last executing test programs: 7.158649505s ago: executing program 1 (id=1840): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x0, 0x1a, 0xda, 0xa8, 0x8}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000480)={0x463b, 0x8200, 0xc639, 0x1}, &(0x7f00000004c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000007ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4100002000800a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xc}]}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) 6.098863493s ago: executing program 2 (id=1846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x34}}, 0x800) listen(r0, 0xffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 5.1536719s ago: executing program 2 (id=1849): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_b, 0xf, "bc3ba9bf2cdf0bdac11f9b3e28da18"}, {}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast, 0x72, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4133f4ae7014eae7a1e122877124d2c62295510b061d1e22667964bea9bbd6f1e4a4e2e20a862ce1c891ea2ef821b8206f89fdebcf810cd5af6c5a3"}, {@broadcast, @broadcast, 0x6e, "7c2eb8ce5a02117523848997917cc983743b900096de67b9f0dd65d2f283ad2ef1f031c9652996e9e81cdb8c1eb03a4a54db5c124cbd76481e391bcc40127b552a88025a991522b7e26c765a2ebad7c7ea6787160a89e74ea31a689b837eb0b4ada01004352ab14f601a66a41506"}, {@device_a, @device_a, 0x96, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a505134963b1a1a3d7e159c6324dbc0a41cef66ea42ba7effa83dfc38c039d600930fae7fd11f9feb5d33062232f4c8601ef1ce2492052edfa573883675d55adc12f70979ccf63bbcce229a5939bd12dc4ce0ec913f91bc07bf538293bf0607140e6765f0069d859dd9784165"}]}, 0x258) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.020817346s ago: executing program 3 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_b, 0x37, "bc3ba9bf2cdf0bdac11f9b3e28da1882950401ed0e893ab462363595234455eae7a05c2af5b9639ce07f7972dd5e1736bb18b4682fe2ab"}, {}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast, 0x37, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4"}, {@broadcast, @broadcast, 0x6b, "7c2eb8ce5a02117523848997917cc983743b900096de67b9f0dd65d2f283ad2ef1f031c9652996e9e81cdb8c1eb03a4a54db5c124cbd76481e391bcc40127b552a88025a991522b7e26c765a2ebad7c7ea6787160a89e74ea31a689b837eb0b4ada01004352ab14f601a66"}, {@device_a, @device_a, 0x2e, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a50513496"}]}, 0x1e0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.635945523s ago: executing program 0 (id=1859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a3000000000"], 0xd8}}, 0x20000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8890) 4.598590707s ago: executing program 1 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.534386201s ago: executing program 2 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 4.502350055s ago: executing program 0 (id=1862): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_usb_connect$uac3(0x4, 0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000300000010820582054000010203010902880003010f2004080b0101012330000904000000010130000a2401061e0002000000142402020204020745ba0000060006000d000400090401000001023000090401010101023000090501090004cd42030a252501000000030300090402000001023000090402010101023000062402010101090582090800072b010a25254000000003"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.411381305s ago: executing program 3 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 4.408041604s ago: executing program 1 (id=1865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 3.606693303s ago: executing program 0 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 3.484044392s ago: executing program 0 (id=1868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x38, r1, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x38}}, 0x4080) 3.421247591s ago: executing program 4 (id=1869): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0xff4c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.360060874s ago: executing program 4 (id=1870): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2.892449361s ago: executing program 4 (id=1871): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x0, 0x1a, 0xda, 0xa8, 0x8}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000480)={0x463b, 0x8200, 0xc639, 0x1}, &(0x7f00000004c0)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000007ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4100002000800a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xc}]}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) 2.000994125s ago: executing program 1 (id=1872): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_b, 0xf, "bc3ba9bf2cdf0bdac11f9b3e28da18"}, {}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast, 0x72, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4133f4ae7014eae7a1e122877124d2c62295510b061d1e22667964bea9bbd6f1e4a4e2e20a862ce1c891ea2ef821b8206f89fdebcf810cd5af6c5a3"}, {@broadcast, @broadcast, 0x6e, "7c2eb8ce5a02117523848997917cc983743b900096de67b9f0dd65d2f283ad2ef1f031c9652996e9e81cdb8c1eb03a4a54db5c124cbd76481e391bcc40127b552a88025a991522b7e26c765a2ebad7c7ea6787160a89e74ea31a689b837eb0b4ada01004352ab14f601a66a41506"}, {@device_a, @device_a, 0x96, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a505134963b1a1a3d7e159c6324dbc0a41cef66ea42ba7effa83dfc38c039d600930fae7fd11f9feb5d33062232f4c8601ef1ce2492052edfa573883675d55adc12f70979ccf63bbcce229a5939bd12dc4ce0ec913f91bc07bf538293bf0607140e6765f0069d859dd9784165"}]}, 0x258) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.999842275s ago: executing program 0 (id=1873): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.981205567s ago: executing program 2 (id=1874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_b, 0x37, "bc3ba9bf2cdf0bdac11f9b3e28da1882950401ed0e893ab462363595234455eae7a05c2af5b9639ce07f7972dd5e1736bb18b4682fe2ab"}, {}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast, 0x37, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4"}, {@broadcast, @broadcast, 0x6b, "7c2eb8ce5a02117523848997917cc983743b900096de67b9f0dd65d2f283ad2ef1f031c9652996e9e81cdb8c1eb03a4a54db5c124cbd76481e391bcc40127b552a88025a991522b7e26c765a2ebad7c7ea6787160a89e74ea31a689b837eb0b4ada01004352ab14f601a66"}, {@device_a, @device_a, 0x31, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a505134963b1a1a"}]}, 0x1e4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.923144704s ago: executing program 3 (id=1875): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000066c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x4000000, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x80}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x99) write$FUSE_INIT(r0, &(0x7f0000000800)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66925}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 1.681294546s ago: executing program 3 (id=1876): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_usb_connect$uac3(0x4, 0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000300000010820582054000010203010902880003010f2004080b0101012330000904000000010130000a2401061e0002000000142402020204020745ba0000060006000d000400090401000001023000090401010101023000090501090004cd42030a252501000000030300090402000001023000090402010101023000062402010101090582090800072b010a25254000000003"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.58617918s ago: executing program 0 (id=1877): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0xb8b, 0x1, "5e8f880400d8e08878d20646ba7220a400"}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0xb8b, 0x1, "5e8f880400d8e08878d20646ba7220a400"}) 1.412845879s ago: executing program 2 (id=1878): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af1510000000000", 0x12}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r7, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="1000000053040008"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 1.404346123s ago: executing program 4 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 1.153925337s ago: executing program 4 (id=1880): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.070716051s ago: executing program 1 (id=1881): syz_open_dev$video4linux(0x0, 0xff, 0x2001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) syz_clone3(0x0, 0x0) io_setup(0x8, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000100)=[{0x0}], 0x1, 0x36, 0xf5) 837.297ms ago: executing program 3 (id=1882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 185.3876ms ago: executing program 3 (id=1883): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c82010000c00010004ff08000200060003"], 0x15) 179.361454ms ago: executing program 2 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000700)=ANY=[@ANYBLOB="50000000080211000001"], 0x50) 127.963707ms ago: executing program 4 (id=1885): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x11, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x10) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'fo\x00', 0x11, 0x6, 0x3d}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 1 (id=1886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 52425][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 206.147710][ T7148] /dev/nullb0: Can't open blockdev [ 207.982197][ T5616] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 208.471692][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 209.217742][ T5616] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 209.236494][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.246379][ T5616] usb 1-1: Product: syz [ 209.260739][ T5616] usb 1-1: Manufacturer: syz [ 209.268939][ T5616] usb 1-1: SerialNumber: syz [ 209.303667][ T5616] usb 1-1: config 0 descriptor?? [ 209.312284][ T30] audit: type=1400 audit(1782744763.514:335): avc: denied { bind } for pid=7167 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.333633][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 209.363922][ T5616] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 209.402196][ T30] audit: type=1400 audit(1782744763.524:336): avc: denied { setopt } for pid=7167 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.423467][ T30] audit: type=1400 audit(1782744763.524:337): avc: denied { write } for pid=7167 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.547272][ T992] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.901194][ T7175] /dev/nullb0: Can't open blockdev [ 210.145266][ T30] audit: type=1400 audit(1782744764.154:338): avc: denied { mounton } for pid=7169 comm="syz.3.457" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 210.503928][ T992] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 210.512737][ T992] usb 3-1: can't read configurations, error -71 [ 211.531803][ T5616] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 212.205876][ T805] usb 1-1: USB disconnect, device number 14 [ 212.937689][ T5793] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.662176][ T5793] usb 2-1: Using ep0 maxpacket: 32 [ 214.093642][ T5793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.237588][ T30] audit: type=1400 audit(1782744768.444:339): avc: denied { map } for pid=7200 comm="syz.4.466" path="socket:[15477]" dev="sockfs" ino=15477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 214.287711][ T5793] usb 2-1: config 0 has no interfaces? [ 214.831363][ T5793] usb 2-1: string descriptor 0 read error: -71 [ 214.838278][ T5793] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 214.860468][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 214.918643][ T5793] usb 2-1: config 0 descriptor?? [ 214.942838][ T7212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.951401][ T7212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.979442][ T5793] usb 2-1: can't set config #0, error -71 [ 215.000100][ T5793] usb 2-1: USB disconnect, device number 11 [ 215.091253][ T7212] hsr0: entered promiscuous mode [ 215.143254][ T7216] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 215.166327][ T7216] netlink: 228 bytes leftover after parsing attributes in process `syz.1.469'. [ 215.213184][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 215.288255][ T4926] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 215.517194][ T4926] Bluetooth: hci4: ACL packet for unknown connection handle 1992 [ 215.521804][ T5793] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 215.751858][ T5793] usb 2-1: Using ep0 maxpacket: 32 [ 215.772424][ T7227] netlink: 'syz.4.472': attribute type 9 has an invalid length. [ 217.866039][ T7242] /dev/nullb0: Can't open blockdev [ 217.891769][ T5741] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 218.051726][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 218.069356][ T5741] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 218.426380][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.434812][ T5741] usb 3-1: Product: syz [ 218.439033][ T5741] usb 3-1: Manufacturer: syz [ 218.444544][ T5741] usb 3-1: SerialNumber: syz [ 218.476565][ T5741] usb 3-1: config 0 descriptor?? [ 218.497428][ T5741] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 218.691074][ T5793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.012088][ T5741] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 219.145677][ T5616] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.405701][ T5793] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 219.984662][ T5616] usb 5-1: Using ep0 maxpacket: 32 [ 220.048722][ T5793] usb 2-1: can't read configurations, error -71 [ 220.579024][ T5616] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.592317][ T5616] usb 5-1: config 0 has no interfaces? [ 220.686671][ T5616] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 220.703707][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 220.713306][ T5616] usb 5-1: Product: syz [ 220.718088][ T5616] usb 5-1: Manufacturer: syz [ 220.723767][ T5616] usb 5-1: SerialNumber: syz [ 220.736277][ T5616] usb 5-1: config 0 descriptor?? [ 221.151514][ T24] usb 5-1: USB disconnect, device number 8 [ 221.469656][ T5616] usb 3-1: USB disconnect, device number 12 [ 223.444240][ T7284] netlink: 64 bytes leftover after parsing attributes in process `syz.0.487'. [ 223.453779][ T30] audit: type=1400 audit(1782744777.644:340): avc: denied { write } for pid=7281 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.536566][ T30] audit: type=1400 audit(1782744777.654:341): avc: denied { nlmsg_write } for pid=7281 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.575930][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'. [ 223.620519][ T30] audit: type=1400 audit(1782744777.704:342): avc: denied { setopt } for pid=7281 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.669811][ T30] audit: type=1400 audit(1782744777.734:343): avc: denied { ioctl } for pid=7281 comm="syz.0.487" path="socket:[15151]" dev="sockfs" ino=15151 ioctlcmd=0x5540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.937331][ T30] audit: type=1400 audit(1782744777.854:344): avc: denied { connect } for pid=7281 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.529690][ T7320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.553185][ T5616] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 