last executing test programs: 8.747166448s ago: executing program 1 (id=4908): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400ffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @quote={{0xfb, 0x1}}}], 0x1c) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) 7.654237404s ago: executing program 1 (id=4912): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x60040050) 7.489421329s ago: executing program 1 (id=4915): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) pipe2(&(0x7f00000000c0), 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x18a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 5.934377023s ago: executing program 2 (id=4920): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setresuid(0xee00, 0xee00, 0xee00) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2000, @empty}, 0x1c) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000680)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)}, {&(0x7f0000001a80)="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", 0x436}], 0x2}}], 0x3, 0x0) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.925624297s ago: executing program 0 (id=4921): socket$inet6_sctp(0xa, 0x2, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.00656549s ago: executing program 4 (id=4922): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 4.390295159s ago: executing program 2 (id=4924): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000054000000080001007063690011000200"], 0x30}}, 0x0) close(r2) 4.133478441s ago: executing program 2 (id=4925): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') openat(r0, &(0x7f0000000040)='./file0\x00', 0x290000, 0x0) 4.006618032s ago: executing program 1 (id=4927): shutdown(0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x882100, 0x0) syz_emit_vhci(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fanotify_init(0x10, 0x8000) syz_emit_vhci(&(0x7f0000001540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x7, 0x70c, 0xe00, 0x6}}}}, 0x15) 3.992697477s ago: executing program 2 (id=4928): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r3 = syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 3.977803453s ago: executing program 1 (id=4929): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101343) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) 3.833509252s ago: executing program 3 (id=4930): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.814876347s ago: executing program 0 (id=4931): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x13, 0x100, 0x70bd27, 0x25dfdbfb, {0x9}, [@typed={0x8, 0xff, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240000d4) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi4\x00', 0x840, 0x0) syz_emit_vhci(&(0x7f00000021c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0xe7}, {0x7, 0xfc, 0x5, 0x1, 0x3f0, 0x1}}}}, 0xf) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x2) 3.793637018s ago: executing program 3 (id=4932): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xb0}]}, 0x20}}, 0x84) 3.613623197s ago: executing program 4 (id=4933): setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="6e397ace314c9c0a24eb8a94e54f34313e5377b6524c313c79965cba588d03e4fd54976b6eb39eea7ce070770ce0cc31207f184feaf3f5f4ed64372805420fb6208d872484b18439c6a116211f29d0f6871809e266a68126e16ab188784e17b6d5caa3cae7b247917063c56770758306fe493c879e0196417e87bfd3389414a7acc34aca65beaebb129efac992fcd4e1bf631ac07de9c2379a62e4ed39d689d5982e4304bcab5d26e8e8b8bb4fc0061d29972ab2720982bced911f888173d6335c02f008da089892d56e6f1adc4349be7bfb5285464e13fcb5487ee9402809880ca5f1d47dd3bbc14a368f84d86d8c193e83fbf93b", 0x9979) 3.432760547s ago: executing program 3 (id=4934): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_open_dev$I2C(0x0, 0x7fffffffffffffff, 0x426400) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x80000000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x280) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000240)=""/161) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x94, 0x0, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x2, 0x6, 0x4, 0x2, 0xd83, 0x5, 0x5]}) 3.382343488s ago: executing program 4 (id=4935): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x22, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e62}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) 2.105913461s ago: executing program 3 (id=4936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) 2.032405593s ago: executing program 4 (id=4937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000f80e00000008000300", @ANYRES32=r2], 0x70}}, 0x0) 1.802908036s ago: executing program 0 (id=4938): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000001200)=@sha1={0x1, "133f9613e19d9ae35fcacf2bf3c557a71b10d14b"}, 0x15, 0x0) write$binfmt_script(r1, &(0x7f0000001880)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0', [{0x20, '\xedp*\xc3\\1b\xf1t\xea\x99_\xf6\a\xe4m\x87f\xbb6a\xbeT\xa8\x10\xe3\xac\xa5K\xcd\n\x87\xb6\x8fg\xae\x15c\x05\xa3\x0f\xd6\x86m\x9a\xd5\xef=\xca\xaeil=\x106\x15\xa8k\x9bd\xc6\x94\xfc0\xfa\xd4\x00\xec\xab\x1a\x0e\xfd\xd4\x1d\xb6x'}], 0xa, "53d17f773b9e3bf1a2beda038153434360e8f158b03424f158aa10aec9570591ef74426974de0911b73bea61eda42af0fb649bcb7eb7a6cc92a633a1eb246797ead83e058a43ea212df933979d16cf2d01097794ac2ce6d7e09e971a5939da571eb8b1e2fd251440e34a73df49d4f694f67b76059ce6b2846a5f6dddc7b17e2174f80e32394c0a760a56b0f3c83695c63bfecc3d37c7e68ff7aeb8c1c8be944cf191ae706d"}, 0x10fa) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143103) socket$can_j1939(0x1d, 0x2, 0x7) getpgrp(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') 1.699040317s ago: executing program 0 (id=4939): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x1, 0xfffffffc, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 1.613667148s ago: executing program 4 (id=4940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.369463188s ago: executing program 4 (id=4941): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.037049039s ago: executing program 3 (id=4942): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 896.932944ms ago: executing program 3 (id=4943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000200)=0x404, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006e80)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x7fffffffffffffff, {0x2, 0x3, 0x80000000, 0x10000, 0x0, 0x0, {0x2, 0xfffffffffffffff9, 0x3, 0xeb, 0x1, 0x400, 0x2, 0x1, 0x7f, 0x4000, 0xffffb96d, 0x0, 0x0, 0xa0000000, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) 725.312567ms ago: executing program 2 (id=4944): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xb0}]}, 0x20}}, 0x84) 667.695728ms ago: executing program 0 (id=4945): r0 = openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x3, 0x80008000, 0x9, 0x2, 0x4, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xfffb, 0xffff, 0xffffffa8, 0x40000009, 0xa40000, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) 666.124928ms ago: executing program 2 (id=4946): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x440, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x5, 0xfff1}, {0xc, 0x4}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="250600e0a4000000000008000000"], 0x14}}, 0x4800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="09000000010000", 0x7) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, 0x0, 0x4040011) socket$nl_route(0x10, 0x3, 0x0) 438.594277ms ago: executing program 0 (id=4947): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 0s ago: executing program 1 (id=4948): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x13, 0x100, 0x70bd27, 0x25dfdbfb, {0x9}, [@typed={0x8, 0xff, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x240000d4) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi4\x00', 0x840, 0x0) syz_emit_vhci(&(0x7f00000021c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0xe7}, {0x7, 0xfc, 0x5, 0x1, 0x3f0, 0x1}}}}, 0xf) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x2) kernel console output (not intermixed with test programs): lass=netlink_tcpdiag_socket pid=22322 comm=syz.4.3878 [ 1549.753539][T22375] 9pnet_fd: Insufficient options for proto=fd [ 1549.915265][T22370] lo speed is unknown, defaulting to 1000 [ 1549.924873][T22373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22373 comm=syz.1.3890 [ 1551.104663][T22394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22394 comm=syz.1.3894 [ 1552.327519][T22406] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3895'. [ 1553.717810][T22418] 9pnet_fd: Insufficient options for proto=fd [ 1554.428356][T22426] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1557.557974][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.568760][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.231895][T22460] lo speed is unknown, defaulting to 1000 [ 1565.373014][T22530] netlink: 'syz.1.3923': attribute type 4 has an invalid length. [ 1565.380851][T22530] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1566.046330][T22531] lo speed is unknown, defaulting to 1000 [ 1569.385042][T22564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22564 comm=syz.3.3932 [ 1569.601774][T22566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22566 comm=syz.2.3931 [ 1570.153646][T11990] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1570.937589][T11990] usb 4-1: Using ep0 maxpacket: 16 [ 1570.959377][T11990] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 1570.974789][T11990] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1571.185223][T11990] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1571.197735][T11990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1571.224885][T11990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1571.242840][T11990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1572.543004][T11990] usb 4-1: string descriptor 0 read error: -71 [ 1572.701773][T11990] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1573.277747][T11990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.312195][T11990] usb 4-1: config 0 descriptor?? [ 1573.970503][T11990] usb 4-1: can't set config #0, error -71 [ 1573.980654][T11990] usb 4-1: USB disconnect, device number 38 [ 1574.387725][T22604] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1578.543385][T22644] netlink: 'syz.1.3947': attribute type 4 has an invalid length. [ 1578.551345][T22644] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1580.751287][T22663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22663 comm=syz.1.3952 [ 1581.686868][T22672] netlink: 'syz.1.3954': attribute type 4 has an invalid length. [ 1581.695083][T22672] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3954'. [ 1582.772886][T22685] lo speed is unknown, defaulting to 1000 [ 1584.360005][T22703] netlink: 'syz.0.3961': attribute type 4 has an invalid length. [ 1584.367927][T22703] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1585.051531][T22707] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3960'. [ 1585.829754][T22719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22719 comm=syz.3.3964 [ 1589.703464][T22758] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 1589.711496][T22758] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1591.245581][T22765] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 1591.253428][T22765] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3973'. [ 1599.685650][T22840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22840 comm=syz.1.3989 [ 1602.180195][T22858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22858 comm=syz.4.3993 [ 1603.091469][T11987] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1604.460048][T11987] usb 5-1: Using ep0 maxpacket: 16 [ 1604.594818][T11987] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1605.172552][T11987] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1605.248783][T11987] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1605.326042][T11987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1605.346896][T11987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1605.368838][T11987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1605.422072][T11987] usb 5-1: string descriptor 0 read error: -71 [ 1605.428414][T11987] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1605.454563][T11987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.466532][T11987] usb 5-1: config 0 descriptor?? [ 1605.472249][T11987] usb 5-1: can't set config #0, error -71 [ 1605.482397][T11987] usb 5-1: USB disconnect, device number 48 [ 1609.293286][T22926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22926 comm=syz.1.4005 [ 1613.887069][T22962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22962 comm=syz.1.4012 [ 1619.174982][T23012] 9pnet_fd: Insufficient options for proto=fd [ 1619.261183][T23013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1622.861431][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1622.867745][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1625.489681][T23069] lo speed is unknown, defaulting to 1000 [ 1626.477708][T23079] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1626.705268][T23082] Bluetooth: MGMT ver 1.23 [ 1626.741064][T23089] 9pnet_fd: Insufficient options for proto=fd [ 1627.363874][T23094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23094 comm=syz.1.4036 [ 1632.234576][T23141] 9pnet_fd: Insufficient options for proto=fd [ 1635.164450][T23154] lo speed is unknown, defaulting to 1000 [ 1636.746136][T23170] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1636.973661][T23183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23183 comm=syz.4.4052 [ 1638.776665][T11647] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1639.172374][T11647] usb 5-1: Using ep0 maxpacket: 16 [ 1639.222495][T23200] 9pnet_fd: Insufficient options for proto=fd [ 1639.232275][T11647] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1639.257976][T11647] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1639.288392][T11647] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1639.323596][T11647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1639.360015][T11647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1639.405117][T11647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1639.449418][T11647] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1639.458903][T11647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.477533][T11647] usb 5-1: Product: syz [ 1639.497859][T11647] usb 5-1: Manufacturer: syz [ 1639.515442][T11647] usb 5-1: SerialNumber: syz [ 1639.563284][T11647] usb 5-1: config 0 descriptor?? [ 1639.571617][T23203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23203 comm=syz.3.4058 [ 