [ 1898.636428][ T9716] overlayfs: missing 'lowerdir' [ 1898.827915][ T9727] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10226'. [ 1899.078052][T19502] rtl8150 3-1:1.0: couldn't reset the device [ 1899.086986][T19502] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1899.100432][T19502] usb 3-1: USB disconnect, device number 98 [ 1900.803842][ T9792] lo speed is unknown, defaulting to 1000 [ 1901.889268][ T9812] ubi: mtd0 is already attached to ubi16 [ 1902.300996][ T9817] ceph: No mds server is up or the cluster is laggy [ 1902.370979][ T957] libceph: connect (1)[c::]:6789 error -101 [ 1902.405914][ T957] libceph: mon0 (1)[c::]:6789 connect error [ 1902.441143][ T9821] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.10259'. [ 1903.571494][ T5734] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1903.675668][T19502] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1903.751169][ T5734] usb 6-1: Using ep0 maxpacket: 16 [ 1903.902795][ T5734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.918017][ T5734] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1903.946229][ T5734] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1903.974949][T19502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.977069][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.998511][T19502] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1904.008735][ T5734] usb 6-1: config 0 descriptor?? [ 1904.027373][ T5734] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1904.032370][T19502] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1904.058252][T19502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1904.081046][T19502] usb 4-1: SerialNumber: syz [ 1904.432861][ T9887] ceph: No mds server is up or the cluster is laggy [ 1904.617821][T19502] usb 4-1: 0:2 : does not exist [ 1904.638902][T19502] usb 4-1: USB disconnect, device number 118 [ 1904.659775][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1905.460158][ T9905] tipc: Enabling of bearer rejected, failed to enable media [ 1906.110810][ T5707] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1906.240934][ T5707] usb 2-1: device descriptor read/64, error -71 [ 1906.335015][ T957] usb 6-1: USB disconnect, device number 7 [ 1906.480808][ T5707] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1906.611270][ T5707] usb 2-1: device descriptor read/64, error -71 [ 1906.620830][ T5700] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1906.721724][ T5707] usb usb2-port1: attempt power cycle [ 1906.770837][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 1906.793403][ T5700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1906.810939][ T5700] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1906.827451][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.837988][ T5700] usb 1-1: config 0 descriptor?? [ 1907.061030][ T5707] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1907.084285][T19502] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1907.102193][ T5707] usb 2-1: device descriptor read/8, error -71 [ 1907.271050][T19502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.290686][T19502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1907.294063][ T5700] hid_parser_main: 4 callbacks suppressed [ 1907.294082][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x3 [ 1907.321494][T19502] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1907.330648][T19502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.351888][ T5707] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1907.352423][T19502] usb 4-1: config 0 descriptor?? [ 1907.361830][ T5700] kone 0003:1E7D:2CED.0027: reserved main item tag 0xd [ 1907.395247][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 1907.409970][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x1 [ 1907.416896][ T5707] usb 2-1: device descriptor read/8, error -71 [ 1907.424040][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 1907.430964][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x0 [ 1907.438048][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x3 [ 1907.445794][ T5700] kone 0003:1E7D:2CED.0027: unknown main item tag 0x6 [ 1907.455246][ T5700] kone 0003:1E7D:2CED.0027: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 1907.493394][ T5700] kone 0003:1E7D:2CED.0027: couldn't init struct kone_device [ 1907.532687][ T5707] usb usb2-port1: unable to enumerate USB device [ 1907.554854][ T9950] tipc: Enabling of bearer rejected, already enabled [ 1907.608804][ T5700] kone 0003:1E7D:2CED.0027: couldn't install mouse [ 1907.725338][ T5700] kone 0003:1E7D:2CED.0027: probe with driver kone failed with error -5 [ 1907.854045][ T5700] usb 1-1: USB disconnect, device number 107 [ 1907.891639][ T9952] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10307'. [ 1907.902577][T19502] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1907.910434][T19502] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1907.918408][T19502] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1907.929328][ T9952] syzkaller1: entered promiscuous mode [ 1907.937349][ T9952] syzkaller1: entered allmulticast mode [ 1907.938755][T19502] hid-thrustmaster 0003:044F:B65D.0028: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1907.974111][T19502] hid-thrustmaster 0003:044F:B65D.0028: Wrong number of endpoints? [ 1908.120498][ C0] hid-thrustmaster 0003:044F:B65D.0028: URB to get model id failed with error -71 [ 1908.121835][ T5700] usb 4-1: USB disconnect, device number 119 [ 1908.712613][ T9980] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10319'. [ 1908.724643][ T9980] syzkaller1: entered promiscuous mode [ 1908.730124][ T9980] syzkaller1: entered allmulticast mode [ 1909.213554][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.227301][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1909.609895][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.617168][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.626192][ T9999] bridge0: entered allmulticast mode [ 1909.710434][T10001] tipc: Started in network mode [ 1909.715455][T10001] tipc: Node identity 7f000001, cluster identity 4711 [ 1909.723559][T10001] tipc: Enabled bearer , priority 10 [ 1910.301266][T10005] bridge_slave_1: left allmulticast mode [ 1910.315789][T10005] bridge_slave_1: left promiscuous mode [ 1910.323278][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.331004][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10328'. [ 1910.341310][T10005] bridge_slave_0: left allmulticast mode [ 1910.347026][T10005] bridge_slave_0: left promiscuous mode [ 1910.356320][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.401773][T10007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1910.419026][T10007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1910.709893][T10014] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10332'. [ 1910.720816][ T5700] tipc: Node number set to 2130706433 [ 1911.238600][T10033] kvm: apic: phys broadcast and lowest prio [ 1912.330876][T19512] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1912.492459][T19512] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1912.501267][T19512] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1912.512444][T19512] usb 2-1: config 0 has no interface number 0 [ 1912.523789][T19512] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1912.533678][T19512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.555034][T19512] usb 2-1: Product: syz [ 1912.569017][T19512] usb 2-1: Manufacturer: syz [ 1912.621962][T19512] usb 2-1: SerialNumber: syz [ 1912.639410][T19512] usb 2-1: config 0 descriptor?? [ 1912.670815][T19498] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1912.804251][T10092] tipc: Enabled bearer , priority 10 [ 1913.137843][T19512] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1913.145139][T19512] uvcvideo 2-1:0.64: No valid video chain found. [ 1913.156753][T19512] usb 2-1: USB disconnect, device number 76 [ 1913.217825][T19498] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 1913.227278][T19498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.235387][T19498] usb 3-1: Product: syz [ 1913.239663][T19498] usb 3-1: Manufacturer: syz [ 1913.245707][T19498] usb 3-1: SerialNumber: syz [ 1913.254067][T19498] usb 3-1: config 0 descriptor?? [ 1913.492252][T19512] usb 3-1: USB disconnect, device number 99 [ 1913.866380][T10116] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.10365'. [ 1914.466724][T10129] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10374'. [ 1914.482168][T10129] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10374'. [ 1914.545846][T10129] netlink: 'syz.1.10374': attribute type 3 has an invalid length. [ 1914.563278][T10129] netlink: 11 bytes leftover after parsing attributes in process `syz.1.10374'. [ 1915.056835][T19512] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1915.174886][T10167] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10387'. [ 1915.519202][T19512] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 1915.551302][T19512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.668285][T19512] usb 4-1: Product: syz [ 1915.673151][T19512] usb 4-1: Manufacturer: syz [ 1915.677768][T19512] usb 4-1: SerialNumber: syz [ 1915.684300][T19512] usb 4-1: config 0 descriptor?? [ 1915.845473][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10389'. [ 1915.931155][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10393'. [ 1916.216549][T19512] usb 4-1: USB disconnect, device number 120 [ 1917.152761][T10201] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1917.152761][T10201] program syz.2.10398 not setting count and/or reply_len properly [ 1917.504915][T10233] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10406'. [ 1917.555836][T10234] netlink: 'syz.0.10410': attribute type 1 has an invalid length. [ 1917.563931][T10234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1917.571164][T10234] IPv6: NLM_F_CREATE should be set when creating new route [ 1917.578354][T10234] IPv6: NLM_F_CREATE should be set when creating new route [ 1918.341914][ T30] audit: type=1400 audit(1918.330:1255): avc: denied { map } for pid=10244 