227.651657][ T805] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 227.811782][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 227.825578][ T805] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 227.834538][ T805] usb 1-1: config 0 has no interface number 0 [ 227.840828][ T805] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.855467][ T805] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.870577][ T805] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 227.906334][ T805] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 227.919005][ T805] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.938900][ T805] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 227.949224][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.957897][ T805] usb 1-1: Product: syz [ 227.970989][ T805] usb 1-1: Manufacturer: syz [ 227.978187][ T805] usb 1-1: SerialNumber: syz [ 228.021543][ T805] usb 1-1: config 0 descriptor?? [ 228.097291][ T805] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 228.391978][ T5616] usb 3-1: Using ep0 maxpacket: 32 [ 228.455542][ T5616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.469200][ T5616] usb 3-1: config 0 has no interfaces? [ 228.510654][ T30] audit: type=1400 audit(1782744782.714:345): avc: denied { setopt } for pid=7327 comm="syz.3.503" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.937408][ T5616] usb 3-1: string descriptor 0 read error: -71 [ 228.995601][ T5616] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.015862][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.043749][ T5616] usb 3-1: config 0 descriptor?? [ 229.061016][ T5616] usb 3-1: can't set config #0, error -71 [ 229.089223][ T5616] usb 3-1: USB disconnect, device number 13 [ 230.936222][ T5793] usb 1-1: USB disconnect, device number 15 [ 231.541177][ T7357] netlink: 64 bytes leftover after parsing attributes in process `syz.4.511'. [ 231.862437][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.511'. [ 231.938455][ T4926] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 232.173854][ T30] audit: type=1400 audit(1782744786.384:346): avc: denied { ioctl } for pid=7356 comm="syz.4.511" path="socket:[15854]" dev="sockfs" ino=15854 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.732869][ T4926] Bluetooth: hci1: ACL packet for unknown connection handle 1992 [ 233.394846][ T30] audit: type=1400 audit(1782744787.604:347): avc: denied { listen } for pid=7380 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.469573][ T30] audit: type=1400 audit(1782744787.624:348): avc: denied { create } for pid=7380 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.524677][ T30] audit: type=1326 audit(1782744787.734:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 233.527477][ T7383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.519'. [ 233.562070][ T30] audit: type=1326 audit(1782744787.774:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 233.680386][ T7384] process 'syz.1.517' launched './file2' with NULL argv: empty string added [ 233.712939][ T30] audit: type=1326 audit(1782744787.774:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 233.966563][ T30] audit: type=1326 audit(1782744787.774:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 234.149029][ T7390] siw: device registration error -23 [ 234.311360][ T5793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.344292][ T30] audit: type=1326 audit(1782744787.774:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 234.427302][ T30] audit: type=1326 audit(1782744787.774:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 234.491419][ T30] audit: type=1326 audit(1782744787.774:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 234.533507][ T5793] usb 3-1: Using ep0 maxpacket: 32 [ 234.546148][ T30] audit: type=1326 audit(1782744787.774:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 234.580599][ T5793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.598212][ T5793] usb 3-1: config 0 has no interfaces? [ 234.606748][ T30] audit: type=1326 audit(1782744787.774:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 234.749224][ T5793] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.773216][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.783401][ T5793] usb 3-1: Product: syz [ 234.788053][ T5793] usb 3-1: Manufacturer: syz [ 234.793526][ T5793] usb 3-1: SerialNumber: syz [ 235.570112][ T4926] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 235.581534][ T4926] CPU: 0 UID: 0 PID: 4926 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 235.581554][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.581566][ T4926] Workqueue: hci0 hci_rx_work [ 235.581607][ T4926] Call Trace: [ 235.581615][ T4926] [ 235.581624][ T4926] dump_stack_lvl+0x100/0x190 [ 235.581651][ T4926] sysfs_warn_dup.cold+0x1c/0x28 [ 235.581671][ T4926] sysfs_create_dir_ns+0x24b/0x2b0 [ 235.581690][ T4926] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 235.581708][ T4926] ? find_held_lock+0x2b/0x80 [ 235.581719][ T4926] ? kobject_add_internal+0x25f/0x930 [ 235.581733][ T4926] ? kobject_add_internal+0x25f/0x930 [ 235.581748][ T4926] ? do_raw_spin_unlock+0x145/0x1e0 [ 235.581765][ T4926] kobject_add_internal+0x2c8/0x930 [ 235.581782][ T4926] kobject_add+0x16a/0x1e0 [ 235.581796][ T4926] ? __pfx_kobject_add+0x10/0x10 [ 235.581809][ T4926] ? class_to_subsys+0x10f/0x150 [ 235.581829][ T4926] ? kobject_put+0xb9/0x640 [ 235.581842][ T4926] ? _raw_spin_unlock+0x28/0x50 [ 235.581861][ T4926] device_add+0x294/0x1970 [ 235.581877][ T4926] ? __pfx_dev_set_name+0x10/0x10 [ 235.581894][ T4926] ? __pfx_device_add+0x10/0x10 [ 235.581910][ T4926] ? mgmt_send_event_skb+0x2fb/0x460 [ 235.581932][ T4926] hci_conn_add_sysfs+0x1a3/0x260 [ 235.581945][ T4926] le_conn_complete_evt+0x11eb/0x1f60 [ 235.581966][ T4926] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 235.581983][ T4926] ? irqentry_exit+0x24d/0xa00 [ 235.581999][ T4926] ? lockdep_hardirqs_on+0x78/0x100 [ 235.582018][ T4926] hci_le_conn_complete_evt+0x23c/0x3a0 [ 235.582036][ T4926] ? skb_pull_data+0x15f/0x1e0 [ 235.582053][ T4926] hci_le_meta_evt+0x34a/0x5f0 [ 235.582071][ T4926] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 235.582090][ T4926] hci_event_packet+0x51c/0xcd0 [ 235.582107][ T4926] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 235.582125][ T4926] ? __pfx_hci_event_packet+0x10/0x10 [ 235.582145][ T4926] ? kcov_remote_start+0x394/0x670 [ 235.582162][ T4926] hci_rx_work+0x451/0xfc0 [ 235.582182][ T4926] process_one_work+0xa23/0x1940 [ 235.582202][ T4926] ? __pfx_process_one_work+0x10/0x10 [ 235.582220][ T4926] ? __pfx_hci_rx_work+0x10/0x10 [ 235.582238][ T4926] worker_thread+0x5ef/0xe50 [ 235.582255][ T4926] ? __pfx_worker_thread+0x10/0x10 [ 235.582268][ T4926] ? kthread+0x13a/0x450 [ 235.582279][ T4926] ? __pfx_worker_thread+0x10/0x10 [ 235.582291][ T4926] kthread+0x370/0x450 [ 235.582302][ T4926] ? __pfx_kthread+0x10/0x10 [ 235.582314][ T4926] ret_from_fork+0x72b/0xd50 [ 235.582332][ T4926] ? __pfx_ret_from_fork+0x10/0x10 [ 235.582358][ T4926] ? __switch_to+0x800/0x10f0 [ 235.582372][ T4926] ? __pfx_kthread+0x10/0x10 [ 235.582385][ T4926] ret_from_fork_asm+0x1a/0x30 [ 235.582406][ T4926] [ 235.861329][ T4926] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.875353][ T4926] Bluetooth: hci0: failed to register connection device [ 235.886147][ T30] audit: type=1326 audit(1782744787.774:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09abd9ce59 code=0x7ffc0000 [ 235.956181][ T5793] usb 3-1: config 0 descriptor?? [ 236.080450][ T5793] usb 3-1: can't set config #0, error -71 [ 236.088211][ T5793] usb 3-1: USB disconnect, device number 14 [ 236.304993][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.475467][ T7420] siw: device registration error -23 [ 236.489612][ T7420] netlink: 'syz.2.527': attribute type 5 has an invalid length. [ 237.921727][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 238.137537][ T10] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 238.172964][ T10] usb 1-1: config 0 has no interface number 0 [ 238.195587][ T10] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 238.897358][ T10] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.930029][ T10] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 239.009743][ T10] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 239.039598][ T7434] netlink: 64 bytes leftover after parsing attributes in process `syz.4.530'. [ 239.058511][ T10] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.230119][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.530'. [ 239.278285][ T10] usb 1-1: string descriptor 0 read error: -71 [ 239.411834][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 239.499028][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.516290][ T10] usb 1-1: config 0 descriptor?? [ 239.518609][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 239.518628][ T30] audit: type=1400 audit(1782744793.724:387): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.560071][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 239.604160][ T30] audit: type=1400 audit(1782744793.734:388): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.632420][ T30] audit: type=1400 audit(1782744793.734:389): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.655598][ T30] audit: type=1400 audit(1782744793.734:390): avc: denied { read } for pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.671639][ T10] usb 1-1: can't set config #0, error -71 [ 239.708639][ T10] usb 1-1: USB disconnect, device number 16 [ 239.727366][ T30] audit: type=1400 audit(1782744793.734:391): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.811640][ T30] audit: type=1400 audit(1782744793.734:392): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3680 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 239.918333][ T30] audit: type=1400 audit(1782744794.004:393): avc: denied { read } for pid=7452 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.987511][ T30] audit: type=1400 audit(1782744794.004:394): avc: denied { read open } for pid=7452 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.010833][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 240.063284][ T30] audit: type=1400 audit(1782744794.004:395): avc: denied { getattr } for pid=7452 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.522539][ T7471] siw: device registration error -23 [ 240.531177][ T7471] netlink: 'syz.2.539': attribute type 5 has an invalid length. [ 241.945776][ T30] audit: type=1400 audit(1782744796.154:396): avc: denied { write } for pid=7451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.041764][ T4926] Bluetooth: hci0: command 0x0406 tx timeout [ 243.033723][ T5624] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 243.371988][ T5727] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 243.458440][ T5624] Bluetooth: hci0: ACL packet for unknown connection handle 1992 [ 243.605431][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 243.643186][ T5727] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 243.684534][ T5727] usb 1-1: config 0 has no interface number 0 [ 243.716783][ T5727] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.735882][ T5727] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.756890][ T5727] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 243.818768][ T7499] syz_tun: entered allmulticast mode [ 243.833176][ T5727] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 243.858620][ T5727] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.161745][ T805] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 244.244496][ T7518] netlink: 'syz.1.552': attribute type 5 has an invalid length. [ 245.127122][ T5727] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 245.148462][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.156890][ T5727] usb 1-1: Product: syz [ 245.161238][ T5727] usb 1-1: Manufacturer: syz [ 245.170950][ T5727] usb 1-1: SerialNumber: syz [ 245.526123][ T5727] usb 1-1: config 0 descriptor?? [ 245.565021][ T5727] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 245.612787][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 245.641508][ T805] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 245.814222][ T805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.821371][ T805] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 245.830891][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.868724][ T805] usb 3-1: config 0 descriptor?? [ 246.710353][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 246.710370][ T30] audit: type=1400 audit(1782744800.914:404): avc: denied { write } for pid=7501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.137573][ T805] usbhid 3-1:0.0: can't add hid device: -71 [ 247.205181][ T805] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.396741][ T805] usb 3-1: USB disconnect, device number 15 [ 248.504636][ T805] usb 1-1: USB disconnect, device number 17 [ 248.972990][ T30] audit: type=1400 audit(1782744803.174:405): avc: denied { write } for pid=7544 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.295933][ T5624] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 249.868663][ T7568] kAFS: unable to lookup cell 'syz1' [ 249.973629][ T7571] 9pnet_virtio: no channels available for device syz [ 250.649066][ T30] audit: type=1400 audit(1782744804.494:406): avc: denied { append } for pid=7572 comm="syz.1.568" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 251.645305][ T30] audit: type=1400 audit(1782744804.614:407): avc: denied { write } for pid=7572 comm="syz.1.568" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 251.668801][ T30] audit: type=1400 audit(1782744805.844:408): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 251.811251][ T7582] netlink: 44 bytes leftover after parsing attributes in process `syz.2.573'. [ 251.993284][ T7587] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 251.999826][ T7587] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 252.007632][ T7587] vhci_hcd vhci_hcd.0: Device attached [ 252.463426][ T805] usb 40-1: SetAddress Request (2) to port 0 [ 252.475242][ T7594] No source specified [ 253.195293][ T805] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 253.231986][ T7588] vhci_hcd: connection closed [ 253.233529][ T263] vhci_hcd vhci_hcd.3: stop threads [ 253.245161][ T263] vhci_hcd vhci_hcd.3: release socket [ 253.261215][ T263] vhci_hcd vhci_hcd.3: disconnect device [ 253.294043][ T805] usb 40-1: enqueue for inactive port 0 [ 253.732220][ T805] usb usb40-port1: attempt power cycle [ 254.208764][ T30] audit: type=1400 audit(1782744808.414:409): avc: denied { ioctl } for pid=7614 comm="syz.1.580" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 254.318516][ T7618] kAFS: unable to lookup cell 'syz1' [ 254.318518][ T30] audit: type=1400 audit(1782744808.454:410): avc: denied { create } for pid=7614 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 254.318579][ T30] audit: type=1400 audit(1782744808.464:411): avc: denied { connect } for pid=7614 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 254.405421][ T805] usb usb40-port1: unable to enumerate USB device [ 254.684284][ T7622] 