1639.619232][T11647] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1639.641528][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1639.673714][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1639.682218][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1639.764227][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1639.785021][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1640.059560][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1640.351129][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1640.383461][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1640.433998][T11647] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1640.457812][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1640.622805][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1640.630578][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1640.643520][ T24] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 1640.656748][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1640.669281][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1640.694542][T11647] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1640.705164][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1640.728046][T11647] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1640.943654][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1641.015334][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1641.026663][T11647] usb 5-1: USB disconnect, device number 49 [ 1641.035061][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1641.049226][T11647] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1641.115822][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1641.130471][T11647] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1641.154150][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.185636][T11647] keyspan 5-1:0.0: device disconnected [ 1641.201865][ T24] usb 4-1: Product: syz [ 1641.206311][ T24] usb 4-1: Manufacturer: syz [ 1641.214691][ T24] usb 4-1: SerialNumber: syz [ 1641.221043][ T24] usb 4-1: config 0 descriptor?? [ 1641.241994][ T24] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1641.252294][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 1641.289088][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1641.308167][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1641.332436][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1641.348698][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1641.368274][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1641.394990][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1641.439299][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1641.448458][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1641.581133][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1641.599086][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1641.640749][ T24] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1641.760543][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1642.426677][T23224] lo speed is unknown, defaulting to 1000 [ 1642.519656][ T24] usb 4-1: USB disconnect, device number 39 [ 1642.637907][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1642.689593][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1642.715657][ T24] keyspan 4-1:0.0: device disconnected [ 1644.560364][T17781] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1645.862418][T17781] usb 1-1: config 0 has no interfaces? [ 1645.878474][T17781] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1645.913079][T17781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.942276][T17781] usb 1-1: config 0 descriptor?? [ 1646.258160][T23267] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23267 comm=syz.2.4071 [ 1647.974195][T23286] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1649.394614][ T5934] usb 1-1: USB disconnect, device number 52 [ 1651.611067][T23315] lo speed is unknown, defaulting to 1000 [ 1653.302549][T23345] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1655.346563][T23351] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4087'. [ 1655.535262][T23353] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1656.713456][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1657.008934][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1657.033359][ T24] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1657.043242][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1657.102818][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1657.126547][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1657.330659][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1657.629472][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1657.665493][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1657.718961][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.877365][T23378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23378 comm=syz.2.4093 [ 1657.890643][ T24] usb 1-1: Product: syz [ 1657.896639][ T24] usb 1-1: Manufacturer: syz [ 1657.901252][ T24] usb 1-1: SerialNumber: syz [ 1657.918922][ T24] usb 1-1: config 0 descriptor?? [ 1658.033042][ T24] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1658.040653][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 1658.051896][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1658.229550][T23387] netlink: 'syz.1.4095': attribute type 4 has an invalid length. [ 1658.237443][T23387] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1658.545264][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1658.553182][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1658.641753][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1658.900781][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1658.917663][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1658.961965][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1658.984252][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1660.863576][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1660.871238][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1660.916939][ T24] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1660.960791][ T24] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1660.983045][ T24] usb 1-1: USB disconnect, device number 53 [ 1661.566569][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1661.589077][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1661.602217][ T24] keyspan 1-1:0.0: device disconnected [ 1669.702476][T23496] 9pnet_fd: Insufficient options for proto=fd [ 1674.432207][T23549] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4126'. [ 1687.340714][T23638] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4144'. [ 1687.371515][T23636] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4145'. [ 1687.830673][T23647] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4147'. [ 1688.531238][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1688.537544][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1691.297436][T23689] 9pnet_fd: Insufficient options for proto=fd [ 1691.321086][T23689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1691.336162][T23689] sp0: Synchronizing with TNC [ 1698.815789][T23774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23774 comm=syz.1.4172 [ 1701.590570][T23811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23811 comm=syz.1.4180 [ 1701.763292][T23816] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4179'. [ 1704.861601][T23844] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23844 comm=syz.0.4186 [ 1705.658494][T17781] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1706.067542][T17781] usb 1-1: Using ep0 maxpacket: 16 [ 1706.568733][T17781] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1706.579454][T17781] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1706.787111][T17781] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1706.808713][T17781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1706.821538][T17781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1706.835236][T17781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1706.867357][T17781] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1706.876841][T17781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.884903][T17781] usb 1-1: Product: syz [ 1706.889388][T17781] usb 1-1: Manufacturer: syz [ 1706.894557][T17781] usb 1-1: SerialNumber: syz [ 1706.901651][T17781] usb 1-1: config 0 descriptor?? [ 1706.908805][T17781] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1706.917013][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 1706.925524][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1706.938425][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1706.949139][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1707.775171][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1707.782804][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1707.844610][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1707.892531][T17781] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1707.946769][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1707.954469][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1707.978242][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1707.989051][T17781] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1708.001021][T17781] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1708.017824][T17781] usb 1-1: USB disconnect, device number 54 [ 1708.035189][T17781] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1708.046108][T17781] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1708.057203][T17781] keyspan 1-1:0.0: device disconnected [ 1710.416675][T23901] QAT: failed to copy from user cfg_data. [ 1713.516874][T23935] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4201'. [ 1714.481369][T23940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23940 comm=syz.2.4204 [ 1714.604751][T23943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23943 comm=syz.0.4205 [ 1715.000819][T11987] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1716.091182][T11987] usb 1-1: Using ep0 maxpacket: 16 [ 1716.179767][T11987] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1716.202692][T11987] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1716.304401][T11987] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1716.314084][T11987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1716.324227][T11987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1716.335562][T11987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1716.392511][T11987] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1716.560801][T23964] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4208'. [ 1716.861138][T11987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.869480][T11987] usb 1-1: Product: syz [ 1716.874095][T11987] usb 1-1: Manufacturer: syz [ 1716.878764][T11987] usb 1-1: SerialNumber: syz [ 1716.888146][T11987] usb 1-1: config 0 descriptor?? [ 1716.905871][T11987] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1716.913536][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 1716.922368][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1716.947987][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1716.971319][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1716.989445][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1716.997191][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1717.006763][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1717.015843][T11987] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1717.268186][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1717.286589][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1717.297119][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1717.305620][T11987] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1717.893518][T11987] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1719.155914][T16933] usb 1-1: USB disconnect, device number 55 [ 1719.173214][T16933] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1719.305679][T16933] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1719.329241][T16933] keyspan 1-1:0.0: device disconnected [ 1724.466612][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1724.513877][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1724.590271][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1724.614141][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1724.623772][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1724.640011][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1724.665545][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1724.684216][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1724.696198][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1724.707333][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1724.718030][ T30] audit: type=1400 audit(1753918215.389:549): avc: denied { mounton } for pid=24037 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1724.792023][T24037] lo speed is unknown, defaulting to 1000 [ 1724.911688][T24043] 9pnet_fd: Insufficient options for proto=fd [ 1724.921461][T24043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1724.933569][T24043] sp0: Synchronizing with TNC [ 1725.568525][T24045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24045 comm=syz.2.4226 [ 1726.014050][T24037] chnl_net:caif_netlink_parms(): no params data found [ 1726.738766][T24070] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1727.039048][ T5831] Bluetooth: hci4: command tx timeout [ 1727.100544][T24076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24076 comm=syz.2.4231 [ 1727.571357][T24037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.746514][T24037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.755196][T24037] bridge_slave_0: entered allmulticast mode [ 1727.774570][T24037] bridge_slave_0: entered promiscuous mode [ 1727.820088][T24037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.839361][T24037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.890964][T24037] bridge_slave_1: entered allmulticast mode [ 1727.926190][T24037] bridge_slave_1: entered promiscuous mode [ 1728.120827][T24037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.138847][T24037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.303799][T24037] team0: Port device team_slave_0 added [ 1728.362716][T24037] team0: Port device team_slave_1 added [ 1728.729372][T24037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.762119][T24037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.295490][ T5831] Bluetooth: hci4: command tx timeout [ 1729.450769][T24105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24105 comm=syz.4.4237 [ 1729.474390][T24037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.533403][T24037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.540549][T24037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.566664][T24037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.751997][T24037] hsr_slave_0: entered promiscuous mode [ 1729.762601][T24037] hsr_slave_1: entered promiscuous mode [ 1729.786534][T24037] debugfs: 'hsr0' already exists in 'hsr' [ 1729.811911][T24037] Cannot create hsr debugfs directory [ 1729.849432][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1730.236621][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1730.282466][ T24] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1730.312843][ T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1730.331456][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1730.340648][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1730.350427][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1730.361707][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1730.373492][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1730.382630][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.390713][ T24] usb 5-1: Product: syz [ 1730.394886][ T24] usb 5-1: Manufacturer: syz [ 1730.399746][ T24] usb 5-1: SerialNumber: syz [ 1730.408671][ T24] usb 5-1: config 0 descriptor?? [ 1730.421875][ T24] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1730.431528][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1730.441317][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1730.451228][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1730.474696][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1730.510359][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1730.571503][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1730.603788][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1730.627114][T24037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1730.649802][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1730.661404][T24037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.764457][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1731.286374][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1731.297197][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1731.323601][ T24] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1731.400328][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1731.529915][ T5831] Bluetooth: hci4: command tx timeout [ 1731.542174][ T24] usb 5-1: USB disconnect, device number 50 [ 1731.657302][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1731.694888][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1731.710537][ T24] keyspan 5-1:0.0: device disconnected [ 1731.786297][T24037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.813314][T24037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.901797][T24037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1731.944526][T24037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.053753][T24037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.223600][T24037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.583328][T24149] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1733.997942][ T5831] Bluetooth: hci4: command tx timeout [ 1734.160687][T24037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1734.197788][T24037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1734.228490][T24037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1734.255431][T24037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1734.926893][T24163] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4246'. [ 1735.538744][T24037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.571413][T24037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1735.597358][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.604531][T10430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.751491][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.758792][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.781659][T24037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1736.951756][T24037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1737.080712][T24037] veth0_vlan: entered promiscuous mode [ 1737.222215][T24037] veth1_vlan: entered promiscuous mode [ 1737.266840][T24192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24192 comm=syz.4.4250 [ 1737.404457][T24037] veth0_macvtap: entered promiscuous mode [ 1737.423193][T24037] veth1_macvtap: entered promiscuous mode [ 1737.498474][T24037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.510700][T24037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.593819][T22427] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.626305][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.664542][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.702588][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.303150][ T5934] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1738.537504][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 1739.033555][ T5934] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1739.051928][ T5934] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1739.063768][T10430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.077214][ T5934] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1739.086132][T10430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.202495][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1739.343315][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1739.366430][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.374276][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.383242][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1739.628449][ T5934] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1739.642480][ T30] audit: type=1400 audit(1753918229.327:550): avc: denied { mounton } for pid=24037 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1739.700288][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.712886][ T5934] usb 5-1: Product: syz [ 1739.717302][ T5934] usb 5-1: Manufacturer: syz [ 1739.723245][ T5934] usb 5-1: SerialNumber: syz [ 1739.730596][ T5934] usb 5-1: config 0 descriptor?? [ 1739.738689][ T5934] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1739.748236][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1739.799192][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1739.818890][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1739.835215][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1739.859372][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1740.792801][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1740.809888][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1741.000484][ T5934] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1741.030728][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1741.045024][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1741.063445][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1741.085048][ T5934] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1741.109887][ T5934] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1741.147033][ T5934] usb 5-1: USB disconnect, device number 51 [ 1741.186019][ T5934] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1741.375217][ T5934] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1741.385597][ T5934] keyspan 5-1:0.0: device disconnected [ 1741.476101][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1741.905652][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1741.940385][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1741.949050][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1741.958171][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1741.965870][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1742.068400][T24236] lo speed is unknown, defaulting to 1000 [ 1744.102302][T24236] chnl_net:caif_netlink_parms(): no params data found [ 1744.186354][ T5831] Bluetooth: hci5: command tx timeout [ 1744.726987][T24236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.735499][T24236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.744251][T24236] bridge_slave_0: entered allmulticast mode [ 1744.751956][T24236] bridge_slave_0: entered promiscuous mode [ 1744.767483][T24236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.987951][T24236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.077329][T24236] bridge_slave_1: entered allmulticast mode [ 1745.090972][T24236] bridge_slave_1: entered promiscuous mode [ 1745.548438][T24236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.560705][T24236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.108300][T24236] team0: Port device team_slave_0 added [ 1746.116092][T24293] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1746.138187][T24236] team0: Port device team_slave_1 added [ 1746.255639][T24236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.266443][T24236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.405571][T24236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.410800][ T5831] Bluetooth: hci5: command tx timeout [ 1746.487420][T24236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.494408][T24236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.091483][T24236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.172974][T24236] hsr_slave_0: entered promiscuous mode [ 1747.182569][T24236] hsr_slave_1: entered promiscuous mode [ 1747.191642][T24306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24306 comm=syz.1.4270 [ 1747.212380][T24236] debugfs: 'hsr0' already exists in 'hsr' [ 1747.253010][T24236] Cannot create hsr debugfs directory [ 1747.523487][T23989] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1747.693564][T23989] usb 2-1: Using ep0 maxpacket: 16 [ 1747.768013][T23989] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 1747.778599][T23989] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1747.798731][T23989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1747.917110][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1747.941785][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1748.020227][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1748.047680][T23989] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1748.060117][T23989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.068568][T23989] usb 2-1: Product: syz [ 1748.076991][T23989] usb 2-1: Manufacturer: syz [ 1748.083912][T23989] usb 2-1: SerialNumber: syz [ 1748.089981][T23989] usb 2-1: config 0 descriptor?? [ 1748.105730][T23989] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1748.113798][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 1748.121549][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1748.133404][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1748.146135][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1748.202535][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1748.216894][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1748.231010][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1748.244043][T23989] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1748.412108][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1748.424501][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1748.436755][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1748.512128][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1748.533973][T23989] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1748.665660][ T5831] Bluetooth: hci5: command tx timeout [ 1748.738238][T23989] usb 2-1: USB disconnect, device number 3 [ 1748.787891][T23989] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1748.919324][T23989] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1748.935892][T24236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1748.978733][T24236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1748.996264][T23989] keyspan 2-1:0.0: device disconnected [ 1749.004468][T24236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1749.068106][T24236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1749.594816][T24236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.780032][T24337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24337 comm=syz.1.4275 [ 1749.784824][T24236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.861182][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.868366][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.955225][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.962393][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.076619][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1750.301119][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1750.307701][ T24] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 1750.368068][ T24] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1750.385062][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1750.424891][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1750.450815][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1750.472174][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1750.634693][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1750.646386][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.890363][ T5831] Bluetooth: hci5: command tx timeout [ 1751.060253][ T24] usb 2-1: Product: syz [ 1751.064554][ T24] usb 2-1: Manufacturer: syz [ 1751.069160][ T24] usb 2-1: SerialNumber: syz [ 1751.107563][ T24] usb 2-1: config 0 descriptor?? [ 1751.129550][ T24] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1751.150464][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 1751.181003][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1751.210774][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1751.238510][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1751.250006][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1751.273744][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1751.300112][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1751.305065][T24236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.339511][ T24] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1751.352582][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1751.508220][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1751.531738][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1751.545233][T24355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24355 comm=syz.2.4279 [ 1751.561140][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1751.630260][T24236] veth0_vlan: entered promiscuous mode [ 1751.653818][ T24] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1751.682395][T24236] veth1_vlan: entered promiscuous mode [ 1751.691072][ T24] usb 2-1: USB disconnect, device number 4 [ 1751.722869][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1751.779429][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1751.796832][ T24] keyspan 2-1:0.0: device disconnected [ 1751.894356][T24236] veth0_macvtap: entered promiscuous mode [ 1751.906400][T24236] veth1_macvtap: entered promiscuous mode [ 1751.934570][T24236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.963063][T24236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.015090][T10430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.027349][T10430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.048743][T10430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.060603][T10430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.416526][T20489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.470033][T20489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.694518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.716580][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.993886][T24381] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4283'. [ 