comm="syz.5.10417" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1919.363713][T19498] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1919.720017][T19498] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.447420][T10279] overlay: Unknown parameter '/' [ 1920.697388][T19498] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 1920.732001][T19498] usb 6-1: New USB device strings: Mfr=18, Product=0, SerialNumber=0 [ 1920.745904][T19498] usb 6-1: Manufacturer: syz [ 1920.753169][T19498] usb 6-1: config 0 descriptor?? [ 1920.866387][T10285] netlink: 'syz.0.10427': attribute type 1 has an invalid length. [ 1920.874853][T10285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1922.539210][ T5700] usb 6-1: USB disconnect, device number 8 [ 1923.211423][T10325] overlay: Unknown parameter '/' [ 1923.452570][ T30] audit: type=1400 audit(1923.440:1256): avc: denied { ioctl } for pid=10340 comm="syz.0.10449" path="socket:[180408]" dev="sockfs" ino=180408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1924.062734][ T30] audit: type=1400 audit(1924.050:1257): avc: denied { read } for pid=10357 comm="syz.2.10456" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1924.109695][ T30] audit: type=1400 audit(1924.050:1258): avc: denied { open } for pid=10357 comm="syz.2.10456" path="net:[4026532800]" dev="nsfs" ino=4026532800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1924.302347][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.309740][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.467437][T10364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1924.522463][ T30] audit: type=1326 audit(1924.500:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1924.566881][ T30] audit: type=1326 audit(1924.500:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1924.610975][ T30] audit: type=1326 audit(1924.550:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1924.659214][ T30] audit: type=1326 audit(1924.550:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1924.712917][ T30] audit: type=1326 audit(1924.550:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1924.907123][ T30] audit: type=1326 audit(1924.550:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1924.934873][ T30] audit: type=1326 audit(1924.550:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10373 comm="syz.1.10462" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce59ce59 code=0x7ffc0000 [ 1925.002258][T10385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1925.018061][T19856] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.055298][T19856] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.092187][T19856] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.129158][T19856] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1925.253054][T10394] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1925.253054][T10394] program syz.3.10470 not setting count and/or reply_len properly [ 1925.657035][T10417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1925.682369][T19512] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1925.793111][T19502] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1925.884211][T19512] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1925.919097][T19512] usb 6-1: not running at top speed; connect to a high speed hub [ 1925.953868][T19512] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1926.051770][T19512] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1926.061759][T19502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.076302][T19512] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.086845][T19502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.096825][T19512] usb 6-1: config 14 has no interface number 0 [ 1926.103055][T19502] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1926.116087][T19512] usb 6-1: config 14 has no interface number 1 [ 1926.122272][T19512] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1926.134750][T10428] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1926.143523][T19502] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1926.152752][T19512] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1926.166094][T19502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.174241][T19512] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1926.187609][T19512] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1926.200951][T19502] usb 2-1: config 0 descriptor?? [ 1926.206034][T19512] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1926.213665][T19512] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1926.224031][T19512] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1926.233435][T19512] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.259225][T19512] usb 6-1: Product: syz [ 1926.275324][T19512] usb 6-1: Manufacturer: syz [ 1926.280173][T19512] usb 6-1: SerialNumber: syz [ 1926.430062][T10448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1926.618812][T10455] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1926.618812][T10455] program syz.3.10494 not setting count and/or