9pnet_virtio: no channels available for device syz [ 254.899924][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.585'. [ 255.176721][ T7632] /dev/nullb0: Can't open blockdev [ 255.436910][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.445102][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.952929][ T7656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 256.959474][ T7656] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 256.967548][ T7656] vhci_hcd vhci_hcd.0: Device attached [ 257.301825][ T805] usb 34-1: SetAddress Request (2) to port 0 [ 257.331366][ T805] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 259.446475][ T7657] vhci_hcd: connection reset by peer [ 259.509989][ T5882] vhci_hcd vhci_hcd.0: stop threads [ 259.544691][ T5882] vhci_hcd vhci_hcd.0: release socket [ 259.579202][ T5882] vhci_hcd vhci_hcd.0: disconnect device [ 260.699903][ T7673] kAFS: unable to lookup cell 'syz1' [ 260.748549][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 260.790564][ T7680] 9pnet_virtio: no channels available for device syz [ 262.605609][ T805] usb 34-1: device descriptor read/8, error -110 [ 262.812313][ T7702] netlink: 64 bytes leftover after parsing attributes in process `syz.4.608'. [ 262.864068][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 262.938539][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 262.948057][ T5624] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 263.032758][ T805] usb usb34-port1: attempt power cycle [ 263.683460][ T805] usb usb34-port1: unable to enumerate USB device [ 263.768015][ T7726] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 263.829742][ T30] audit: type=1400 audit(1782744818.034:412): avc: denied { map } for pid=7725 comm="syz.2.616" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 263.867513][ T30] audit: type=1400 audit(1782744818.074:413): avc: denied { execute } for pid=7725 comm="syz.2.616" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 264.007466][ T30] audit: type=1400 audit(1782744818.214:414): avc: denied { getopt } for pid=7725 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.304247][ T7749] netlink: 39 bytes leftover after parsing attributes in process `syz.0.625'. [ 265.561802][ T805] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 265.731694][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 265.748313][ T805] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 265.765172][ T805] usb 2-1: config 0 has no interface number 0 [ 265.775105][ T805] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.795792][ T30] audit: type=1400 audit(1782744820.004:415): avc: denied { ioctl } for pid=7725 comm="syz.2.616" path="socket:[17708]" dev="sockfs" ino=17708 ioctlcmd=0x8927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.851204][ T805] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.055368][ T805] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.066235][ T30] audit: type=1400 audit(1782744820.004:416): avc: denied { write } for pid=7725 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.098352][ T805] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.442657][ T805] usb 2-1: Product: syz [ 266.478305][ T805] usb 2-1: SerialNumber: syz [ 266.627435][ T805] usb 2-1: config 0 descriptor?? [ 267.019044][ T805] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 267.537270][ T805] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 267.605503][ T30] audit: type=1400 audit(1782744821.784:417): avc: denied { setopt } for pid=7750 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 268.069180][ T30] audit: type=1400 audit(1782744822.284:418): avc: denied { create } for pid=7750 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.183124][ T7782] netlink: 'syz.4.633': attribute type 5 has an invalid length. [ 268.398521][ T30] audit: type=1400 audit(1782744822.284:419): avc: denied { connect } for pid=7750 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 268.427500][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.436272][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.443451][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.450573][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.457718][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.464864][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.472018][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.479140][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.486313][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.493526][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 268.667769][ T805] usb 2-1: USB disconnect, device number 14 [ 268.673799][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 268.862054][ T5712] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 268.878382][ T805] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 268.903111][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 269.051725][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 269.071734][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 269.326964][ T5712] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 269.338652][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 269.354835][ T5712] usb 3-1: config 0 has no interface number 0 [ 269.587314][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.620006][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.649762][ T24] usb 1-1: Product: syz [ 269.671087][ T24] usb 1-1: Manufacturer: syz [ 269.693770][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.709091][ T24] usb 1-1: SerialNumber: syz [ 269.735685][ T24] usb 1-1: config 0 descriptor?? [ 269.748786][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 269.750350][ T7790] netlink: 39 bytes leftover after parsing attributes in process `syz.4.638'. [ 269.783229][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 269.803344][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 269.838482][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 269.862273][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.894217][ T5712] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 269.905391][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.963231][ T5712] usb 3-1: Product: syz [ 269.986350][ T5712] usb 3-1: Manufacturer: syz [ 269.994711][ T7796] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 270.001234][ T7796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 270.009964][ T5712] usb 3-1: SerialNumber: syz [ 270.024124][ T5712] usb 3-1: config 0 descriptor?? [ 270.056984][ T7796] vhci_hcd vhci_hcd.0: Device attached [ 270.141691][ T805] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 270.248523][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 270.268859][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 270.292904][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 270.300464][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 270.307991][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 270.326896][ T805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.338605][ T5741] usb 40-1: SetAddress Request (6) to port 0 [ 270.356880][ T5741] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 270.367875][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.377070][ T5712] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 270.388390][ T805] usb 2-1: Product: syz [ 270.393788][ T805] usb 2-1: Manufacturer: syz [ 270.414163][ T805] usb 2-1: SerialNumber: syz [ 270.421206][ T5712] usb 3-1: USB disconnect, device number 16 [ 270.464640][ T805] usb 2-1: config 0 descriptor?? [ 270.698313][ T7796] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 270.751832][ T805] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 271.014595][ T24] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 271.036817][ T7798] vhci_hcd: connection reset by peer [ 271.052952][ T5882] vhci_hcd vhci_hcd.3: stop threads [ 271.060816][ T5882] vhci_hcd vhci_hcd.3: release socket [ 271.109045][ T5882] vhci_hcd vhci_hcd.3: disconnect device [ 271.233996][ T5727] usb 1-1: USB disconnect, device number 18 [ 271.255223][ T5727] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 271.266150][ T5727] ssu100 1-1:0.0: device disconnected [ 271.370091][ T30] audit: type=1400 audit(1782744825.574:420): avc: denied { read } for pid=7813 comm="syz.2.645" path="socket:[16802]" dev="sockfs" ino=16802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.043270][ T7817] netlink: 64 bytes leftover after parsing attributes in process `syz.2.646'. [ 272.103525][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 272.373851][ T7825] netlink: 'syz.4.648': attribute type 5 has an invalid length. [ 273.392669][ T805] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 274.044846][ T805] usb 2-1: USB disconnect, device number 15 [ 274.194045][ T7831] netlink: 39 bytes leftover after parsing attributes in process `syz.4.651'. [ 274.260947][ T7834] netlink: 64 bytes leftover after parsing attributes in process `syz.3.652'. [ 274.354694][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.652'. [ 275.381725][ T805] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.481731][ T5741] usb 40-1: device descriptor read/8, error -110 [ 275.514876][ T30] audit: type=1400 audit(1782744829.724:421): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.562899][ T805] usb 3-1: Using ep0 maxpacket: 16 [ 275.578461][ T7861] netlink: 'syz.3.661': attribute type 4 has an invalid length. [ 275.604619][ T805] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 275.650881][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.686871][ T805] usb 3-1: Product: syz [ 275.706390][ T805] usb 3-1: Manufacturer: syz [ 275.725405][ T805] usb 3-1: SerialNumber: syz [ 275.752572][ T805] usb 3-1: config 0 descriptor?? [ 275.788369][ T805] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 275.961707][ T5741] usb usb40-port1: attempt power cycle [ 276.080716][ T7870] /dev/nullb0: Can't open blockdev [ 277.686307][ T805] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 277.703122][ T5741] usb usb40-port1: unable to enumerate USB device [ 277.779347][ T30] audit: type=1400 audit(1782744831.984:422): avc: denied { mmap_zero } for pid=7868 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 277.883884][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.666'. [ 277.901245][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.666'. [ 278.064328][ T30] audit: type=1400 audit(1782744832.124:423): avc: denied { write } for pid=7868 comm="syz.4.666" name="wireless" dev="proc" ino=4026533350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 279.006596][ T5624] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 279.154692][ T805] usb 3-1: USB disconnect, device number 17 [ 279.427367][ T7889] netlink: 64 bytes leftover after parsing attributes in process `syz.3.671'. [ 279.485006][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.671'. [ 280.925556][ T7909] /dev/nullb0: Can't open blockdev [ 280.953178][ T7903] netlink: 'syz.2.676': attribute type 4 has an invalid length. [ 282.073434][ T30] audit: type=1400 audit(1782744836.284:424): avc: denied { mounton } for pid=7922 comm="syz.4.683" path="/143/file0" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 282.148242][ T7927] netlink: 64 bytes leftover after parsing attributes in process `syz.0.685'. [ 282.206312][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'. [ 282.232842][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.799286][ T7945] netlink: 'syz.1.690': attribute type 5 has an invalid length. [ 285.014309][ T7954] /dev/nullb0: Can't open blockdev [ 287.674252][ T7982] netlink: 64 bytes leftover after parsing attributes in process `syz.2.703'. [ 287.724903][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 287.954125][ T30] audit: type=1400 audit(1782744842.134:425): avc: denied { create } for pid=7987 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.819558][ T8005] /dev/nullb0: Can't open blockdev [ 291.780750][ T8024] netlink: 'syz.3.715': attribute type 2 has an invalid length. [ 291.789994][ T8024] netlink: 228 bytes leftover after parsing attributes in process `syz.3.715'. [ 292.404937][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 292.801926][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 293.035375][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.374700][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 293.382688][ T10] usb 4-1: can't read configurations, error -71 [ 304.468940][ T30] audit: type=1400 audit(1782744858.654:426): avc: denied { getopt } for pid=8133 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.744535][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 308.794636][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 309.137646][ T30] audit: type=1400 audit(1782744863.334:427): avc: denied { listen } for pid=8160 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.130182][ T30] audit: type=1400 audit(1782744863.334:428): avc: denied { accept } for pid=8160 comm="syz.4.758" lport=34573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.360894][ T30] audit: type=1400 audit(1782744864.564:429): avc: denied { write } for pid=8178 comm="syz.4.765" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 310.602097][ T8182] syzkaller0: entered promiscuous mode [ 310.620512][ T8182] syzkaller0: entered allmulticast mode [ 313.481310][ T30] audit: type=1400 audit(1782744867.684:430): avc: denied { wake_alarm } for pid=8195 comm="syz.4.769" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.523433][ T30] audit: type=1400 audit(1782744867.724:431): avc: denied { ioctl } for pid=8195 comm="syz.4.769" path="socket:[19035]" dev="sockfs" ino=19035 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 313.630827][ T8199] cgroup: Name too long [ 315.176868][ T30] audit: type=1800 audit(1782744869.374:432): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.774" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 315.920645][ T5624] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 315.989861][ T8212] netlink: 'syz.1.776': attribute type 4 has an invalid length. [ 316.279658][ T8225] netlink: 64 bytes leftover after parsing attributes in process `syz.0.781'. [ 316.346825][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 316.862504][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.051905][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.771847][ T30] audit: type=1800 audit(1782744871.974:433): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.789" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 318.700189][ T8257] netlink: 'syz.0.790': attribute type 2 has an invalid length. [ 318.734448][ T8257] netlink: 228 bytes leftover after parsing attributes in process `syz.0.790'. [ 318.790602][ T8261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.001667][ T805] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 319.181683][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 319.859058][ T8273] netlink: 64 bytes leftover after parsing attributes in process `syz.2.797'. [ 322.622469][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.644892][ T805] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 322.664205][ T805] usb 1-1: can't read configurations, error -71 [ 323.134315][ T5624] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 325.451490][ T8331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.814'. [ 327.885502][ T30] audit: type=1400 audit(1782744882.064:434): avc: denied { create } for pid=8393 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.955258][ T8405] netlink: 64 bytes leftover after parsing attributes in process `syz.2.828'. [ 329.459356][ T30] audit: type=1400 audit(1782744883.664:435): avc: denied { bind } for pid=8414 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.634052][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 331.332613][ T5616] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 331.912819][ T5616] usb 3-1: Using ep0 maxpacket: 32 [ 332.325509][ T5616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.336294][ T5616] usb 3-1: config 0 has no interfaces? [ 332.393168][ T5616] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.402874][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.411558][ T5616] usb 3-1: Product: syz [ 332.417066][ T5616] usb 3-1: Manufacturer: syz [ 332.422600][ T5616] usb 3-1: SerialNumber: syz [ 332.438765][ T5616] usb 3-1: config 0 descriptor?? [ 332.933267][ T5712] usb 3-1: USB disconnect, device number 18 [ 333.915110][ T30] audit: type=1400 audit(1782744888.124:436): avc: denied { read } for pid=8446 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.081699][ T5616] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 334.154696][ T8459] kAFS: unable to lookup cell 'syz1' [ 334.225814][ T8462] 9pnet_virtio: no channels available for device syz [ 334.261737][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 334.278300][ T5616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 334.291488][ T5616] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 334.307203][ T5616] usb 4-1: config 14 has no interface number 0 [ 334.315395][ T5616] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 334.328699][ T5616] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 334.343123][ T5616] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 334.354540][ T5616] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 334.382366][ T5616] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.395496][ T5616] usb 4-1: config 14 interface 228 has no altsetting 0 [ 334.462369][ T5616] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 334.485079][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.510634][ T5616] usb 4-1: Product: syz [ 334.531220][ T5616] usb 4-1: Manufacturer: syz [ 334.551300][ T5616] usb 4-1: SerialNumber: syz [ 336.724710][ T5616] legousbtower 4-1:14.228: interrupt endpoints not found [ 337.608523][ T10] usb 4-1: USB disconnect, device number 7 [ 337.675373][ T8476] netlink: 64 bytes leftover after parsing attributes in process `syz.4.849'. [ 339.928324][ T8501] netlink: 64 bytes leftover after parsing attributes in process `syz.3.857'. [ 342.971738][ T5712] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 344.321667][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 344.352242][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.406930][ T5712] usb 1-1: config 0 has no interfaces? [ 344.434786][ T5712] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 344.483138][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 344.503016][ T5712] usb 1-1: Product: syz [ 344.514788][ T5712] usb 1-1: Manufacturer: syz [ 344.519444][ T30] audit: type=1400 audit(1782744898.704:437): avc: denied { bind } for pid=8540 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.548817][ T5712] usb 1-1: SerialNumber: syz [ 344.571742][ T5712] usb 1-1: config 0 descriptor?? [ 344.832612][ T5712] usb 1-1: USB disconnect, device number 21 [ 346.550659][ T8572] netlink: 'syz.1.879': attribute type 9 has an invalid length. [ 348.658895][ T8590] No source specified [ 349.561788][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 354.412023][ T8646] syzkaller0: entered promiscuous mode [ 354.482375][ T8646] syzkaller0: entered allmulticast mode [ 356.600759][ T8665] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 358.663074][ T30] audit: type=1400 audit(1782744912.874:438): avc: denied { read } for pid=8680 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 359.846117][ T8696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.921'. [ 359.929890][ T8698] syzkaller0: entered promiscuous mode [ 360.030994][ T8698] syzkaller0: entered allmulticast mode [ 360.292512][ T8703] netlink: 64 bytes leftover after parsing attributes in process `syz.3.924'. [ 360.318819][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 361.519383][ T8716] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 362.539795][ T8739] netlink: 'syz.3.935': attribute type 2 has an invalid length. [ 362.568880][ T8739] netlink: 228 bytes leftover after parsing attributes in process `syz.3.935'. [ 362.751252][ T8747] syzkaller0: entered promiscuous mode [ 362.763618][ T8747] syzkaller0: entered allmulticast mode [ 362.861687][ T5616] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 363.031673][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 364.564775][ T30] audit: type=1400 audit(1782744918.774:439): avc: denied { setopt } for pid=8760 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.621645][ T5712] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 364.699420][ T30] audit: type=1400 audit(1782744918.884:440): avc: denied { read } for pid=8773 comm="syz.4.946" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 364.699494][ T30] audit: type=1400 audit(1782744918.884:441): avc: denied { open } for pid=8773 comm="syz.4.946" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 364.699538][ T30] audit: type=1400 audit(1782744918.894:442): avc: denied { ioctl } for pid=8773 comm="syz.4.946" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 364.802551][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 364.808265][ T5712] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 364.808294][ T5712] usb 3-1: config 0 has no interface number 0 [ 364.808332][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.808369][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.808396][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 364.808425][ T5712] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 364.808456][ T5712] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.813073][ T5712] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 364.813103][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.813126][ T5712] usb 3-1: Product: syz [ 364.813144][ T5712] usb 3-1: Manufacturer: syz [ 364.813162][ T5712] usb 3-1: SerialNumber: syz [ 364.817552][ T5712] usb 3-1: config 0 descriptor?? [ 365.059178][ T5712] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 365.146346][ T8781] syzkaller0: entered promiscuous mode [ 365.146370][ T8781] syzkaller0: entered allmulticast mode [ 365.401347][ T8783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 365.489775][ T5741] usb 3-1: USB disconnect, device number 19 [ 365.767876][ T5616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 366.146015][ T30] audit: type=1400 audit(1782744920.354:443): avc: denied { open } for pid=8794 comm="syz.4.952" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 366.203182][ T30] audit: type=1400 audit(1782744920.384:444): avc: denied { ioctl } for pid=8794 comm="syz.4.952" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 366.298379][ T5616] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 366.314794][ T5616] usb 4-1: can't read configurations, error -71 [ 367.437120][ T8816] overlayfs: failed to resolve './file0': -2 [ 367.448944][ T8824] syzkaller0: entered promiscuous mode [ 367.504029][ T4926] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 367.514889][ T8824] syzkaller0: entered allmulticast mode [ 367.815277][ T5741] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 367.981704][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 367.999449][ T5741] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 368.027296][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.070152][ T5741] usb 3-1: Product: syz [ 368.097208][ T5741] usb 3-1: Manufacturer: syz [ 368.138055][ T5741] usb 3-1: SerialNumber: syz [ 368.237615][ T5741] usb 3-1: config 0 descriptor?? [ 368.275118][ T5741] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 369.514052][ T5741] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 369.705941][ T5741] usb 3-1: USB disconnect, device number 20 [ 369.780648][ T5741] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 369.921436][ T5741] ssu100 3-1:0.0: device disconnected [ 370.253976][ T4926] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 371.858897][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.440818][ T8874] netlink: 'syz.0.977': attribute type 4 has an invalid length. [ 373.303548][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.983'. [ 373.315599][ T8893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 373.355691][ T30] audit: type=1400 audit(1782744927.534:445): avc: denied { ioctl } for pid=8889 comm="syz.2.984" path="socket:[21680]" dev="sockfs" ino=21680 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 374.310049][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.318956][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.344253][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'. [ 375.355082][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.388613][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.418589][ T30] audit: type=1400 audit(1782744929.624:446): avc: denied { create } for pid=8905 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 375.456666][ T30] audit: type=1400 audit(1782744929.644:447): avc: denied { write } for pid=8905 comm="syz.0.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 375.540407][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.580654][ T8895] veth1_macvtap: left allmulticast mode [ 375.592847][ T4926] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 375.649017][ T8352] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.671563][ T8352] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.700819][ T8352] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.730506][ T8352] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.760758][ T30] audit: type=1400 audit(1782744929.964:448): avc: denied { firmware_load } for pid=8905 comm="syz.0.987" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 376.050698][ T8909] syz.0.987 (8909) used greatest stack depth: 18008 bytes left [ 377.302803][ T30] audit: type=1400 audit(1782744931.514:449): avc: denied { getopt } for pid=8934 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 378.285461][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.294638][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.358913][ T8963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.973076][ T8993] netlink: 'syz.1.1017': attribute type 4 has an invalid length. [ 385.149547][ T9009] fuse: Unknown parameter 'grou00000000000000000000' [ 385.929472][ T9034] netlink: 'syz.1.1033': attribute type 2 has an invalid length. [ 385.961419][ T9034] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1033'. [ 386.093776][ T30] audit: type=1400 audit(1782744940.274:450): avc: denied { mount } for pid=9037 comm="syz.0.1035" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 386.126904][ T30] audit: type=1400 audit(1782744940.274:451): avc: denied { unmount } for pid=9037 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 386.725010][ T9048] syzkaller0: entered promiscuous mode [ 386.775911][ T9048] syzkaller0: entered allmulticast mode [ 387.141667][ T9053] batadv_slave_1: entered promiscuous mode [ 387.153257][ T9053] batadv_slave_1: entered allmulticast mode [ 390.056164][ T9094] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1052'. [ 390.074532][ T30] audit: type=1400 audit(1782744944.264:452): avc: denied { write } for pid=9093 comm="syz.1.1052" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.480027][ T9115] kAFS: unable to lookup cell 'syz1' [ 392.562811][ T9116] 9pnet_virtio: no channels available for device syz [ 393.813579][ T9135] syzkaller0: entered promiscuous mode [ 393.819763][ T9135] syzkaller0: entered allmulticast mode [ 393.827264][ T9120] netlink: 'syz.1.1058': attribute type 4 has an invalid length. [ 395.825925][ T4926] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 396.815465][ T9152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1068'. [ 396.839114][ T9154] kAFS: unable to lookup cell 'syz1' [ 397.759079][ T9160] 9pnet_virtio: no channels available for device syz [ 398.586559][ T9175] netlink: 'syz.3.1075': attribute type 4 has an invalid length. [ 398.738038][ T9189] syzkaller0: entered promiscuous mode [ 398.744314][ T9189] syzkaller0: entered allmulticast mode [ 398.859524][ T9191] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'. [ 399.003940][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.648633][ T9204] kAFS: unable to lookup cell 'syz1' [ 400.699528][ T4926] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 400.710050][ T9207] 9pnet_virtio: no channels available for device syz [ 401.517201][ T9232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1095'. [ 403.380296][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.703645][ T9253] kAFS: unable to lookup cell 'syz1' [ 404.797403][ T9253] 9pnet_virtio: no channels available for device syz [ 404.951840][ T9265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1107'. [ 405.909053][ T9282] /dev/nullb0: Can't open blockdev [ 406.297140][ T5616] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 406.725033][ T5616] usb 5-1: Using ep0 maxpacket: 32 [ 408.325120][ T9298] kAFS: unable to lookup cell 'syz1' [ 408.435348][ T9302] 9pnet_virtio: no channels available for device syz [ 408.623274][ T4926] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 408.676372][ T9308] syzkaller0: entered promiscuous mode [ 408.701641][ T9308] syzkaller0: entered allmulticast mode [ 409.358645][ T5616] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.382510][ T5616] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 409.559061][ T5616] usb 5-1: can't read configurations, error -71 [ 410.395216][ T9328] 9pnet_virtio: no channels available for device syz [ 411.490125][ T30] audit: type=1400 audit(1782744965.694:453): avc: denied { connect } for pid=9336 comm="syz.4.1134" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.727550][ T4926] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 411.944770][ T4926] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 412.068167][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.251728][ T5616] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 412.864473][ T5616] usb 5-1: Using ep0 maxpacket: 32 [ 414.646185][ T9371] 9pnet_virtio: no channels available for device syz [ 415.045970][ T4926] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 415.064387][ T4926] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 