1754.406696][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1754.413020][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1754.943811][T24389] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4284'. [ 1756.781836][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1756.791762][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1756.799911][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1756.810602][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1756.818363][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1757.273734][T24404] lo speed is unknown, defaulting to 1000 [ 1758.225766][T24424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24424 comm=syz.4.4290 [ 1758.304817][T24425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24425 comm=syz.1.4291 [ 1758.725514][T16933] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1758.791539][T24404] chnl_net:caif_netlink_parms(): no params data found [ 1758.821916][T23989] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1758.962777][T16933] usb 5-1: Using ep0 maxpacket: 16 [ 1758.974518][T16933] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1758.983460][ T50] Bluetooth: hci0: command tx timeout [ 1758.990857][T16933] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1759.000225][T16933] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1759.010642][T16933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1759.020435][T16933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1759.031333][T16933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1759.042921][T16933] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1759.052128][T16933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.061118][T16933] usb 5-1: Product: syz [ 1759.065261][T16933] usb 5-1: Manufacturer: syz [ 1759.143723][T23989] usb 2-1: Using ep0 maxpacket: 16 [ 1759.164889][T16933] usb 5-1: SerialNumber: syz [ 1759.212243][T23989] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 1759.327032][T16933] usb 5-1: config 0 descriptor?? [ 1759.343182][T23989] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1759.357385][T16933] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1759.366106][T24404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.374568][T24404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.385236][T24404] bridge_slave_0: entered allmulticast mode [ 1759.396497][T23989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1759.409860][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1759.417712][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1759.427538][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1759.436307][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1759.444119][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1759.551879][T24404] bridge_slave_0: entered promiscuous mode [ 1759.559267][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1759.573235][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1759.583382][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1759.591417][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1759.603601][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1759.613077][T23989] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1759.623593][T16933] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1759.631886][T23989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.632613][T24404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.656156][T24404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.663819][T24404] bridge_slave_1: entered allmulticast mode [ 1759.672817][T24404] bridge_slave_1: entered promiscuous mode [ 1759.697793][T23989] usb 2-1: Product: syz [ 1759.722812][T23989] usb 2-1: Manufacturer: syz [ 1759.727429][T23989] usb 2-1: SerialNumber: syz [ 1759.734065][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1759.742365][T23989] usb 2-1: config 0 descriptor?? [ 1759.749901][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1759.758986][T23989] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1759.768753][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 1759.777184][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1759.786907][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1759.797360][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1759.804806][T24445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24445 comm=syz.3.4294 [ 1759.805111][T16933] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1759.826719][T16933] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1759.856747][T24404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.866382][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1759.934999][T24404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.012027][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1760.020685][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1760.028474][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1760.037384][T23989] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 1760.046905][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1760.068170][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1760.094126][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1760.098116][T24404] team0: Port device team_slave_0 added [ 1760.120055][T16933] usb 5-1: USB disconnect, device number 52 [ 1760.128180][T16933] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1760.151366][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1760.175418][T16933] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1760.185601][T11990] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1760.195201][T24404] team0: Port device team_slave_1 added [ 1760.239984][T23989] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 1760.292296][T16933] keyspan 5-1:0.0: device disconnected [ 1760.325204][T23989] usb 2-1: USB disconnect, device number 5 [ 1760.338280][T23989] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 1760.373253][T23989] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 1760.393355][T23989] keyspan 2-1:0.0: device disconnected [ 1760.409133][T11990] usb 4-1: Using ep0 maxpacket: 16 [ 1760.423623][T11990] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 1760.449371][T24404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1760.456450][T24404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.526467][T24404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1760.548373][T11990] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1760.569335][T24404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.592525][T24404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1760.623125][T11990] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1760.651791][T11990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1760.661811][T11990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1760.673398][T11990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1760.683197][T24404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.718900][T11990] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1760.764107][T11990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.777374][T11990] usb 4-1: Product: syz [ 1760.827574][T11990] usb 4-1: Manufacturer: syz [ 1760.845070][T11990] usb 4-1: SerialNumber: syz [ 1760.981565][T11990] usb 4-1: config 0 descriptor?? [ 1760.983793][T24404] hsr_slave_0: entered promiscuous mode [ 1760.994778][T24404] hsr_slave_1: entered promiscuous mode [ 1761.119840][T24404] debugfs: 'hsr0' already exists in 'hsr' [ 1761.192658][T24404] Cannot create hsr debugfs directory [ 1761.248356][ T50] Bluetooth: hci0: command tx timeout [ 1761.441892][T11990] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1761.449482][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 1761.494964][T24455] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1761.514921][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1761.835332][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1761.908958][T24463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24463 comm=syz.2.4298 [ 1762.649239][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1762.657195][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1762.748727][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1762.761377][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1762.771149][T11990] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1762.782815][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1762.790920][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1762.802561][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1762.815975][T11990] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1762.837860][T11990] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1762.853451][T24404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.865037][T11990] usb 4-1: USB disconnect, device number 40 [ 1762.887394][T11990] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1762.921126][T11990] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1762.932310][T11990] keyspan 4-1:0.0: device disconnected [ 1762.974971][T24404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.051122][T24404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.132195][T24404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.512212][ T50] Bluetooth: hci0: command tx timeout [ 1765.641043][T24404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1765.750730][ T5831] Bluetooth: hci0: command tx timeout [ 1766.148673][T24490] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1766.173106][T24404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1766.212386][T24404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1766.228205][T24404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1766.555912][T24404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.611080][T24404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1766.641511][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.648760][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1766.745822][T24500] lo speed is unknown, defaulting to 1000 [ 1767.375384][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.382477][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.094041][T24404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.480522][T24404] veth0_vlan: entered promiscuous mode [ 1771.733657][T24559] 9pnet_fd: Insufficient options for proto=fd [ 1771.802370][T24562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1771.844975][T24562] sp0: Synchronizing with TNC [ 1771.886422][T24404] veth1_vlan: entered promiscuous mode [ 1771.896050][T24560] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24560 comm=syz.3.4314 [ 1773.163389][T24404] veth0_macvtap: entered promiscuous mode [ 1773.173017][T24404] veth1_macvtap: entered promiscuous mode [ 1773.203207][T24404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.625112][ T5934] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1773.670620][T24404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.729398][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.751846][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.874559][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.883399][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 1773.891743][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.902460][ T5934] usb 4-1: config index 0 descriptor too short (expected 1828, got 36) [ 1773.911017][ T5934] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1773.925311][ T5934] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1773.995573][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1774.005439][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1774.016419][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1774.028740][ T5934] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1774.138424][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.146795][ T5934] usb 4-1: Product: syz [ 1774.151068][ T5934] usb 4-1: Manufacturer: syz [ 1774.155954][ T5934] usb 4-1: SerialNumber: syz [ 1774.163045][ T5934] usb 4-1: config 0 descriptor?? [ 1774.188449][ T5934] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1774.207676][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 1774.215373][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1774.223689][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1774.232061][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1774.239820][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1774.247388][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1774.255194][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1774.263582][ T5934] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1774.276787][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1774.290160][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1774.321058][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1774.392856][ T5934] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1774.412792][ T5934] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1774.468188][T24580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24580 comm=syz.2.4318 [ 1774.491559][T20489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.515488][T20489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.593768][ T5934] usb 4-1: USB disconnect, device number 41 [ 1774.602042][ T5934] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1774.860017][ T5934] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1774.935154][ T5934] keyspan 4-1:0.0: device disconnected [ 1774.954579][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.962595][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.141878][T24588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24588 comm=syz.0.4285 [ 1775.841191][T11990] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1776.085710][T11990] usb 1-1: Using ep0 maxpacket: 16 [ 1776.099362][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1776.109513][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1776.119921][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1776.128707][T11990] usb 1-1: config index 0 descriptor too short (expected 1828, got 36) [ 1776.130168][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1776.137911][T11990] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1776.147527][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1776.180929][T24603] lo speed is unknown, defaulting to 1000 [ 1776.316428][T11990] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1776.330453][T11990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1776.974474][T11990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1777.169881][T11990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1777.225646][T11990] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1777.244994][T11990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.289253][T24614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24614 comm=syz.1.4323 [ 1777.312864][T11990] usb 1-1: Product: syz [ 1777.321562][T11990] usb 1-1: Manufacturer: syz [ 1777.338146][T11990] usb 1-1: SerialNumber: syz [ 1777.346404][T11990] usb 