reply_len properly [ 1926.657409][T19502] usbhid 2-1:0.0: can't add hid device: -71 [ 1926.664771][T19502] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1926.724826][T19502] usb 2-1: USB disconnect, device number 77 [ 1926.856325][T19512] legousbtower 6-1:14.57: interrupt endpoints not found [ 1928.057667][T19512] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1928.108772][T19512] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1928.440804][T19512] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1928.724696][T19502] usb 6-1: USB disconnect, device number 9 [ 1928.731957][T19512] usb 2-1: Using ep0 maxpacket: 8 [ 1928.750294][T19502] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1928.761883][T19512] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1928.783176][T19512] usb 2-1: config 0 has no interface number 0 [ 1928.795285][T19512] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1928.814329][T19512] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1928.840781][T19512] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1928.859296][T19512] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1928.988816][T19512] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1929.000650][T19512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.010129][T19512] usb 2-1: config 0 descriptor?? [ 1929.019562][T19512] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1930.787425][ T957] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1930.889332][T10525] netlink: 'syz.2.10520': attribute type 1 has an invalid length. [ 1930.897404][T10525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1931.180959][ T957] usb 6-1: Using ep0 maxpacket: 32 [ 1931.228652][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 1931.243656][ T5707] usb 2-1: USB disconnect, device number 78 [ 1931.267463][ T5707] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1931.397449][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10528'. [ 1931.399439][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.419147][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.440716][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.453256][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.595370][T10580] tipc: Cannot configure node identity twice [ 1932.956653][ T957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1932.970147][ T957] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1932.983684][ T957] usb 6-1: can't read configurations, error -71 [ 1933.005915][T10588] fuse: Bad value for 'fd' [ 1933.132600][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10555'. [ 1933.979892][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.471565][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1934.471592][ T30] audit: type=1400 audit(1934.450:1269): avc: denied { setcurrent } for pid=10643 comm="syz.1.10569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1934.833755][ T31] INFO: task syz.4.9532:7587 blocked for more than 143 seconds. [ 1934.853776][ T30] audit: type=1401 audit(1934.490:1270): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1934.885281][ T31] Tainted: G L syzkaller #0 [ 1934.917670][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1934.960660][ T31] task:syz.4.9532 state:D stack:26712 pid:7587 tgid:7587 ppid:3975 task_flags:0x400040 flags:0x00080003 [ 1934.998969][ T31] Call Trace: [ 1935.007301][ T31] [ 1935.012078][ T31] __schedule+0x125c/0x6730 [ 1935.019683][ T31] ? __pfx___schedule+0x10/0x10 [ 1935.028444][ T31] ? rcu_is_watching+0x12/0xc0 [ 1935.036917][ T31] ? schedule+0x2bf/0x390 [ 1935.045060][ T31] ? lock_release+0x24d/0x310 [ 1935.056552][ T31] schedule+0xdd/0x390 [ 1935.063096][ T31] request_wait_answer+0x55e/0x870 [ 1935.068267][ T31] ? __pfx_request_wait_answer+0x10/0x10 [ 1935.074238][ T31] ? rcu_is_watching+0x12/0xc0 [ 1935.079060][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1935.085429][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1935.090682][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1935.096874][ T31] ? fuse_dev_queue_req+0x233/0x320 [ 1935.102253][ T31] __fuse_simple_request+0x45b/0xf00 [ 1935.108212][ T31] fuse_flush+0x4e4/0x6b0 [ 1935.112835][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 1935.117742][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1935.123056][ T31] ? __range_close+0x12c/0x7a0 [ 1935.127879][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 1935.132976][ T31] filp_flush+0xe7/0x190 [ 1935.137355][ T31] filp_close+0x1c/0x30 [ 1935.141768][ T31] __range_close+0x137/0x7a0 [ 1935.146399][ T31] __x64_sys_close_range+0x3ce/0x5d0 [ 1935.152003][ T31] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1935.157868][ T31] ? rcu_is_watching+0x12/0xc0 [ 1935.164352][ T31] do_syscall_64+0x115/0x870 [ 1935.169001][ T31] ? clear_bhb_loop+0x40/0x90 [ 1935.175127][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.181193][ T31] RIP: 0033:0x7ff4bc39ce59 [ 1935.185726][ T31] RSP: 002b:00007ffeaed9f9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1935.194663][ T31] RAX: ffffffffffffffda