415.114090][ T9391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.127914][ T9393] fuse: Unknown parameter 'group_id00000000000000000000' [ 415.230254][ T5616] usb 5-1: unable to get BOS descriptor or descriptor too short [ 415.252645][ T5616] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 415.273588][ T5616] usb 5-1: can't read configurations, error -71 [ 415.426301][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.726220][ T9411] 9pnet_virtio: no channels available for device syz [ 416.830630][ T9423] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1168'. [ 416.847293][ T9422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 417.755240][ T9430] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1170'. [ 417.820582][ T9432] fuse: Bad value for 'fd' [ 417.903349][ T4926] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 418.073420][ T9444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.299977][ T9451] netlink: 'syz.4.1177': attribute type 4 has an invalid length. [ 419.089340][ T9454] 9pnet_virtio: no channels available for device syz [ 419.587932][ T9467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 419.638352][ T9470] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1185'. [ 419.955187][ T9473] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1186'. [ 420.129845][ T9476] fuse: Bad value for 'fd' [ 420.817594][ T9463] batadv_slave_1: left promiscuous mode [ 421.007067][ T30] audit: type=1400 audit(1782744975.214:454): avc: denied { ioctl } for pid=9480 comm="syz.1.1190" path="socket:[24164]" dev="sockfs" ino=24164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.357774][ T9484] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 423.527980][ T4926] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 424.585834][ T9505] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1198'. [ 425.119302][ T9510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 425.585079][ T9517] fuse: Invalid rootmode [ 426.472900][ T9529] syzkaller0: entered promiscuous mode [ 426.485584][ T9529] syzkaller0: entered allmulticast mode [ 426.508048][ T9527] netlink: 'syz.3.1205': attribute type 4 has an invalid length. [ 426.517365][ T4926] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 428.320585][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'. [ 429.192156][ T9566] 9p: Bad value for 'rfdno' [ 429.952426][ T10] IPVS: starting estimator thread 0... [ 430.412040][ T9581] IPVS: using max 65 ests per chain, 156000 per kthread [ 430.429761][ T9587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.881296][ T30] audit: type=1800 audit(1782744985.564:455): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1227" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 432.393548][ T9607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1231'. [ 432.489898][ T9612] fuse: Unknown parameter 'grou00000000000000000000' [ 434.251912][ T30] audit: type=1400 audit(1782744988.064:456): avc: denied { mount } for pid=9620 comm="syz.3.1236" name="/" dev="ramfs" ino=24501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 436.515835][ T9637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.611163][ T30] audit: type=1400 audit(1782744990.814:457): avc: denied { name_bind } for pid=9639 comm="syz.4.1241" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 436.738775][ T9642] syzkaller0: entered promiscuous mode [ 436.762732][ T9642] syzkaller0: entered allmulticast mode [ 437.889655][ T9657] fuse: Unknown parameter 'grou00000000000000000000' [ 438.065954][ T9661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1248'. [ 439.283106][ T4926] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 439.594509][ T9692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.742348][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.946647][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.592423][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 440.643743][ T9701] syzkaller0: entered promiscuous mode [ 440.650105][ T9701] syzkaller0: entered allmulticast mode [ 440.765204][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.779389][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.790994][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 440.802003][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.813019][ T10] usb 3-1: config 0 descriptor?? [ 440.837707][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.879596][ T4926] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 441.174906][ T9714] 9p: Bad value for 'wfdno' [ 441.228374][ T9716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1267'. [ 441.245938][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 442.386025][ T10] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 442.407846][ T10] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 442.419682][ T10] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 442.428076][ T10] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 442.441804][ T10] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 442.483935][ T10] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 442.523981][ T10] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 442.554855][ T10] usb 3-1: USB disconnect, device number 21 [ 442.863410][ T9728] netlink: 'syz.0.1269': attribute type 4 has an invalid length. [ 443.002942][ T9727] fido_id[9727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 443.326764][ T4926] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 443.336088][ T4926] Bluetooth: hci0: Injecting HCI hardware error event [ 443.344191][ T4926] Bluetooth: hci0: hardware error 0x00 [ 443.358314][ T9741] syzkaller0: entered promiscuous mode [ 443.398345][ T9741] syzkaller0: entered allmulticast mode [ 445.164205][ T5624] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 445.403486][ T4926] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 446.963268][ T9787] syzkaller0: entered promiscuous mode [ 446.972842][ T9787] syzkaller0: entered allmulticast mode [ 447.266892][ T9792] fuse: Invalid rootmode [ 449.219115][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1297'. [ 449.345781][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1297'. [ 449.774453][ T30] audit: type=1400 audit(1782745003.894:458): avc: denied { setopt } for pid=9820 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.800449][ T9818] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 449.942960][ T9830] fuse: Invalid rootmode [ 450.252591][ T9839] /dev/nullb0: Can't open blockdev [ 452.363454][ T9862] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 452.826394][ T9876] fuse: Bad value for 'rootmode' [ 453.282878][ T30] audit: type=1400 audit(1782745007.464:459): avc: denied { write } for pid=9877 comm="syz.4.1319" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.252078][ T9875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1317'. [ 454.882810][ T9875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1317'. [ 454.928392][ T30] audit: type=1400 audit(1782745007.474:460): avc: denied { open } for pid=9877 comm="syz.4.1319" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 455.182871][ T30] audit: type=1400 audit(1782745007.484:461): avc: denied { ioctl } for pid=9877 comm="syz.4.1319" path="/dev/sg0" dev="devtmpfs" ino=774 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 456.538665][ T9913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1325'. [ 456.764417][ T9914] netlink: 'syz.2.1328': attribute type 4 has an invalid length. [ 456.867890][ T9926] fuse: Bad value for 'rootmode' [ 457.179629][ T30] audit: type=1400 audit(1782745011.384:462): avc: denied { mount } for pid=9929 comm="syz.3.1333" name="/" dev="autofs" ino=26193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 457.687238][ T9940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.376768][ T9939] fuse: Unknown parameter 'group_id00000000000000000000' [ 458.766622][ T30] audit: type=1400 audit(1782745012.974:463): avc: denied { create } for pid=9947 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.796816][ T30] audit: type=1400 audit(1782745013.004:464): avc: denied { ioctl } for pid=9947 comm="syz.3.1339" path="socket:[26244]" dev="sockfs" ino=26244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.825750][ T30] audit: type=1400 audit(1782745013.004:465): avc: denied { bind } for pid=9947 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.873487][ T30] audit: type=1400 audit(1782745013.034:466): avc: denied { connect } for pid=9947 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.899743][ T30] audit: type=1400 audit(1782745013.054:467): avc: denied { write } for pid=9947 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.180970][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888029ece000: rx timeout, send abort [ 460.188860][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888029ece400: rx timeout, send abort [ 460.189839][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888029ece400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 460.221105][ T30] audit: type=1400 audit(1782745014.414:468): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 460.221184][ T30] audit: type=1400 audit(1782745014.414:469): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.221272][ T30] audit: type=1400 audit(1782745014.414:470): avc: denied { write search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.221339][ T30] audit: type=1400 audit(1782745014.414:471): avc: denied { add_name } for pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.221480][ T30] audit: type=1400 audit(1782745014.414:472): avc: denied { create } for pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.221562][ T30] audit: type=1400 audit(1782745014.414:473): avc: denied { append open } for pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.222655][ T30] audit: type=1400 audit(1782745014.424:474): avc: denied { getattr } for pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.682727][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888029ece000: abort rx timeout. Force session deactivation [ 461.569900][ T9980] syz_tun: entered allmulticast mode [ 461.574396][ T9979] syz_tun: left allmulticast mode [ 461.742116][ T30] audit: type=1804 audit(1782745015.934:475): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1351" name="/newroot/262/file1" dev="fuse" ino=1 res=1 errno=0 [ 461.757455][ T30] audit: type=1800 audit(1782745015.964:476): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1351" name="/" dev="fuse" ino=1 res=0 errno=0 [ 461.970925][ T30] audit: type=1800 audit(1782745015.964:477): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1351" name="/" dev="fuse" ino=1 res=0 errno=0 [ 462.043240][ T9994] netlink: 'syz.0.1355': attribute type 4 has an invalid length. [ 465.064795][T10019] /dev/nullb0: Can't open blockdev [ 468.592583][T10023] syzkaller0: entered promiscuous mode [ 468.613839][T10023] syzkaller0: entered allmulticast mode [ 469.831761][ T5712] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 469.995685][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 470.007058][ T5712] usb 5-1: config 0 has no interfaces? [ 470.015076][ T5712] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 470.034046][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.057966][ T5712] usb 5-1: Product: syz [ 470.068571][ T5712] usb 5-1: Manufacturer: syz [ 470.078095][ T5712] usb 5-1: SerialNumber: syz [ 470.144065][ T5712] usb 5-1: config 0 descriptor?? [ 470.921324][T10058] /dev/nullb0: Can't open blockdev [ 471.897669][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.949285][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.029059][T10031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 473.039294][T10031] block device autoloading is deprecated and will be removed. [ 473.125274][ T5741] usb 5-1: USB disconnect, device number 13 [ 473.419753][T10072] kAFS: unable to lookup cell 'syz1' [ 473.640198][T10078] syzkaller0: entered promiscuous mode [ 473.650436][T10078] syzkaller0: entered allmulticast mode [ 475.826826][T10099] 9pnet_virtio: no channels available for device syz [ 476.325201][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 476.325235][ T30] audit: type=1326 audit(1782745030.044:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.4.1386" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e9499ce59 code=0x0 [ 477.858613][ T30] audit: type=1400 audit(1782745030.534:481): avc: denied { audit_read } for pid=10088 comm="syz.4.1386" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 479.284868][T10124] syzkaller0: entered promiscuous mode [ 479.299853][T10124] syzkaller0: entered allmulticast mode [ 479.744032][ T4926] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 480.269861][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 480.289627][ T30] audit: type=1400 audit(1782745034.494:482): avc: denied { read } for pid=10132 comm="syz.2.1398" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 481.690525][T10035] syz.1.1369 (10035): drop_caches: 1 [ 481.724679][T10033] syz.1.1369 (10033): drop_caches: 1 [ 482.945705][ T30] audit: type=1400 audit(1782745037.154:483): avc: denied { module_request } for pid=10152 comm="syz.1.1406" kmod="crypto-md5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 483.345614][T10156] could not allocate digest TFM handle md5 [ 483.421835][ T5793] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 483.577878][T10166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10166 comm=syz.3.1401 [ 483.631866][T10166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10166 comm=syz.3.1401 [ 483.708711][T10172] /dev/nullb0: Can't open blockdev [ 484.875879][ T5793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.917955][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.928844][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.938565][ T5793] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.975774][ T5793] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.984834][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.343456][ T30] audit: type=1400 audit(1782745039.544:484): avc: denied { execute } for pid=10175 comm="syz.4.1412" path=2F6D656D66643A14A3BB07202864656C6574656429 dev="hugetlbfs" ino=27821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 486.163306][ T5793] usb 3-1: config 0 descriptor?? [ 486.182486][ T5793] usb 3-1: can't set config #0, error -71 [ 486.197427][ T5793] usb 3-1: USB disconnect, device number 22 [ 486.294033][T10166] hub 8-0:1.0: USB hub found [ 486.301272][T10166] hub 8-0:1.0: 1 port detected [ 487.211399][ T30] audit: type=1400 audit(1782745041.414:485): avc: denied { map } for pid=10199 comm="syz.2.1420" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 487.472506][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.665525][T10214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.880865][ T4926] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 489.891314][ T4926] CPU: 1 UID: 0 PID: 4926 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.891352][ T4926] Tainted: [L]=SOFTLOCKUP [ 489.891360][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.891381][ T4926] Workqueue: hci1 hci_rx_work [ 489.891425][ T4926] Call Trace: [ 489.891433][ T4926] [ 489.891442][ T4926] dump_stack_lvl+0x100/0x190 [ 489.891477][ T4926] sysfs_warn_dup.cold+0x1c/0x28 [ 489.891513][ T4926] sysfs_create_dir_ns+0x24b/0x2b0 [ 489.891550][ T4926] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 489.891592][ T4926] ? find_held_lock+0x2b/0x80 [ 489.891614][ T4926] ? kobject_add_internal+0x25f/0x930 [ 489.891638][ T4926] ? kobject_add_internal+0x25f/0x930 [ 489.891667][ T4926] ? do_raw_spin_unlock+0x145/0x1e0 [ 489.891701][ T4926] kobject_add_internal+0x2c8/0x930 [ 489.891731][ T4926] kobject_add+0x16a/0x1e0 [ 489.891755][ T4926] ? __pfx_kobject_add+0x10/0x10 [ 489.891778][ T4926] ? class_to_subsys+0x10f/0x150 [ 489.891814][ T4926] ? kobject_put+0xb9/0x640 [ 489.891836][ T4926] ? _raw_spin_unlock+0x28/0x50 [ 489.891870][ T4926] device_add+0x294/0x1970 [ 489.891899][ T4926] ? __pfx_dev_set_name+0x10/0x10 [ 489.891932][ T4926] ? __pfx_device_add+0x10/0x10 [ 489.891962][ T4926] ? mgmt_send_event_skb+0x2fb/0x460 [ 489.892001][ T4926] hci_conn_add_sysfs+0x1a3/0x260 [ 489.892026][ T4926] le_conn_complete_evt+0x11eb/0x1f60 [ 489.892066][ T4926] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 489.892095][ T4926] ? hci_event_packet+0x186/0xcd0 [ 489.892125][ T4926] ? hci_event_packet+0x186/0xcd0 [ 489.892162][ T4926] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 489.892198][ T4926] ? skb_pull_data+0x15f/0x1e0 [ 489.892230][ T4926] hci_le_meta_evt+0x34a/0x5f0 [ 489.892264][ T4926] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 489.892301][ T4926] hci_event_packet+0x51c/0xcd0 [ 489.892333][ T4926] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 489.892373][ T4926] ? __pfx_hci_event_packet+0x10/0x10 [ 489.892411][ T4926] ? kcov_remote_start+0x384/0x670 [ 489.892442][ T4926] ? lockdep_hardirqs_on+0x78/0x100 [ 489.892483][ T4926] hci_rx_work+0x451/0xfc0 [ 489.892524][ T4926] process_one_work+0xa23/0x1940 [ 489.892568][ T4926] ? __pfx_process_one_work+0x10/0x10 [ 489.892617][ T4926] ? __pfx_hci_rx_work+0x10/0x10 [ 489.892656][ T4926] worker_thread+0x5ef/0xe50 [ 489.892694][ T4926] ? __pfx_worker_thread+0x10/0x10 [ 489.892725][ T4926] ? kthread+0x13a/0x450 [ 489.892750][ T4926] ? __pfx_worker_thread+0x10/0x10 [ 489.892777][ T4926] kthread+0x370/0x450 [ 489.892803][ T4926] ? __pfx_kthread+0x10/0x10 [ 489.892831][ T4926] ret_from_fork+0x72b/0xd50 [ 489.892865][ T4926] ? __pfx_ret_from_fork+0x10/0x10 [ 489.892897][ T4926] ? __switch_to+0x800/0x10f0 [ 489.892922][ T4926] ? __pfx_kthread+0x10/0x10 [ 489.892946][ T4926] ret_from_fork_asm+0x1a/0x30 [ 489.892982][ T4926] [ 490.375400][ T4926] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 490.390473][ T4926] Bluetooth: hci1: failed to register connection device [ 490.816465][ T30] audit: type=1400 audit(1782745044.824:486): avc: denied { mount } for pid=10222 comm="syz.3.1429" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 491.262258][T10241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.691183][ T30] audit: type=1400 audit(1782745045.864:487): avc: denied { bind } for pid=10235 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 491.778575][ T30] audit: type=1400 audit(1782745045.864:488): avc: denied { node_bind } for pid=10235 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 491.812970][ T5741] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 492.023960][ T5741] usb 5-1: Using ep0 maxpacket: 32 [ 493.379537][T10264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.076281][T10268] could not allocate digest TFM handle md5 [ 495.177344][ T5741] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.203415][ T5741] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 495.263231][ T5741] usb 5-1: can't read configurations, error -71 [ 497.417615][T10295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.365634][T10311] /dev/nullb0: Can't open blockdev [ 499.745765][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.107843][T10321] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 501.163451][T10347] fuse: Invalid rootmode [ 501.174275][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.528885][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.144020][ T30] audit: type=1400 audit(1782745057.354:489): avc: denied { mount } for pid=10382 comm="syz.4.1479" name="/" dev="rpc_pipefs" ino=26989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 503.451147][T10388] fuse: Unknown parameter '0x0000000000000003' [ 507.557838][T10429] fuse: Bad value for 'rootmode' [ 511.214380][T10474] fuse: Unknown parameter 'fd0x0000000000000003' [ 513.234054][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.675694][ T30] audit: type=1400 audit(1782745068.884:490): avc: denied { write } for pid=10526 comm="syz.2.1532" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 514.741418][ T5624] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 515.406965][T10539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.074065][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.082904][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.369057][ T5624] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 518.430192][T10558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.453531][T10558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.461321][T10558] batadv_slave_1: left allmulticast mode [ 518.671586][ T5712] syz1: Port: 1 Link DOWN [ 518.680240][T10580] bridge0: port 3(syz_tun) entered blocking state [ 518.691961][T10580] bridge0: port 3(syz_tun) entered disabled state [ 518.717309][T10580] syz_tun: entered allmulticast mode [ 518.735084][T10580] syz_tun: entered promiscuous mode [ 518.748064][T10580] bridge0: port 3(syz_tun) entered blocking state [ 518.748220][T10583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.754917][T10580] bridge0: port 3(syz_tun) entered forwarding state [ 518.776152][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.791046][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.815436][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.831742][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.814492][T10588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1556'. [ 520.680596][T10603] fuse: Unknown parameter 'user_i00000000000000000000' [ 520.846464][T10610] bridge0: port 3(syz_tun) entered blocking state [ 520.861861][T10610] bridge0: port 3(syz_tun) entered disabled state [ 520.882045][T10610] syz_tun: entered promiscuous mode [ 521.021201][ T5624] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 521.619161][T10612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.850160][ T30] audit: type=1400 audit(1782745076.054:491): avc: denied { read } for pid=10626 comm="syz.2.1569" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 521.874914][T10627] program syz.2.1569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.986672][T10629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.069399][T10633] lo: entered allmulticast mode [ 522.083657][T10633] tunl0: entered allmulticast mode [ 522.096991][T10633] gre0: entered allmulticast mode [ 522.111476][T10633] gretap0: entered allmulticast mode [ 522.126497][T10633] erspan0: entered allmulticast mode [ 522.135774][T10633] ip_vti0: entered allmulticast mode [ 522.148995][T10633] ip6_vti0: entered allmulticast mode [ 522.156736][T10633] sit0: entered allmulticast mode [ 522.162845][T10633] ip6tnl0: entered allmulticast mode [ 522.171909][T10633] ip6gre0: entered allmulticast mode [ 522.177635][T10633] syz_tun: entered allmulticast mode [ 522.184689][T10633] ip6gretap0: entered allmulticast mode [ 522.191837][T10633] bridge0: entered allmulticast mode [ 522.197316][T10633] vcan0: entered allmulticast mode [ 522.203498][T10633] bond0: entered allmulticast mode [ 522.205324][T10635] kAFS: unable to lookup cell 'syz1' [ 522.208676][T10633] bond_slave_0: entered allmulticast mode [ 522.220027][T10633] bond_slave_1: entered allmulticast mode [ 522.226141][T10633] team0: entered allmulticast mode [ 522.231332][T10633] team_slave_0: entered allmulticast mode [ 522.237383][T10633] team_slave_1: entered allmulticast mode [ 522.247873][T10633] dummy0: entered allmulticast mode [ 522.256027][T10633] nlmon0: entered allmulticast mode [ 522.262367][T10633] batadv0: entered allmulticast mode [ 522.267886][T10633] vxcan0: entered allmulticast mode [ 522.274219][T10633] vxcan1: entered allmulticast mode [ 522.279595][T10633] veth0: entered allmulticast mode [ 522.285319][T10633] veth1: entered allmulticast mode [ 522.290597][T10633] wg0: entered allmulticast mode [ 522.296111][T10633] wg1: entered allmulticast mode [ 522.301202][T10633] wg2: entered allmulticast mode [ 522.306605][T10633] veth0_to_bridge: entered allmulticast mode [ 522.309866][T10637] 9pnet_virtio: no channels available for device syz [ 522.316579][T10633] veth1_to_bridge: entered allmulticast mode [ 522.331922][T10633] veth0_to_bond: entered allmulticast mode [ 522.339561][T10633] veth1_to_bond: entered allmulticast mode [ 522.348211][T10633] veth0_to_team: entered allmulticast mode [ 522.358040][T10633] veth1_to_team: entered allmulticast mode [ 522.367996][T10633] veth0_to_batadv: entered allmulticast mode [ 522.381902][T10633] batadv_slave_0: entered allmulticast mode [ 522.388030][T10633] veth1_to_batadv: entered allmulticast mode [ 522.397462][T10633] batadv_slave_1: entered allmulticast mode [ 522.411792][T10633] xfrm0: entered allmulticast mode [ 522.417169][T10633] veth0_to_hsr: entered allmulticast mode [ 522.423525][T10633] hsr_slave_0: entered allmulticast mode [ 522.432535][T10633] veth1_to_hsr: entered allmulticast mode [ 522.442170][T10633] hsr_slave_1: entered allmulticast mode [ 522.451960][T10633] veth1_virt_wifi: entered allmulticast mode [ 522.466010][T10633] veth0_virt_wifi: entered allmulticast mode [ 522.481992][T10633] virt_wifi0: entered allmulticast mode [ 522.493415][T10633] veth1_vlan: entered allmulticast mode [ 522.506729][T10633] veth0_vlan: entered allmulticast mode [ 522.517056][T10633] vlan0: entered allmulticast mode [ 522.531960][T10633] vlan1: entered allmulticast mode [ 522.537282][T10633] macvlan0: entered allmulticast mode [ 522.553906][T10633] macvlan1: entered allmulticast mode [ 522.559497][T10633] ipvlan0: entered allmulticast mode [ 522.565616][T10633] ipvlan1: entered allmulticast mode [ 522.661932][T10633] veth1_macvtap: entered allmulticast mode [ 522.673697][T10633] veth0_macvtap: entered allmulticast mode [ 522.684577][T10633] macvtap0: entered allmulticast mode [ 522.696745][T10633] macsec0: entered allmulticast mode [ 522.708324][T10633] geneve0: entered allmulticast mode [ 522.726889][T10633] geneve1: entered allmulticast mode [ 522.739886][T10633] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 522.761827][T10633] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 522.845909][T10653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.904266][T10633] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 522.994869][T10633] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 523.068708][T10633] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 523.136588][T10633] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 523.211281][T10633] gtp0: entered allmulticast mode [ 523.228606][T10633] gtp1: entered allmulticast mode [ 523.246082][T10633] gre1: entered allmulticast mode [ 523.331394][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.348473][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.366255][ T30] audit: type=1400 audit(1782745077.574:492): avc: denied { write } for pid=10656 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 523.374557][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.501148][ T30] audit: type=1400 audit(1782745078.704:493): avc: denied { ioctl } for pid=10673 comm="syz.3.1589" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 524.591546][ T30] audit: type=1400 audit(1782745078.704:494): avc: denied { set_context_mgr } for pid=10673 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 524.801105][ T30] audit: type=1400 audit(1782745078.704:495): avc: denied { call } for pid=10673 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 525.016566][ T30] audit: type=1400 audit(1782745078.704:496): avc: denied { transfer } for pid=10673 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 525.642994][ T30] audit: type=1400 audit(1782745079.854:497): avc: denied { mounton } for pid=10688 comm="syz.3.1594" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 525.666985][T10689] 9p: Bad value for 'timeout' [ 525.679556][ T5624] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 525.753877][T10691] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 525.774167][ T30] audit: type=1400 audit(1782745079.984:498): avc: denied { connect } for pid=10688 comm="syz.3.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 525.808792][ T30] audit: type=1400 audit(1782745079.984:499): avc: denied { bind } for pid=10690 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.847831][ T30] audit: type=1400 audit(1782745079.984:500): avc: denied { listen } for pid=10690 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 526.755472][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 527.012606][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 527.023242][ T10] usb 3-1: config 0 has no interfaces? [ 527.029777][ T10] usb 3-1: config 0 has no interfaces? [ 527.038140][ T10] usb 3-1: config 0 has no interfaces? [ 527.047259][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 527.061647][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.069814][ T10] usb 3-1: Product: syz [ 527.076523][ T10] usb 3-1: Manufacturer: syz [ 527.081282][ T10] usb 3-1: SerialNumber: syz [ 527.093184][ T10] usb 3-1: config 0 descriptor?? [ 527.202563][ T5793] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 527.396913][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.452840][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.535049][ T5712] usb 3-1: USB disconnect, device number 23 [ 527.621758][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 528.128151][ T5712] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 528.232100][ T5624] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 528.278355][ T5793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 528.292256][ T5793] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 528.300311][ T5793] usb 5-1: can't read configurations, error -71 [ 528.333034][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 528.343903][ T5712] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.459997][ T5712] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.481657][ T5712] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.501636][ T5712] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.00 [ 528.539776][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.008659][ T5712] hub 3-1:17.0: bad descriptor, ignoring hub [ 529.044557][ T5712] hub 3-1:17.0: probe with driver hub failed with error -5 [ 529.108536][ T5712] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 529.315967][ T30] audit: type=1400 audit(1782745083.384:501): avc: denied { read } for pid=4961 comm="acpid" name="mouse1" dev="devtmpfs" ino=2983 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 529.377870][ T30] audit: type=1400 audit(1782745083.384:502): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2983 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 529.450010][ T30] audit: type=1400 audit(1782745083.564:503): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2983 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 529.723848][ T5712] usb 3-1: USB disconnect, device number 24 [ 529.979499][ T5624] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 530.123465][T10753] netlink: 'syz.3.1613': attribute type 1 has an invalid length. [ 530.296668][T10753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.799209][T10784] bridge0: port 3(syz_tun) entered disabled state [ 531.870062][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.877677][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.918846][T10787] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 533.147832][T10784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.187701][T10784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.242649][ T5624] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 533.293838][ T5882] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.304944][ T5882] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.314576][ T5882] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.331293][ T5882] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.421676][ T5741] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 533.526833][T10823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.631659][ T5741] usb 1-1: Using ep0 maxpacket: 32 [ 534.638906][ T5741] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.647650][ T5741] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 534.664169][ T5741] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 534.676639][ T5741] usb 1-1: config 14 has no interface number 0 [ 535.024067][ T5741] usb 1-1: config 14 has no interface number 1 [ 535.030327][ T5741] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 535.041341][ T5741] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 535.053397][ T5741] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 535.065341][ T5741] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 535.096080][ T5741] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 535.136395][ T5741] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.199589][ T5741] usb 1-1: config 14 interface 57 has no altsetting 0 [ 535.234432][ T5741] usb 1-1: config 14 interface 228 has no altsetting 0 [ 535.528325][ T5741] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 535.824505][T10843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1643'. [ 536.109393][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.117563][ T5741] usb 1-1: Product: syz [ 536.124213][ T5741] usb 1-1: Manufacturer: syz [ 536.138884][ T5741] usb 1-1: SerialNumber: syz [ 536.779207][ T5741] usb 1-1: can't set config #14, error -71 [ 537.159554][ T5741] usb 1-1: USB disconnect, device number 22 [ 537.434338][T10864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.606178][T10873] xt_hashlimit: size too large, truncated to 1048576 [ 537.639426][T10875] /dev/nullb0: Can't open blockdev [ 539.013370][T10893] bond1: entered allmulticast mode [ 539.019480][T10893] vlan2: entered allmulticast mode [ 539.371980][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 539.531706][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 539.630591][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.645883][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 539.662005][ T10] usb 3-1: can't read configurations, error -71 [ 540.304027][T10924] lo: entered allmulticast mode [ 540.357180][T10924] tunl0: entered allmulticast mode [ 540.426223][T10924] gre0: entered allmulticast mode [ 540.478944][T10924] gretap0: entered allmulticast mode [ 540.528467][T10924] erspan0: entered allmulticast mode [ 540.578555][T10924] ip_vti0: entered allmulticast mode [ 540.637542][T10924] ip6_vti0: entered allmulticast mode [ 540.688565][T10924] sit0: entered allmulticast mode [ 540.735856][T10924] ip6tnl0: entered allmulticast mode [ 540.779397][T10924] ip6gre0: entered allmulticast mode [ 540.828843][T10924] ip6gretap0: entered allmulticast mode [ 540.876922][T10924] bridge0: entered allmulticast mode [ 540.924261][T10924] bond0: entered allmulticast mode [ 540.963048][T10924] bond_slave_0: entered allmulticast mode [ 541.083701][T10924] bond_slave_1: entered allmulticast mode [ 541.106404][T10924] team0: entered allmulticast mode [ 541.156148][T10924] team_slave_0: entered allmulticast mode [ 541.271440][T10924] team_slave_1: entered allmulticast mode [ 541.302023][T10924] dummy0: entered allmulticast mode [ 541.305013][T10931] /dev/nullb0: Can't open blockdev [ 541.389854][T10924] nlmon0: entered allmulticast mode [ 541.477411][T10924] batadv0: entered allmulticast mode [ 541.486502][T10924] vxcan0: entered allmulticast mode [ 541.492210][T10924] vxcan1: entered allmulticast mode [ 541.497683][T10924] veth0: entered allmulticast mode [ 541.505311][T10924] veth1: entered allmulticast mode [ 541.511845][T10924] wg0: entered allmulticast mode [ 541.517292][T10924] wg1: entered allmulticast mode [ 541.522734][T10924] wg2: entered allmulticast mode [ 541.527876][T10924] veth0_to_bridge: entered allmulticast mode [ 541.537889][T10924] veth1_to_bridge: entered allmulticast mode [ 541.544540][T10924] veth0_to_bond: entered allmulticast mode [ 541.550751][T10924] veth1_to_bond: entered allmulticast mode [ 541.557304][T10924] veth0_to_team: entered allmulticast mode [ 541.563845][T10924] veth1_to_team: entered allmulticast mode [ 541.570029][T10924] veth0_to_batadv: entered allmulticast mode [ 541.576603][T10924] batadv_slave_0: entered allmulticast mode [ 541.582971][T10924] veth1_to_batadv: entered allmulticast mode [ 541.590523][T10924] batadv_slave_1: entered allmulticast mode [ 541.602816][T10924] xfrm0: entered allmulticast mode [ 541.612818][T10924] veth0_to_hsr: entered allmulticast mode [ 541.627201][T10924] hsr_slave_0: entered allmulticast mode [ 541.640076][T10924] veth1_to_hsr: entered allmulticast mode [ 541.651993][T10924] hsr_slave_1: entered allmulticast mode [ 541.658046][T10924] hsr0: entered allmulticast mode [ 541.664382][T10924] veth1_virt_wifi: entered allmulticast mode [ 541.670658][T10924] veth0_virt_wifi: entered allmulticast mode [ 541.678110][T10924] virt_wifi0: entered allmulticast mode [ 541.684237][T10924] veth1_vlan: entered allmulticast mode [ 541.690027][T10924] veth0_vlan: entered allmulticast mode [ 541.696209][T10924] vlan0: entered allmulticast mode [ 541.707195][T10924] vlan1: entered allmulticast mode [ 541.719398][T10924] macvlan0: entered allmulticast mode [ 541.731751][T10924] macvlan1: entered allmulticast mode [ 541.742373][T10924] ipvlan0: entered allmulticast mode [ 541.747941][T10924] ipvlan1: entered allmulticast mode [ 541.753793][T10924] veth1_macvtap: entered allmulticast mode [ 541.759833][T10924] veth0_macvtap: entered allmulticast mode [ 541.767139][T10924] macvtap0: entered allmulticast mode [ 541.778224][T10924] macsec0: entered allmulticast mode [ 541.789764][T10924] geneve0: entered allmulticast mode [ 541.812500][T10924] geneve1: entered allmulticast mode [ 541.825320][T10924] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 541.845826][T10924] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 541.862704][T10924] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 541.885034][T10924] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 541.904388][T10924] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 541.915236][T10924] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 541.923434][T10924] macvlan2: entered allmulticast mode [ 541.959456][T10937] syzkaller0: entered promiscuous mode [ 541.972207][T10937] syzkaller0: entered allmulticast mode [ 543.730027][ T30] audit: type=1400 audit(1782745097.934:504): avc: denied { read } for pid=10983 comm="syz.4.1691" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 543.783168][ T5624] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 543.791729][ T5624] Bluetooth: unknown link type 3 [ 543.797482][ T5624] Bluetooth: hci2: connection err: -111 [ 543.818404][ T30] audit: type=1400 audit(1782745097.934:505): avc: denied { open } for pid=10983 comm="syz.4.1691" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 544.586571][T10986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 544.834259][T10986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 545.006323][T10986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 545.015768][T10986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.022720][T10986] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 545.035394][T10986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 545.042114][T10986] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 545.054424][T10986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.060823][T10986] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 545.191167][T11013] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 545.214659][T11017] 9p: Bad value for 'rfdno' [ 545.874485][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1701'. [ 545.887400][T10989] Bluetooth: hci1: command 0x0406 tx timeout [ 545.898304][T11029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1701'. [ 546.196448][T11035] fuse: Unknown parameter '0x0000000000000003' [ 546.252563][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805562fc00: rx timeout, send abort [ 546.262960][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805562fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 546.542804][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 546.965168][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1714'. [ 547.081995][T10989] Bluetooth: hci3: command 0x0406 tx timeout [ 547.082012][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 547.089494][ T4926] Bluetooth: hci2: command 0x0406 tx timeout [ 547.476964][T11078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.847498][T11088] /dev/nullb0: Can't open blockdev [ 547.981806][T11065] Bluetooth: hci1: command 0x0406 tx timeout [ 548.694746][T11092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.714422][T11092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.728160][T11092] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.741496][T11092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.066097][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 550.491770][T11120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.581982][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 550.609240][T11131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.771727][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 550.773035][ T4926] Bluetooth: hci2: command 0x0406 tx timeout [ 550.777868][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 550.789835][T11065] Bluetooth: hci3: command 0x0406 tx timeout [ 550.940362][T11144] No source specified [ 552.987091][T11152] lo: entered allmulticast mode [ 553.020368][T11152] tunl0: entered allmulticast mode [ 553.042459][T11152] gre0: entered allmulticast mode [ 553.060603][T11152] gretap0: entered allmulticast mode [ 553.374391][T11152] erspan0: entered allmulticast mode [ 553.390877][T11152] ip_vti0: entered allmulticast mode [ 553.400741][T11152] ip6_vti0: entered allmulticast mode [ 553.411975][T11152] sit0: entered allmulticast mode [ 553.422159][T11152] ip6tnl0: entered allmulticast mode [ 553.434107][T11152] ip6gre0: entered allmulticast mode [ 553.446819][T11152] ip6gretap0: entered allmulticast mode [ 553.457768][T11152] bridge0: entered allmulticast mode [ 553.469978][T11152] vcan0: entered allmulticast mode [ 553.475402][T11152] bond0: entered allmulticast mode [ 553.480592][T11152] bond_slave_0: entered allmulticast mode [ 553.486494][T11152] bond_slave_1: entered allmulticast mode [ 553.492539][T11152] team0: entered allmulticast mode [ 553.498199][T11152] team_slave_0: entered allmulticast mode [ 553.504293][T11152] team_slave_1: entered allmulticast mode [ 553.510336][T11152] dummy0: entered allmulticast mode [ 553.515892][T11152] nlmon0: entered allmulticast mode [ 553.521788][T11152] batadv0: entered allmulticast mode [ 553.530097][T11152] vxcan0: entered allmulticast mode [ 553.535675][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 553.535740][T11152] vxcan1: entered allmulticast mode [ 553.549968][T11152] veth0: entered allmulticast mode [ 553.555720][T11152] veth1: entered allmulticast mode [ 553.561020][T11152] wg0: entered allmulticast mode [ 553.566189][T11152] wg1: entered allmulticast mode [ 553.571291][T11152] wg2: entered allmulticast mode [ 553.576911][T11152] veth0_to_bridge: entered allmulticast mode [ 553.583697][T11152] veth1_to_bridge: entered allmulticast mode [ 553.589918][T11152] veth0_to_bond: entered allmulticast mode [ 553.596406][T11152] veth1_to_bond: entered allmulticast mode [ 553.602568][T11152] veth0_to_team: entered allmulticast mode [ 553.608524][T11152] veth1_to_team: entered allmulticast mode [ 553.614761][T11152] veth0_to_batadv: entered allmulticast mode [ 553.620838][T11152] batadv_slave_0: entered allmulticast mode [ 553.627111][T11152] veth1_to_batadv: entered allmulticast mode [ 553.633303][T11152] batadv_slave_1: entered allmulticast mode [ 553.639375][T11152] xfrm0: entered allmulticast mode [ 553.644680][T11152] veth0_to_hsr: entered allmulticast mode [ 553.650529][T11152] hsr_slave_0: entered allmulticast mode [ 553.656433][T11152] veth1_to_hsr: entered allmulticast mode [ 553.662283][T11152] hsr_slave_1: entered allmulticast mode [ 553.668039][T11152] hsr0: entered allmulticast mode [ 553.673246][T11152] veth1_virt_wifi: entered allmulticast mode [ 553.679391][T11152] veth0_virt_wifi: entered allmulticast mode [ 553.686508][T11152] virt_wifi0: entered allmulticast mode [ 553.692362][T11152] veth1_vlan: entered allmulticast mode [ 553.698153][T11152] veth0_vlan: entered allmulticast mode [ 553.704364][T11152] vlan0: entered allmulticast mode [ 553.709571][T11152] vlan1: entered allmulticast mode [ 553.714882][T11152] macvlan0: entered allmulticast mode [ 553.720338][T11152] macvlan1: entered allmulticast mode [ 553.725894][T11152] ipvlan0: entered allmulticast mode [ 553.731269][T11152] ipvlan1: entered allmulticast mode [ 553.736845][T11152] veth1_macvtap: entered allmulticast mode [ 553.742856][T11152] veth0_macvtap: entered allmulticast mode [ 553.748820][T11152] macvtap0: entered allmulticast mode [ 553.754480][T11152] geneve0: entered allmulticast mode [ 553.760111][T11152] geneve1: entered allmulticast mode [ 553.765909][T11152] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 553.773485][T11152] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 553.780933][T11152] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 553.788417][T11152] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 553.795888][T11152] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 553.803751][T11152] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 553.810872][T11152] gtp0: entered allmulticast mode [ 554.031761][T11181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.685423][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.363885][T11234] overlayfs: missing 'lowerdir' [ 557.604075][T11249] syzkaller0: entered promiscuous mode [ 557.614734][T11249] syzkaller0: entered allmulticast mode [ 557.684660][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.528700][T11269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 558.538594][T11269] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 559.652203][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 559.688644][T11292] 9p: Bad value for 'rfdno' [ 560.353383][T11313] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 560.359847][T11313] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 560.368369][T11313] hsr0: entered promiscuous mode [ 560.433354][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 560.698278][T11324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.785487][T11328] syzkaller0: entered promiscuous mode [ 560.792575][T11328] syzkaller0: entered allmulticast mode [ 562.488589][ T30] audit: type=1400 audit(1782745116.704:506): avc: denied { read } for pid=11334 comm="syz.2.