1-1: config 0 descriptor?? [ 1777.358004][T24603] chnl_net:caif_netlink_parms(): no params data found [ 1777.366658][T11990] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1777.423176][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 1777.508914][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1777.551868][T24603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.571633][T24603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.586031][T24603] bridge_slave_0: entered allmulticast mode [ 1777.628825][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1777.637135][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1777.644874][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1777.656080][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1777.664163][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1777.673444][T11990] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1777.682351][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1777.690198][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1777.697982][T23989] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1777.706019][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1777.727435][T11990] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1777.738575][T24603] bridge_slave_0: entered promiscuous mode [ 1777.780049][T11990] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1777.792604][T11990] usb 1-1: USB disconnect, device number 56 [ 1777.801799][T11990] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1777.812989][T11990] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1777.826787][T24620] 9pnet_fd: Insufficient options for proto=fd [ 1777.872242][T23989] usb 2-1: Using ep0 maxpacket: 16 [ 1777.899263][T24621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1778.396584][ T50] Bluetooth: hci2: command tx timeout [ 1778.689125][T11990] keyspan 1-1:0.0: device disconnected [ 1778.698707][T23989] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 1778.707428][T23989] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1778.715495][T23989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1778.724868][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1778.727640][T24603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.734851][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1778.781258][T24603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.802444][T24603] bridge_slave_1: entered allmulticast mode [ 1778.814316][T24603] bridge_slave_1: entered promiscuous mode [ 1779.014900][T24603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.035939][T24603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1779.528661][T23989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1779.568837][T23989] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1779.578029][T23989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.586329][T23989] usb 2-1: Product: syz [ 1779.609357][T23989] usb 2-1: Manufacturer: syz [ 1779.616954][T23989] usb 2-1: SerialNumber: syz [ 1779.631674][T24629] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1779.647495][T24603] team0: Port device team_slave_0 added [ 1779.651490][T23989] usb 2-1: config 0 descriptor?? [ 1779.676044][T23989] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 1779.684344][T24631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24631 comm=syz.4.4326 [ 1779.699851][T24603] team0: Port device team_slave_1 added [ 1779.700506][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 1779.743497][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 1779.752770][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1779.760572][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1779.768901][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1779.776745][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 1779.849063][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 1779.859905][T23989] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1779.869008][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1779.876865][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 1779.923426][T24603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.014840][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 1780.077846][T23989] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 1780.080393][T24603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.158695][T23989] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1780.193332][ T5906] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1780.505128][T24603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.530412][T24638] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4327'. [ 1780.594455][T24603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.612692][T24603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.642514][ T50] Bluetooth: hci2: command tx timeout [ 1780.673597][T24603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.694720][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 1780.729751][T24603] hsr_slave_0: entered promiscuous mode [ 1780.738192][T24603] hsr_slave_1: entered promiscuous mode [ 1780.744401][T24603] debugfs: 'hsr0' already exists in 'hsr' [ 1780.753109][T24603] Cannot create hsr debugfs directory [ 1780.777111][ T5906] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1780.965578][ T5906] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1780.983185][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1781.011931][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1781.053674][T23989] usb 2-1: USB disconnect, device number 6 [ 1781.090967][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1781.245275][T23989] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1781.255002][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1781.285685][T23989] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1781.372905][ T5906] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1781.494223][T23989] keyspan 2-1:0.0: device disconnected [ 1781.500793][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.525449][ T5906] usb 5-1: Product: syz [ 1781.540480][ T5906] usb 5-1: Manufacturer: syz [ 1781.960177][ T5906] usb 5-1: SerialNumber: syz [ 1781.999865][ T5906] usb 5-1: config 0 descriptor?? [ 1782.011156][ T5906] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1782.018726][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1782.028614][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1782.037594][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1782.045603][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1782.057448][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1782.069794][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1782.087662][T24603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.095145][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1782.117376][ T5906] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1782.148788][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1782.171813][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1782.182801][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1782.191333][ T5906] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1782.200276][ T5906] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1782.219727][T24603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.393094][ T50] Bluetooth: hci4: link tx timeout [ 1782.404552][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1782.404663][ T5885] usb 5-1: USB disconnect, device number 53 [ 1782.455723][T24603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.486704][ T5885] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1782.556258][ T5885] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1782.592534][ T5885] keyspan 5-1:0.0: device disconnected [ 1782.625969][T24603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.843488][ T5831] Bluetooth: hci2: command tx timeout [ 1783.161414][T24603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1784.069465][T24603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1784.087806][ T30] audit: type=1400 audit(1753918270.933:551): avc: denied { listen } for pid=24667 comm="syz.0.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1784.088147][T24603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1784.124738][T24603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1784.156939][ T30] audit: type=1400 audit(1753918270.933:552): avc: denied { accept } for pid=24667 comm="syz.0.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1784.278740][T24603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.426838][T24603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.439580][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.446684][T10430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.463974][T20489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.471186][T20489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.569570][T24686] program syz.3.4340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1785.318783][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 1785.329165][ T5831] Bluetooth: hci2: command tx timeout [ 1785.401988][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1785.580548][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1785.599188][ T5906] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1785.630213][ T5906] usb 2-1: config 0 has no interface number 0 [ 1785.670067][ T5906] usb 2-1: config 0 interface 186 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1785.744249][ T5906] usb 2-1: New USB device found, idVendor=1782, idProduct=4055, bcdDevice=d0.e9 [ 1785.828645][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.959698][ T5906] usb 2-1: Product: syz [ 1786.033880][ T5906] usb 2-1: Manufacturer: syz [ 1786.140074][ T5906] usb 2-1: SerialNumber: syz [ 1786.173600][ T5906] usb 2-1: config 0 descriptor?? [ 1786.201626][T24680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1786.227505][ T5906] option 2-1:0.186: GSM modem (1-port) converter detected [ 1786.246049][T24603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1786.746509][ T5906] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1786.822540][ T5906] usb 2-1: USB disconnect, device number 7 [ 1786.856863][ T5906] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1787.214717][T24603] veth0_vlan: entered promiscuous mode [ 1787.443593][T24603] veth1_vlan: entered promiscuous mode [ 1787.870377][ T5906] option 2-1:0.186: device disconnected [ 1787.906708][T24603] veth0_macvtap: entered promiscuous mode [ 1787.913427][T24710] trusted_key: syz.3.4348 sent an empty control message without MSG_MORE. [ 1788.027789][T24603] veth1_macvtap: entered promiscuous mode [ 1788.100658][T24603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.130374][T24603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.152319][T20489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.172679][T20489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.291470][T20489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.333906][T20489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.558908][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1788.801424][T11647] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1788.819536][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 1788.832156][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.855849][ T5906] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.860895][T20489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.888260][ T5906] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.895937][T20489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.905560][ T5906] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1788.905590][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1788.905620][ T5906] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1788.905638][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.907454][ T5906] usb 2-1: config 0 descriptor?? [ 1788.944940][T20489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.957643][T20489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.987001][T11647] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1788.997985][T11647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.033305][T11647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.043082][T11647] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1789.078370][T11647] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1789.088741][T11647] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1789.096912][T11647] usb 4-1: Manufacturer: syz [ 1789.133779][T11647] usb 4-1: config 0 descriptor?? [ 1789.239289][ T30] audit: type=1400 audit(1753918275.751:553): avc: denied { write } for pid=24730 comm="syz.0.4355" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1789.411739][ T5906] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 1789.604270][T11647] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 1789.610562][ T5906] corsair-cpro 0003:1B1C:0C10.0007: item fetching failed at offset 4/5 [ 1789.628220][ T5906] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -22 [ 1789.655181][T11647] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1789.677622][ T5906] usb 2-1: USB disconnect, device number 8 [ 1790.609207][T24741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1790.769960][T24040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1790.779557][T24040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1790.788087][T24040] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1790.812061][T24040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1790.820195][T24040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1791.039764][T24743] lo speed is unknown, defaulting to 1000 [ 1791.111701][ T30] audit: type=1400 audit(1753918277.500:554): avc: denied { create } for pid=24747 comm="syz.2.4359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1791.190377][ T30] audit: type=1400 audit(1753918277.528:555): avc: denied { bind } for pid=24747 comm="syz.2.4359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1792.336916][ T24] usb 4-1: USB disconnect, device number 42 [ 1792.510599][T24757] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1792.726070][T24743] chnl_net:caif_netlink_parms(): no params data found [ 1792.924932][ T24] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1793.021213][ T50] Bluetooth: hci3: command tx timeout [ 1793.144780][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1793.205086][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.337158][ T24] usb 4-1: config 0 descriptor?? [ 1793.743762][T24743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.751333][T24743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.759663][T24743] bridge_slave_0: entered allmulticast mode [ 1793.768350][T24743] bridge_slave_0: entered promiscuous mode [ 1793.776740][T24743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.783997][T24743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.792430][T24743] bridge_slave_1: entered allmulticast mode [ 1793.799816][T24743] bridge_slave_1: entered promiscuous mode [ 1794.556592][T24785] lo speed is unknown, defaulting to 1000 [ 1795.279233][ T50] Bluetooth: hci3: command tx timeout [ 1795.300348][T24743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.080556][T24743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.146223][T24791] input: syz1 as /devices/virtual/input/input17 [ 1796.322114][T24743] team0: Port device team_slave_0 added [ 1796.362326][T24743] team0: Port device team_slave_1 added [ 1796.475636][T24743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.525007][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.569687][T24743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.653429][T24743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.694386][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.762513][T24743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.965318][T24743] hsr_slave_0: entered promiscuous mode [ 1797.004271][T24743] hsr_slave_1: entered promiscuous mode [ 1797.020962][T24743] debugfs: 'hsr0' already exists in 'hsr' [ 1797.040699][T24743] Cannot create hsr debugfs directory [ 1797.160223][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1797.170695][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1797.199692][ T24] usb 4-1: USB disconnect, device number 43 [ 1797.628492][ T50] Bluetooth: hci3: command tx timeout [ 1797.822754][T24819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1797.995928][T24743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.351692][T24743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.575051][ C1] Unknown status report in ack skb [ 1799.896017][T24840] netlink: 'syz.0.4383': attribute type 8 has an invalid length. [ 1799.905370][ T50] Bluetooth: hci3: command tx timeout [ 1800.222986][T24743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.849193][T24743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.716580][T24743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1801.979058][T24863] program syz.2.4390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1802.290285][T24743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1802.315432][T24743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1802.358439][T24743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1804.381421][T24743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.402250][T24743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.454295][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.461467][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.513033][T24743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1805.468330][T24743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1805.483506][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.490688][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.394223][T24901] Bluetooth: MGMT ver 1.23 [ 1808.636788][T24743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.778803][ T5865] IPVS: starting estimator thread 0... [ 1808.929346][T24913] IPVS: using max 83 ests per chain, 199200 per kthread [ 1809.698740][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1809.772720][T24743] veth0_vlan: entered promiscuous mode [ 1809.879948][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 1809.888855][T24743] veth1_vlan: entered promiscuous mode [ 1809.922897][T11990] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1810.059705][ T30] audit: type=1400 audit(1753918295.198:556): avc: denied { read } for pid=24934 comm="syz.0.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1810.555475][T11990] usb 4-1: Using ep0 maxpacket: 8 [ 1810.564571][T11990] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1810.578387][T11990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.591197][ T30] audit: type=1400 audit(1753918295.722:557): avc: denied { getopt } for pid=24928 comm="syz.2.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1810.622078][T24743] veth0_macvtap: entered promiscuous mode [ 1810.667311][T24743] veth1_macvtap: entered promiscuous mode [ 1810.701059][T24743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.703543][T11990] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1810.716319][T24743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.732428][T24906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.780219][T11990] pvrusb2: ********** [ 1810.785046][T20489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.814515][T11990] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1810.825075][T24906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.837319][T11990] pvrusb2: Important functionality might not be entirely working. [ 1810.857966][T11990] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1811.026577][T11990] pvrusb2: ********** [ 1811.036660][ T2335] pvrusb2: Invalid write control endpoint [ 1811.082703][T24906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.520362][ T50] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 1811.597120][ T5865] usb 4-1: USB disconnect, device number 44 [ 1811.663507][ T2335] pvrusb2: Invalid write control endpoint [ 1811.701763][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1811.741008][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1811.745802][T24906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.776265][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1811.783588][T24906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.956291][T24949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1813.113600][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.121621][ T2335] pvrusb2: Device being rendered inoperable [ 1813.128177][ T2335] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1813.149000][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.258210][ T2335] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1813.290393][ T2335] pvrusb2: Attached sub-driver cx25840 [ 1813.296235][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1813.328332][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1816.641666][T24903] Bluetooth: hci2: command 0x0401 tx timeout [ 1816.647859][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1817.072672][T24981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1817.116051][T24996] trusted_key: encrypted_key: insufficient parameters specified [ 1817.715669][ T30] audit: type=1804 audit(1753918302.382:558): pid=25006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.4431" name="/newroot/46/bus/file0" dev="overlay" ino=262 res=1 errno=0 [ 1817.963538][T25012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1819.453721][T24903] Bluetooth: hci2: command 0x0401 tx timeout [ 1819.460385][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1819.472611][ T5899] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1819.589437][T11990] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1819.884763][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1820.275109][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1820.406393][T11990] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1820.414889][ T5899] usb 4-1: config 1 has an invalid interface number: 246 but max is 1 [ 1820.426578][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.442222][T11990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.476878][ T5899] usb 4-1: config 1 has no interface number 0 [ 1820.483035][ T5899] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1820.516675][T11990] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1820.609765][T11990] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1820.854558][T11990] usb 5-1: Manufacturer: syz [ 1820.859315][ T5899] usb 4-1: config 1 interface 246 has no altsetting 0 [ 1820.877639][T11990] usb 5-1: config 0 descriptor?? [ 1820.887733][ T5899] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1820.922736][ T5899] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1820.954407][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.987539][ T5899] usb 4-1: Product: syz [ 1820.991749][ T5899] usb 4-1: Manufacturer: syz [ 1821.016378][ T5899] usb 4-1: SerialNumber: syz [ 1821.874805][T11990] rc_core: IR keymap rc-hauppauge not found [ 1821.880861][T11990] Registered IR keymap rc-empty [ 1821.893793][T11990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1822.220972][T11990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 1822.312320][ T5899] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1822.330586][T11990] usb 5-1: USB disconnect, device number 54 [ 1822.342026][ T5899] usb 4-1: USB disconnect, device number 45 [ 1822.788909][ C1] Unknown status report in ack skb [ 1822.863465][ T30] audit: type=1400 audit(1753918307.199:559): avc: denied { setopt } for pid=25082 comm="syz.4.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1823.306264][ T5865] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1824.191826][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.211743][ T5865] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1824.234823][ T5865] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1824.255027][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.279466][ T5865] usb 4-1: config 0 descriptor?? [ 1824.513615][T11990] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1824.552046][ T5865] IPVS: starting estimator thread 0... [ 1824.570498][T25110] netlink: 'syz.4.4473': attribute type 4 has an invalid length. [ 1824.586821][T25110] netlink: 'syz.4.4473': attribute type 4 has an invalid length. [ 1824.666173][T25108] IPVS: using max 57 ests per chain, 136800 per kthread [ 1824.686662][T11990] usb 1-1: Using ep0 maxpacket: 32 [ 1824.696807][T11990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.720394][T11990] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1824.733857][T11990] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1824.854570][T25117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1825.851770][T11990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.873759][T11990] usb 1-1: config 0 descriptor?? [ 1826.929805][T11990] usb 4-1: USB disconnect, device number 46 [ 1829.176748][T25138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1830.097923][ T5899] usb 1-1: USB disconnect, device number 57 [ 1832.305333][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1834.014967][T25209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1835.439249][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4508'. [ 1835.719596][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1839.640652][T25269] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 1839.640652][T25269] program syz.4.4524 not setting count and/or reply_len properly [ 1839.707110][T25273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4526'. [ 1841.675648][T25126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1841.876907][T25126] usb 2-1: Using ep0 maxpacket: 32 [ 1841.885318][T25126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1841.899938][T25307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25307 comm=syz.4.4537 [ 1841.916572][T25126] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.972091][T25126] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1841.982379][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1842.008623][T25126] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52 [ 1842.041011][T25126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.172146][T25126] usb 2-1: Product: syz [ 1842.189508][T25126] usb 2-1: Manufacturer: syz [ 1842.203785][T25126] usb 2-1: SerialNumber: syz [ 1842.301691][ T30] audit: type=1400 audit(1753918325.374:560): avc: denied { ioctl } for pid=25313 comm="syz.0.4540" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1842.326259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1842.565921][T25321] vivid-007: ================= START STATUS ================= [ 1842.574151][T25321] vivid-007: Enable Output Cropping: true [ 1842.581287][T25321] vivid-007: Enable Output Composing: true [ 1842.587701][T25321] vivid-007: Enable Output Scaler: true [ 1842.593838][T25321] vivid-007: Tx RGB Quantization Range: Automatic [ 1842.600326][T25321] vivid-007: Transmit Mode: HDMI [ 1842.605592][T25321] vivid-007: Hotplug Present: 0x00000000 [ 1842.611334][T25321] vivid-007: RxSense Present: 0x00000000 [ 1842.619030][T25321] vivid-007: EDID Present: 0x00000000 [ 1842.655178][T25321] vivid-007: ================== END STATUS ================== [ 1844.642610][T25126] usb 2-1: USB disconnect, device number 9 [ 1845.169728][ T5885] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1845.330051][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 1845.350564][ T5885] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1845.377585][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.397433][ T5885] usb 3-1: Product: syz [ 1845.424578][ T5885] usb 3-1: Manufacturer: syz [ 1845.433614][ T5885] usb 3-1: SerialNumber: syz [ 1845.454919][ T5885] usb 3-1: config 0 descriptor?? [ 1845.774045][ T5885] usb 3-1: USB disconnect, device number 2 [ 1845.788676][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'. [ 1845.799424][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4554'. [ 1847.231348][T25374] sctp: [Deprecated]: syz.1.4559 (pid 25374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1847.231348][T25374] Use struct sctp_sack_info instead [ 1847.258511][T25374] netlink: 'syz.1.4559': attribute type 75 has an invalid length. [ 1847.539285][ T30] audit: type=1400 audit(1753918330.013:561): avc: denied { write } for pid=25367 comm="syz.1.