RBX: 00007ff4bc617da0 RCX: 00007ff4bc39ce59 [ 1935.204510][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1935.213196][ T31] RBP: 00007ff4bc617da0 R08: 0000000000000006 R09: 0000000000000000 [ 1935.221396][ T31] R10: 00007ff4bc617cb0 R11: 0000000000000246 R12: 00000000001b47fb [ 1935.229411][ T31] R13: 00007ff4bc615fac R14: 00000000001b45f1 R15: 00007ffeaed9fb00 [ 1935.237506][ T31] [ 1935.240600][ T31] INFO: lockdep is turned off. [ 1935.245445][ T31] NMI backtrace for cpu 0 [ 1935.245466][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1935.245494][ T31] Tainted: [L]=SOFTLOCKUP [ 1935.245502][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1935.245515][ T31] Call Trace: [ 1935.245522][ T31] [ 1935.245529][ T31] dump_stack_lvl+0x100/0x190 [ 1935.245554][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1935.245578][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1935.245601][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1935.245625][ T31] sys_info+0x141/0x190 [ 1935.245652][ T31] watchdog+0xcb1/0x1030 [ 1935.245673][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1935.245696][ T31] ? __pfx_watchdog+0x10/0x10 [ 1935.245715][ T31] ? __kthread_parkme+0x18c/0x230 [ 1935.245740][ T31] ? kthread+0x13a/0x450 [ 1935.245765][ T31] ? __pfx_watchdog+0x10/0x10 [ 1935.245782][ T31] kthread+0x370/0x450 [ 1935.245807][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.245834][ T31] ret_from_fork+0x72b/0xd50 [ 1935.245858][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1935.245881][ T31] ? __switch_to+0x800/0x10f0 [ 1935.245909][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.245936][ T31] ret_from_fork_asm+0x1a/0x30 [ 1935.245969][ T31] [ 1935.245978][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1935.378513][ C1] NMI backtrace for cpu 1 [ 1935.378530][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1935.378556][ C1] Tainted: [L]=SOFTLOCKUP [ 1935.378563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1935.378575][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1935.378603][ C1] Code: 46 8b 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a6 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1935.378621][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 1935.378642][ C1] RAX: 000000000da6796c RBX: ffff88801e682540 RCX: ffffffff8b92f2b5 [ 1935.378655][ C1] RDX: 0000000000000001 RSI: ffffffff8c1cea80 RDI: ffffffff81de28e7 [ 1935.378667][ C1] RBP: ffffed1003cd04a8 R08: 0000000000000000 R09: ffffed10170a678d [ 1935.378679][ C1] R10: ffff8880b8533c6b R11: ffffffff81d4ff8c R12: 0000000000000000 [ 1935.378691][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1935.378704][ C1] FS: 0000000000000000(0000) GS:ffff88812443c000(0000) knlGS:0000000000000000 [ 1935.378722][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1935.378734][ C1] CR2: 00007f2381dea2f8 CR3: 0000000029d1a000 CR4: 00000000003526f0 [ 1935.378746][ C1] Call Trace: [ 1935.378752][ C1] [ 1935.378759][ C1] default_idle+0x9/0x10 [ 1935.378785][ C1] default_idle_call+0x6c/0xb0 [ 1935.378810][ C1] do_idle+0x3a7/0x5b0 [ 1935.378833][ C1] ? __pfx_do_idle+0x10/0x10 [ 1935.378853][ C1] ? finish_task_switch.isra.0+0x14c/0x1010 [ 1935.378878][ C1] cpu_startup_entry+0x4f/0x60 [ 1935.378899][ C1] start_secondary+0x21d/0x2d0 [ 1935.378919][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1935.378940][ C1] common_startup_64+0x13e/0x158 [ 1935.378971][ C1] [ 1935.556215][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1935.563051][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1935.573698][ T31] Tainted: [L]=SOFTLOCKUP [ 1935.577993][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1935.588021][ T31] Call Trace: [ 1935.591275][ T31] [ 1935.594181][ T31] dump_stack_lvl+0x100/0x190 [ 1935.598836][ T31] vpanic+0x552/0x970 [ 1935.602795][ T31] ? __pfx_vpanic+0x10/0x10 [ 1935.607277][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1935.613420][ T31] panic+0xd1/0xe0 [ 1935.617118][ T31] ? __pfx_panic+0x10/0x10 [ 1935.621523][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1935.627652][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1935.633777][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1935.639905][ T31] ? watchdog.cold+0x1ec/0x234 [ 1935.644642][ T31] ? watchdog+0xcc1/0x1030 [ 1935.649036][ T31] watchdog.cold+0x1fd/0x234 [ 1935.653612][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1935.659656][ T31] ? __pfx_watchdog+0x10/0x10 [ 1935.664307][ T31] ? __kthread_parkme+0x18c/0x230 [ 1935.669320][ T31] ? kthread+0x13a/0x450 [ 1935.673548][ T31] ? __pfx_watchdog+0x10/0x10 [ 1935.678208][ T31] kthread+0x370/0x450 [ 1935.682263][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.686839][ T31] ret_from_fork+0x72b/0xd50 [ 1935.691413][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1935.696509][ T31] ? __switch_to+0x800/0x10f0 [ 1935.701173][ T31] ? __pfx_kthread+0x10/0x10 [ 1935.705751][ T31] ret_from_fork_asm+0x1a/0x30 [ 1935.710505][ T31] [ 1935.713710][ T31] Kernel Offset: disabled [ 1935.718012][ T31] Rebooting in 86400 seconds..