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.623173][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.791695][T11348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1819'. [ 562.881095][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1819'. [ 563.598468][ T30] audit: type=1400 audit(1782745117.804:507): avc: denied { read } for pid=11357 comm="syz.0.1821" path="socket:[32279]" dev="sockfs" ino=32279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 564.265823][T11374] fuse: Bad value for 'fd' [ 564.901901][T11360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.918394][T11360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.931138][T11360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 564.946958][T11360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.009776][T11379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.336100][T11385] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 565.391716][ T5712] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 565.564758][ T5712] usb 5-1: Using ep0 maxpacket: 8 [ 565.572721][ T5712] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 565.604046][ T5712] usb 5-1: config 0 has no interfaces? [ 565.620040][ T5712] usb 5-1: config 0 has no interfaces? [ 565.635070][ T5712] usb 5-1: config 0 has no interfaces? [ 565.644254][ T5712] usb 5-1: config 0 has no interfaces? [ 565.650873][ T5712] usb 5-1: config 0 has no interfaces? [ 565.659823][ T5712] usb 5-1: config 0 has no interfaces? [ 565.666896][ T5712] usb 5-1: config 0 has no interfaces? [ 565.674827][ T5712] usb 5-1: config 0 has no interfaces? [ 565.680731][ T5712] usb 5-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.00 [ 565.690177][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.704057][ T5712] usb 5-1: config 0 descriptor?? [ 565.723802][T11403] syzkaller0: entered promiscuous mode [ 565.730166][T11403] syzkaller0: entered allmulticast mode [ 565.747505][ T30] audit: type=1400 audit(1782745119.954:508): avc: denied { ioctl } for pid=11404 comm="syz.0.1841" path="socket:[32372]" dev="sockfs" ino=32372 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 565.961214][ T5712] usb 5-1: USB disconnect, device number 18 [ 565.998187][ T5727] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 566.181667][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 566.931782][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 566.937901][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 567.001991][T11065] Bluetooth: hci3: command 0x0406 tx timeout [ 567.008137][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 567.096493][T11428] /dev/nullb0: Can't open blockdev [ 567.605715][T11423] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 567.664970][T11434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.668278][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.689614][ T5727] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 567.698713][ T5727] usb 2-1: can't read configurations, error -71 [ 567.806990][T11440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.189265][T11455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 568.201829][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1859'. [ 568.210844][T11455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1859'. [ 568.248899][T11458] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 568.345822][T11065] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 568.488876][T11459] syzkaller0: entered promiscuous mode [ 568.513649][T11459] syzkaller0: entered allmulticast mode [ 570.121726][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 570.281979][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 570.843600][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.870292][T11493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.874530][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 570.897986][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 570.915915][ T10] usb 5-1: can't read configurations, error -71 [ 571.037732][ T30] audit: type=1400 audit(1782745125.244:509): avc: denied { read } for pid=11496 comm="syz.3.1875" name="file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 571.081760][ T30] audit: type=1400 audit(1782745125.244:510): avc: denied { open } for pid=11496 comm="syz.3.1875" path="/368/file0/file0" dev="fuse" ino=36028797018963968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 571.098936][T11065] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 571.451932][ T5727] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 572.638861][T11522] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 572.663403][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 572.675278][ T5727] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 572.691984][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.702791][ T5624] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 572.711862][ T5727] usb 1-1: Product: syz [ 572.720611][ T5727] usb 1-1: Manufacturer: syz [ 572.725607][ T5727] usb 1-1: SerialNumber: syz [ 572.735440][ T5727] usb 1-1: config 0 descriptor?? [ 572.744013][ T5727] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 572.753450][ T5727] pctv452e: pctv452e_power_ctrl: 1 [ 572.753450][ T5727] [ 572.761893][ T5727] usb 1-1: selecting invalid altsetting 3 [ 572.767909][ T5727] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 572.767909][ T5727] [ 572.780062][ T5727] dvb-usb: bulk message failed: -22 (5/0) [ 572.789326][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.800064][ T5727] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 572.808535][ T5727] usb 1-1: media controller created [ 572.811145][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.814423][ T5727] dvb-usb: bulk message failed: -22 (8/0) [ 572.831323][ T5727] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 572.840343][ T5727] dvb-usb: MAC address reading failed. [ 572.865062][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.916290][T11531] [ 572.918636][T11531] ====================================================== [ 572.919042][ T5727] DVB: Unable to find symbol stb0899_attach() [ 572.925629][T11531] WARNING: possible circular locking dependency detected [ 572.925640][T11531] syzkaller #0 Tainted: G L [ 572.925650][T11531] ------------------------------------------------------ [ 572.925657][T11531] syz.1.1886/11531 is trying to acquire lock: [ 572.925667][T11531] ffff888023a9bc68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 572.925720][T11531] [ 572.925720][T11531] but task is already holding lock: [ 572.925726][T11531] ffff888023a98260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 572.925779][T11531] [ 572.925779][T11531] which lock already depends on the new lock. [ 572.925779][T11531] [ 572.925785][T11531] [ 572.925785][T11531] the existing dependency chain (in reverse order) is: [ 572.925792][T11531] [ 572.925792][T11531] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 572.925831][T11531] lock_acquire+0x1b9/0x370 [ 572.925854][T11531] lock_sock_nested+0x41/0xf0 [ 572.925880][T11531] smc_listen_out+0x1f5/0x4b0 [ 572.925904][T11531] smc_listen_work+0x767/0x50e0 [ 572.925930][T11531] process_one_work+0xa23/0x1940 [ 572.925949][T11531] worker_thread+0x5ef/0xe50 [ 572.925969][T11531] kthread+0x370/0x450 [ 572.925986][T11531] ret_from_fork+0x72b/0xd50 [ 572.932859][ T5727] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 572.939023][T11531] ret_from_fork_asm+0x1a/0x30 [ 572.939045][T11531] [ 572.939045][T11531] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 573.077057][T11531] check_prev_add+0xeb/0xe60 [ 573.082154][T11531] __lock_acquire+0x136c/0x1a40 [ 573.087505][T11531] lock_acquire+0x1b9/0x370 [ 573.092506][T11531] __flush_work+0x4de/0xcb0 [ 573.097510][T11531] cancel_work_sync+0xd1/0xf0 [ 573.102688][T11531] smc_clcsock_release+0x5f/0xe0 [ 573.108131][T11531] __smc_release+0x5c2/0x880 [ 573.113222][T11531] smc_close_non_accepted+0xda/0x200 [ 573.119010][T11531] smc_close_active+0x4ff/0x1070 [ 573.124450][T11531] __smc_release+0x634/0x880 [ 573.129541][T11531] smc_release+0x1fc/0x620 [ 573.134458][T11531] __sock_release+0xb3/0x260 [ 573.139548][T11531] sock_close+0x1c/0x30 [ 573.144202][T11531] __fput+0x3ff/0xb50 [ 573.148696][T11531] task_work_run+0x150/0x240 [ 573.154044][T11531] exit_to_user_mode_loop+0x1d8/0x6f0 [ 573.159927][T11531] do_syscall_64+0x666/0x870 [ 573.165044][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.171448][T11531] [ 573.171448][T11531] other info that might help us debug this: [ 573.171448][T11531] [ 573.181659][T11531] Possible unsafe locking scenario: [ 573.181659][T11531] [ 573.189091][T11531] CPU0 CPU1 [ 573.194434][T11531] ---- ---- [ 573.199775][T11531] lock(sk_lock-AF_SMC/1); [ 573.204265][T11531] lock((work_completion)(&new_smc->smc_listen_work)); [ 573.213695][T11531] lock(sk_lock-AF_SMC/1); [ 573.220701][T11531] lock((work_completion)(&new_smc->smc_listen_work)); [ 573.227619][T11531] [ 573.227619][T11531] *** DEADLOCK *** [ 573.227619][T11531] [ 573.235732][T11531] 3 locks held by syz.1.1886/11531: [ 573.240904][T11531] #0: ffff888055a02a80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 573.251425][T11531] #1: ffff888023a98260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 573.260809][T11531] #2: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 573.269928][T11531] [ 573.269928][T11531] stack backtrace: [ 573.275794][T11531] CPU: 1 UID: 0 PID: 11531 Comm: syz.1.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.275819][T11531] Tainted: [L]=SOFTLOCKUP [ 573.275825][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.275836][T11531] Call Trace: [ 573.275842][T11531] [ 573.275848][T11531] dump_stack_lvl+0x100/0x190 [ 573.275871][T11531] print_circular_bug.cold+0x178/0x1c7 [ 573.275897][T11531] check_noncircular+0x146/0x160 [ 573.275919][T11531] ? trace_sched_exit_tp+0x120/0x160 [ 573.275947][T11531] check_prev_add+0xeb/0xe60 [ 573.275967][T11531] __lock_acquire+0x136c/0x1a40 [ 573.275990][T11531] lock_acquire+0x1b9/0x370 [ 573.276009][T11531] ? __flush_work+0x4ca/0xcb0 [ 573.276027][T11531] ? preempt_schedule_thunk+0x16/0x40 [ 573.276047][T11531] ? __flush_work+0x4ca/0xcb0 [ 573.276065][T11531] __flush_work+0x4de/0xcb0 [ 573.276082][T11531] ? __flush_work+0x4ca/0xcb0 [ 573.276101][T11531] ? __pfx___flush_work+0x10/0x10 [ 573.276119][T11531] ? __lock_acquire+0x49f/0x1a40 [ 573.276138][T11531] ? __pfx_wq_barrier_func+0x10/0x10 [ 573.276165][T11531] ? __pfx___might_resched+0x10/0x10 [ 573.276186][T11531] cancel_work_sync+0xd1/0xf0 [ 573.276206][T11531] smc_clcsock_release+0x5f/0xe0 [ 573.276230][T11531] __smc_release+0x5c2/0x880 [ 573.276251][T11531] ? __pfx_sock_def_readable+0x10/0x10 [ 573.276266][T11531] smc_close_non_accepted+0xda/0x200 [ 573.276289][T11531] smc_close_active+0x4ff/0x1070 [ 573.276313][T11531] __smc_release+0x634/0x880 [ 573.276334][T11531] smc_release+0x1fc/0x620 [ 573.276354][T11531] __sock_release+0xb3/0x260 [ 573.276371][T11531] ? __pfx_sock_close+0x10/0x10 [ 573.276388][T11531] sock_close+0x1c/0x30 [ 573.276403][T11531] __fput+0x3ff/0xb50 [ 573.276423][T11531] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.276446][T11531] task_work_run+0x150/0x240 [ 573.276464][T11531] ? __pfx_task_work_run+0x10/0x10 [ 573.276484][T11531] exit_to_user_mode_loop+0x1d8/0x6f0 [ 573.276505][T11531] ? rcu_is_watching+0x12/0xc0 [ 573.276530][T11531] do_syscall_64+0x666/0x870 [ 573.276552][T11531] ? clear_bhb_loop+0x40/0x90 [ 573.276570][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.276587][T11531] RIP: 0033:0x7f09abd9ce59 [ 573.276609][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.276626][T11531] RSP: 002b:00007ffd4fc3edc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 573.276645][T11531] RAX: 0000000000000000 RBX: 00007ffd4fc3eeb0 RCX: 00007f09abd9ce59 [ 573.276656][T11531] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 573.276666][T11531] RBP: 000000000008bdaa R08: 0000000000000001 R09: 0000000000000000 [ 573.276676][T11531] R10: 0000001b32220000 R11: 0000000000000246 R12: 00007ffd4fc3eef0 [ 573.276687][T11531] R13: 00007f09ac015fac R14: 000000000008bdef R15: 00007f09ac015fa0 [ 573.276703][T11531] [ 573.643494][ T5727] rc_core: IR keymap rc-tt-1500 not found [ 573.649276][ T5727] Registered IR keymap rc-empty [ 573.659910][ T5727] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 573.671435][ T5727] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 573.682877][ T5727] dvb-usb: schedule remote query interval to 100 msecs. [ 573.689832][ T5727] pctv452e: pctv452e_power_ctrl: 0 [ 573.689832][ T5727] [ 573.697353][ T5727] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 573.801676][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 573.807489][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 573.921931][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 573.927699][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.041682][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 574.047590][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.161731][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 574.167559][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.281683][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 574.287486][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.401707][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 574.407499][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.521713][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 574.527731][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.641684][ T5727] dvb-usb: bulk message failed: -22 (4/0) [ 574.647505][ T5727] dvb-usb: error -22 while querying for an remote control event. [ 574.661710][ T5727] usb 1-1: USB disconnect, device number 23 [ 574.687221][ T5727] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.