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1847.642229][T25378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1848.032846][T25397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25397 comm=syz.0.4570 [ 1848.149799][T25399] tmpfs: Unknown parameter 'cf}T >usfrquota_inode_harulim' [ 1848.334067][ T5885] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1848.494552][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 1848.513733][ T5885] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1848.545400][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.563369][ T5885] usb 5-1: Product: syz [ 1848.567669][ T5885] usb 5-1: Manufacturer: syz [ 1848.574442][ T5885] usb 5-1: SerialNumber: syz [ 1848.587435][ T5885] usb 5-1: config 0 descriptor?? [ 1848.833993][ T5906] usb 5-1: USB disconnect, device number 55 [ 1848.836722][T17781] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1849.011012][T17781] usb 2-1: Using ep0 maxpacket: 8 [ 1849.019558][T17781] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1849.032680][T17781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.034073][T25428] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4583'. [ 1849.110752][T17781] usb 2-1: Product: syz [ 1849.121087][T17781] usb 2-1: Manufacturer: syz [ 1849.126223][T17781] usb 2-1: SerialNumber: syz [ 1849.139835][T17781] usb 2-1: config 0 descriptor?? [ 1849.736802][T17781] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1849.816793][T25439] 9pnet_fd: Insufficient options for proto=fd [ 1851.444282][T25451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4592'. [ 1852.070780][T17781] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1852.088842][T17781] usb 2-1: USB disconnect, device number 10 [ 1852.108626][ T30] audit: type=1400 audit(1753918334.559:562): avc: denied { ioctl } for pid=25459 comm="syz.2.4596" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1852.150773][ T5885] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1852.321754][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 1852.362331][ T5885] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1852.451168][T25462] 9pnet_fd: Insufficient options for proto=fd [ 1852.737353][ T5885] usb 4-1: config 0 has no interface number 0 [ 1852.776023][ T5885] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1852.802539][ T5885] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1852.837896][ T5885] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1852.868729][ T5885] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1852.909817][ T5885] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1852.937079][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.954147][ T5885] usb 4-1: config 0 descriptor?? [ 1852.978436][ T5885] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1853.679352][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1854.084168][T25126] usb 4-1: USB disconnect, device number 47 [ 1854.182768][T25126] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1854.204032][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 1854.235633][ T5899] IPVS: starting estimator thread 0... [ 1854.258367][ T5934] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1854.269651][T25491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4607'. [ 1854.278690][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4607'. [ 1854.328649][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.342353][T25489] IPVS: using max 54 ests per chain, 129600 per kthread [ 1854.378233][ T5934] usb 3-1: Product: syz [ 1854.450864][ T5934] usb 3-1: Manufacturer: syz [ 1854.496652][ T5934] usb 3-1: SerialNumber: syz [ 1854.616921][ T5934] usb 3-1: config 0 descriptor?? [ 1854.730666][ T30] audit: type=1400 audit(1753918336.945:563): avc: denied { ioctl } for pid=25492 comm="syz.1.4609" path="socket:[90775]" dev="sockfs" ino=90775 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1855.231876][ T5934] usb 3-1: USB disconnect, device number 3 [ 1856.395718][T25523] netlink: 'syz.3.4620': attribute type 4 has an invalid length. [ 1856.413874][T25523] netlink: 'syz.3.4620': attribute type 4 has an invalid length. [ 1856.511758][T25525] IPv6: NLM_F_CREATE should be specified when creating new route [ 1856.724870][T25534] netlink: 'syz.3.4622': attribute type 1 has an invalid length. [ 1856.732791][T25534] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1857.995659][T25555] netlink: 'syz.3.4632': attribute type 4 has an invalid length. [ 1858.057051][T25555] netlink: 'syz.3.4632': attribute type 4 has an invalid length. [ 1858.201482][ T5934] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1858.382627][ T5934] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1858.402413][ T5934] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.302917][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1859.309584][ T5934] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1859.372662][T25566] lo speed is unknown, defaulting to 1000 [ 1859.377442][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.406683][ T5934] usb 1-1: config 0 descriptor?? [ 1859.856328][T25575] IPv6: NLM_F_CREATE should be specified when creating new route [ 1859.876406][ T5934] uclogic 0003:5543:0064.0009: item fetching failed at offset 5/7 [ 1859.967972][T25573] blktrace: Concurrent blktraces are not allowed on sg0 [ 1859.988848][ T5934] uclogic 0003:5543:0064.0009: parse failed [ 1860.499921][T24903] Bluetooth: hci4: command 0x0406 tx timeout [ 1861.109760][ T5934] uclogic 0003:5543:0064.0009: probe with driver uclogic failed with error -22 [ 1861.176086][ T5934] usb 1-1: USB disconnect, device number 58 [ 1861.230209][T25584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4641'. [ 1861.239160][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4641'. [ 1861.373542][T25592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25592 comm=syz.1.4644 [ 1861.386140][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1861.466678][T25596] tmpfs: Unknown parameter 'cf}T >usfrquota_inode_harulim' [ 1862.643338][T25613] lo speed is unknown, defaulting to 1000 [ 1863.408943][T25619] blktrace: Concurrent blktraces are not allowed on sg0 [ 1863.853415][T25622] lo speed is unknown, defaulting to 1000 [ 1863.863187][T25632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1863.872212][T25632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4656'. [ 1863.902344][T25634] erspan0: entered promiscuous mode [ 1863.960319][T25636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25636 comm=syz.2.4659 [ 1864.186555][T25639] tmpfs: Unknown parameter 'cf}T >usfrquota_inode_harulim' [ 1865.016562][T25658] blktrace: Concurrent blktraces are not allowed on sg0 [ 1866.108033][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4672'. [ 1866.117017][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4672'. [ 1867.301109][T25684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25684 comm=syz.0.4676 [ 1868.408306][T25699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4681'. [ 1868.460000][T25684] tmpfs: Unknown parameter 'cf}T >usfrquota_inode_harulim' [ 1870.200564][T25724] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1871.268345][T25740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1873.111014][T25767] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4702'. [ 1873.758024][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1873.758546][T24903] Bluetooth: hci2: command 0x0401 tx timeout [ 1873.778516][T25772] 9pnet_fd: Insufficient options for proto=fd [ 1874.956872][T25792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25792 comm=syz.4.4710 [ 1877.183065][T24903] Bluetooth: hci5: command 0x0406 tx timeout [ 1877.257983][T25796] tmpfs: Unknown parameter 'cf}T >usfrquota_inode_harulim' [ 1879.886331][T25844] 9pnet_fd: Insufficient options for proto=fd [ 1880.614838][ T30] audit: type=1326 audit(1753918361.218:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1880.689244][T25859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25859 comm=syz.3.4732 [ 1880.701958][ T30] audit: type=1326 audit(1753918361.218:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1880.776068][ T30] audit: type=1326 audit(1753918361.256:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1880.887512][T25862] tmpfs: Unknown parameter 'cf}T >usfrquota_inode_harulim' [ 1880.916159][ T30] audit: type=1326 audit(1753918361.256:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1880.956092][ T30] audit: type=1326 audit(1753918361.256:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1880.980127][ T30] audit: type=1326 audit(1753918361.274:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1881.004726][ T30] audit: type=1326 audit(1753918361.274:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1881.134600][T11990] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1881.306181][T11990] usb 3-1: Using ep0 maxpacket: 32 [ 1881.344146][ T30] audit: type=1326 audit(1753918361.274:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25856 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92c78e9a9 code=0x7ffc0000 [ 1881.391652][T11990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1881.396148][ T30] audit: type=1400 audit(1753918361.536:572): avc: denied { connect } for pid=25860 comm="syz.0.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1881.435457][T11990] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.482464][T11990] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1881.513301][T11990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.630540][T11990] usb 3-1: Product: syz [ 1881.660229][T11990] usb 3-1: Manufacturer: syz [ 1881.675682][T11990] usb 3-1: SerialNumber: syz [ 1881.903985][T25885] blktrace: Concurrent blktraces are not allowed on sg0 [ 1882.129494][T11990] usb 3-1: Cannot retrieve CPort count: -32 [ 1882.156621][T11990] usb 3-1: Cannot retrieve CPort count: -32 [ 1882.186300][T11990] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -32 [ 1882.324295][T11990] usb 3-1: USB disconnect, device number 4 [ 1883.208076][T25903] 9pnet_fd: Insufficient options for proto=fd [ 1883.514908][ T30] audit: type=1400 audit(1753918363.931:573): avc: denied { bind } for pid=25908 comm="syz.2.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1883.572263][T25911] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1883.900838][T25911] bond1: entered promiscuous mode [ 1884.275152][T25911] bond1: entered allmulticast mode [ 1884.331516][T25911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1885.564024][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1885.987480][ T50] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1886.368188][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1886.368204][ T30] audit: type=1400 audit(1753918366.569:575): avc: denied { ioctl } for pid=25935 comm="syz.3.4755" path="socket:[92681]" dev="sockfs" ino=92681 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1887.953724][ T5906] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1888.089784][T25963] lo speed is unknown, defaulting to 1000 [ 1888.124727][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 1888.137780][ T5906] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1888.147461][ T5906] usb 1-1: config 0 has no interface number 0 [ 1888.154087][ T5906] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1888.176276][ T5906] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1888.191852][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1888.201514][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.213119][ T5906] usb 1-1: Product: syz [ 1888.219665][ T5906] usb 1-1: Manufacturer: syz [ 1888.227374][ T5906] usb 1-1: SerialNumber: syz [ 1888.238119][ T5906] usb 1-1: config 0 descriptor?? [ 1888.751399][T25963] netlink: 'syz.1.4762': attribute type 4 has an invalid length. [ 1889.332890][ T5906] appletouch 1-1:0.85: Geyser mode initialized. [ 1889.801174][ T5906] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input19 [ 1889.821100][ C1] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1890.396542][ T5906] usb 1-1: USB disconnect, device number 59 [ 1891.358640][ T5906] appletouch 1-1:0.85: input: appletouch disconnected [ 1893.638357][ T5906] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1893.908214][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 1893.917436][ T5906] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1893.973740][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.986439][ T5906] usb 1-1: Product: syz [ 1893.990641][ T5906] usb 1-1: Manufacturer: syz [ 1893.998260][ T5906] usb 1-1: SerialNumber: syz [ 1894.009142][ T5906] usb 1-1: config 0 descriptor?? [ 1894.017462][ T5906] gspca_main: se401-2.14.0 probing 047d:5003 [ 1894.047569][T26017] netlink: 'syz.3.4780': attribute type 4 has an invalid length. [ 1894.187160][T26020] netlink: 'syz.3.4780': attribute type 4 has an invalid length. [ 1894.580617][T26029] syz.4.4781: attempt to access beyond end of device [ 1894.580617][T26029] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1894.607675][T26029] hfsplus: unable to find HFS+ superblock [ 1894.723450][ T5906] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 1894.924341][T25126] usb 1-1: USB disconnect, device number 60 [ 1895.426273][T11990] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1895.450914][T26029] mkiss: ax0: crc mode is auto. [ 1895.652400][T11990] usb 4-1: Using ep0 maxpacket: 8 [ 1895.721971][T11990] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1895.762692][T11990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.810460][T11990] usb 4-1: Product: syz [ 1895.821858][T11990] usb 4-1: Manufacturer: syz [ 1895.838926][T11990] usb 4-1: SerialNumber: syz [ 1895.852714][T11990] usb 4-1: config 0 descriptor?? [ 1898.166798][ T5865] usb 4-1: USB disconnect, device number 48 [ 1899.221651][T25126] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1899.478139][T25126] usb 5-1: Using ep0 maxpacket: 8 [ 1899.488056][T25126] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1899.902438][T25126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.913074][T25126] usb 5-1: Product: syz [ 1899.919572][T25126] usb 5-1: Manufacturer: syz [ 1899.939959][T25126] usb 5-1: SerialNumber: syz [ 1899.993077][T25126] usb 5-1: config 0 descriptor?? [ 1900.796352][T25126] usb 5-1: USB disconnect, device number 56 [ 1900.853874][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4809'. [ 1901.185401][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 1901.257117][ T30] audit: type=1400 audit(1753918380.534:576): avc: denied { setopt } for pid=26121 comm="syz.2.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1901.643168][T26129] tmpfs: Unknown parameter 'noswap&踻O)*r s3\noCI{RFNH~@( }ӻJ6m>;' [ 1902.736862][ T50] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1903.326281][ T5934] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1903.573061][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 1903.657100][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.837362][ T5934] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1903.995562][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.682213][T26151] : entered promiscuous mode [ 1904.709575][ T5934] usb 1-1: config 0 descriptor?? [ 1905.085576][ T5934] usbhid 1-1:0.0: can't add hid device: -71 [ 1905.117468][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1905.163529][ T5934] usb 1-1: USB disconnect, device number 61 [ 1905.410486][T24903] Bluetooth: hci2: command 0x0401 tx timeout [ 1905.416767][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1905.924616][T17781] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1906.142177][T17781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.174335][T17781] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1906.183787][T17781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.195556][ T50] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1906.204696][T17781] usb 2-1: config 0 descriptor?? [ 1906.442267][T17781] usbhid 2-1:0.0: can't add hid device: -71 [ 1906.469872][T17781] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1906.489411][T17781] usb 2-1: USB disconnect, device number 11 [ 1907.089614][T17781] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1907.250202][T17781] usb 2-1: Using ep0 maxpacket: 16 [ 1907.273438][T17781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.319279][T17781] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1907.541223][T17781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.585288][T17781] usb 2-1: config 0 descriptor?? [ 1907.664609][ T30] audit: type=1400 audit(1753918386.521:577): avc: denied { read } for pid=26201 comm="syz.3.4847" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1907.872913][ T30] audit: type=1400 audit(1753918386.549:578): avc: denied { open } for pid=26201 comm="syz.3.4847" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1907.979355][T26207] Bluetooth: MGMT ver 1.23 [ 1908.693737][T17781] kye 0003:0458:5016.000A: control desc unexpectedly large [ 1908.712925][T17781] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000A/input/input21 [ 1908.814397][T17781] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.000A/input/input22 [ 1908.881089][T26217] netlink: 'syz.4.4851': attribute type 4 has an invalid length. [ 1908.893915][T26221] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4854'. [ 1908.916085][T17781] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 1908.931522][T26217] netlink: 'syz.4.4851': attribute type 4 has an invalid length. [ 1909.254052][T26232] smc: net device bond0 applied user defined pnetid SYZ2 [ 1909.679634][T24903] Bluetooth: hci2: command 0x0401 tx timeout [ 1909.945283][T11990] usb 2-1: USB disconnect, device number 12 [ 1912.982725][T26266] netlink: 'syz.0.4867': attribute type 4 has an invalid length. [ 1913.082164][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 1913.190572][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4878'. [ 1913.209230][T26292] fuse: Bad value for 'fd' [ 1915.952352][T11990] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1915.966288][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 1916.113295][T26330] fuse: Bad value for 'fd' [ 1916.147241][T11990] usb 2-1: Using ep0 maxpacket: 32 [ 1916.155431][T11990] usb 2-1: config 0 has no interfaces? [ 1916.162217][T11990] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1916.171998][T11990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1916.190800][T11990] usb 2-1: SerialNumber: syz [ 1916.209163][T11990] usb 2-1: config 0 descriptor?? [ 1916.249765][T26336] lo speed is unknown, defaulting to 1000 [ 1916.488164][T11990] usb 2-1: USB disconnect, device number 13 [ 1917.645432][ T30] audit: type=1400 audit(1753918395.847:579): avc: denied { write } for pid=26349 comm="syz.0.4898" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1917.697749][ T30] audit: type=1400 audit(1753918395.847:580): avc: denied { open } for pid=26349 comm="syz.0.4898" path="/135/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1919.033978][T26364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1919.138097][T26368] fuse: Bad value for 'fd' [ 1919.767152][T26383] atomic_op ffff88807c4ee198 conn xmit_atomic 0000000000000000 [ 1919.886868][T11987] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1920.390700][T11987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.462077][T11987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1920.620272][T11987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1920.731974][T11987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.742665][T11987] usb 4-1: config 0 descriptor?? [ 1923.350674][T11987] usb 4-1: USB disconnect, device number 49 [ 1923.359849][T26423] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1923.955935][ T50] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1923.970396][T26441] netlink: 'syz.3.4926': attribute type 4 has an invalid length. [ 1924.258966][T11990] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1924.551195][T11990] usb 2-1: Using ep0 maxpacket: 16 [ 1924.558108][T11990] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1924.566578][T11990] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1924.587239][T11990] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1924.621588][T11990] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1924.692894][T11990] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1925.392917][T11990] usb 2-1: config 0 has no interface number 0 [ 1925.489323][T11990] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1925.833265][T11990] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1925.843273][T11990] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1925.856511][T11990] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1925.869858][T11990] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1925.980900][T11990] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1926.084499][T11990] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1926.094932][T11990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.103040][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 1926.144355][T11990] usb 2-1: Product: syz [ 1926.148570][T11990] usb 2-1: Manufacturer: syz [ 1926.153274][T11990] usb 2-1: SerialNumber: syz [ 1926.164168][T11990] usb 2-1: config 0 descriptor?? [ 1926.170822][T26470] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4937'. [ 1926.171747][T11990] usb 2-1: selecting invalid altsetting 2 [ 1926.386798][ C0] usb 2-1: async_complete: urb error -71 [ 1926.392625][ C0] usb 2-1: async_complete: urb error -71 [ 1926.398573][ C0] usb 2-1: async_complete: urb error -71 [ 1926.404311][ C0] usb 2-1: async_complete: urb error -71 [ 1926.418220][T11990] get_1284_register: usb error -71 [ 1926.423458][T11990] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 1926.436736][T11990] usb 2-1: USB disconnect, device number 14 [ 1928.020863][T26500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1928.028598][T26500] IPv6: NLM_F_CREATE should be set when creating new route [ 1928.035870][T26500] IPv6: NLM_F_CREATE should be set when creating new route [ 1928.115246][T26500] ------------[ cut here ]------------ [ 1928.120931][T26500] WARNING: CPU: 1 PID: 26500 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb9d/0x10d0 [ 1928.131524][T26500] Modules linked in: [ 1928.135452][T26500] CPU: 1 UID: 0 PID: 26500 Comm: syz.0.4947 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1928.147235][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1928.157647][T26500] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 1928.163535][T26500] Code: 24 20 48 8b 6c 24 38 e8 01 eb 92 fa e8 fc ea 92 fa 89 de 44 89 ef e8 72 e5 92 fa 41 39 dd 0f 84 cb fd ff ff e8 e4 ea 92 fa 90 <0f> 0b 90 e9 bd fd ff ff e8 d6 ea 92 fa 48 8d 7d 38 be 01 00 00 00 [ 1928.183417][T26500] RSP: 0018:ffffc9000bb6f138 EFLAGS: 00010283 [ 1928.189733][T26500] RAX: 000000000000bcbc RBX: ffff88804876f82c RCX: ffffc90004982000 [ 1928.198028][T26500] RDX: 0000000000080000 RSI: ffffffff8728b3ac RDI: ffff88804876f818 [ 1928.206230][T26500] RBP: ffff88804cd27000 R08: 0000000000000005 R09: 0000000000000000 [ 1928.214280][T26500] R10: 0000000000000001 R11: ffffffff81000130 R12: ffffc9000bb6f290 [ 1928.222274][T26500] R13: 0000000000000001 R14: ffff88801d751600 R15: ffff88804876f800 [ 1928.230490][T26500] FS: 00007fa92d63f6c0(0000) GS:ffff88812481e000(0000) knlGS:0000000000000000 [ 1928.239862][T26500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1928.246566][T26500] CR2: 0000001b2e413ff8 CR3: 0000000075f32000 CR4: 00000000003526f0 [ 1928.254568][T26500] Call Trace: [ 1928.257911][T26500] [ 1928.260842][T26500] notifier_call_chain+0xb9/0x410 [ 1928.265852][T26500] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 1928.271346][T26500] atomic_notifier_call_chain+0x71/0x1c0 [ 1928.276970][T26500] call_fib_notifiers+0x33/0x70 [ 1928.281862][T26500] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 1928.288348][T26500] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 1928.295402][T26500] ? find_held_lock+0x2b/0x80 [ 1928.300083][T26500] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 1928.306006][T26500] ip6_route_multipath_add+0xb4f/0x1bd0 [ 1928.311917][T26500] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 1928.317931][T26500] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1928.323409][T26500] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1928.328796][T26500] ? inet6_rtm_newroute+0xe4/0x1a0 [ 1928.333985][T26500] inet6_rtm_newroute+0xe4/0x1a0 [ 1928.338931][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.344568][T26500] ? __lock_acquire+0x622/0x1c90 [ 1928.349521][T26500] ? find_held_lock+0x2b/0x80 [ 1928.354297][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.359862][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.365460][T26500] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1928.370571][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.376215][T26500] rtnetlink_rcv_msg+0x95e/0xe90 [ 1928.381191][T26500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1928.386745][T26500] ? ref_tracker_free+0x37c/0x830 [ 1928.391780][T26500] netlink_rcv_skb+0x158/0x420 [ 1928.396593][T26500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1928.402056][T26500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1928.407509][T26500] ? netlink_deliver_tap+0x1ae/0xd30 [ 1928.413093][T26500] netlink_unicast+0x5a7/0x870 [ 1928.418149][T26500] ? __pfx_netlink_unicast+0x10/0x10 [ 1928.423451][T26500] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1928.429488][T26500] netlink_sendmsg+0x8d1/0xdd0 [ 1928.434261][T26500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1928.439601][T26500] ____sys_sendmsg+0xa98/0xc70 [ 1928.444368][T26500] ? copy_msghdr_from_user+0x10a/0x160 [ 1928.449879][T26500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1928.455180][T26500] ? __pfx_futex_wake_mark+0x10/0x10 [ 1928.460504][T26500] ___sys_sendmsg+0x134/0x1d0 [ 1928.465177][T26500] ? futex_private_hash_put+0x176/0x300 [ 1928.470816][T26500] ? __pfx____sys_sendmsg+0x10/0x10 [ 1928.476024][T26500] ? __lock_acquire+0x622/0x1c90 [ 1928.480966][T26500] __sys_sendmsg+0x16d/0x220 [ 1928.485592][T26500] ? __pfx___sys_sendmsg+0x10/0x10 [ 1928.490692][T26500] ? __x64_sys_futex+0x1e0/0x4c0 [ 1928.495771][T26500] do_syscall_64+0xcd/0x4c0 [ 1928.500352][T26500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.506263][T26500] RIP: 0033:0x7fa92c78e9a9 [ 1928.510750][T26500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1928.531106][T26500] RSP: 002b:00007fa92d63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1928.539844][T26500] RAX: ffffffffffffffda RBX: 00007fa92c9b5fa0 RCX: 00007fa92c78e9a9 [ 1928.547857][T26500] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1928.555883][T26500] RBP: 00007fa92c810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1928.563995][T26500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1928.572011][T26500] R13: 0000000000000000 R14: 00007fa92c9b5fa0 R15: 00007fffe1b12308 [ 1928.580108][T26500] [ 1928.583114][T26500] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1928.590395][T26500] CPU: 1 UID: 0 PID: 26500 Comm: syz.0.4947 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1928.602284][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1928.612503][T26500] Call Trace: [ 1928.616029][T26500] [ 1928.618938][T26500] dump_stack_lvl+0x3d/0x1f0 [ 1928.623527][T26500] panic+0x71c/0x800 [ 1928.627423][T26500] ? __pfx_panic+0x10/0x10 [ 1928.631835][T26500] ? show_trace_log_lvl+0x29b/0x3e0 [ 1928.637043][T26500] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 1928.642226][T26500] check_panic_on_warn+0xab/0xb0 [ 1928.647150][T26500] __warn+0xf6/0x3c0 [ 1928.651031][T26500] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 1928.656233][T26500] report_bug+0x3c3/0x580 [ 1928.660679][T26500] ? nsim_fib_event_nb+0xb9d/0x10d0 [ 1928.665989][T26500] handle_bug+0x184/0x210 [ 1928.670302][T26500] exc_invalid_op+0x17/0x50 [ 1928.674784][T26500] asm_exc_invalid_op+0x1a/0x20 [ 1928.679608][T26500] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0 [ 1928.685410][T26500] Code: 24 20 48 8b 6c 24 38 e8 01 eb 92 fa e8 fc ea 92 fa 89 de 44 89 ef e8 72 e5 92 fa 41 39 dd 0f 84 cb fd ff ff e8 e4 ea 92 fa 90 <0f> 0b 90 e9 bd fd ff ff e8 d6 ea 92 fa 48 8d 7d 38 be 01 00 00 00 [ 1928.705011][T26500] RSP: 0018:ffffc9000bb6f138 EFLAGS: 00010283 [ 1928.711058][T26500] RAX: 000000000000bcbc RBX: ffff88804876f82c RCX: ffffc90004982000 [ 1928.719003][T26500] RDX: 0000000000080000 RSI: ffffffff8728b3ac RDI: ffff88804876f818 [ 1928.726954][T26500] RBP: ffff88804cd27000 R08: 0000000000000005 R09: 0000000000000000 [ 1928.734928][T26500] R10: 0000000000000001 R11: ffffffff81000130 R12: ffffc9000bb6f290 [ 1928.743162][T26500] R13: 0000000000000001 R14: ffff88801d751600 R15: ffff88804876f800 [ 1928.751128][T26500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.757182][T26500] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 1928.762361][T26500] ? nsim_fib_event_nb+0xb9c/0x10d0 [ 1928.767552][T26500] notifier_call_chain+0xb9/0x410 [ 1928.772570][T26500] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 1928.778006][T26500] atomic_notifier_call_chain+0x71/0x1c0 [ 1928.783618][T26500] call_fib_notifiers+0x33/0x70 [ 1928.788468][T26500] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 1928.794955][T26500] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 1928.801971][T26500] ? find_held_lock+0x2b/0x80 [ 1928.806645][T26500] ? ip6_route_multipath_add+0xaa2/0x1bd0 [ 1928.812364][T26500] ip6_route_multipath_add+0xb4f/0x1bd0 [ 1928.817993][T26500] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 1928.823973][T26500] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1928.829327][T26500] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1928.834681][T26500] ? inet6_rtm_newroute+0xe4/0x1a0 [ 1928.839782][T26500] inet6_rtm_newroute+0xe4/0x1a0 [ 1928.844699][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.850239][T26500] ? __lock_acquire+0x622/0x1c90 [ 1928.855358][T26500] ? find_held_lock+0x2b/0x80 [ 1928.860047][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.865585][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.871141][T26500] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1928.876258][T26500] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1928.881829][T26500] rtnetlink_rcv_msg+0x95e/0xe90 [ 1928.886763][T26500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1928.892209][T26500] ? ref_tracker_free+0x37c/0x830 [ 1928.897213][T26500] netlink_rcv_skb+0x158/0x420 [ 1928.901975][T26500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1928.907426][T26500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1928.912716][T26500] ? netlink_deliver_tap+0x1ae/0xd30 [ 1928.917998][T26500] netlink_unicast+0x5a7/0x870 [ 1928.922745][T26500] ? __pfx_netlink_unicast+0x10/0x10 [ 1928.928008][T26500] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1928.933970][T26500] netlink_sendmsg+0x8d1/0xdd0 [ 1928.938723][T26500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1928.943988][T26500] ____sys_sendmsg+0xa98/0xc70 [ 1928.948752][T26500] ? copy_msghdr_from_user+0x10a/0x160 [ 1928.954295][T26500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1928.959595][T26500] ? __pfx_futex_wake_mark+0x10/0x10 [ 1928.964968][T26500] ___sys_sendmsg+0x134/0x1d0 [ 1928.969645][T26500] ? futex_private_hash_put+0x176/0x300 [ 1928.975204][T26500] ? __pfx____sys_sendmsg+0x10/0x10 [ 1928.980564][T26500] ? __lock_acquire+0x622/0x1c90 [ 1928.985530][T26500] __sys_sendmsg+0x16d/0x220 [ 1928.990110][T26500] ? __pfx___sys_sendmsg+0x10/0x10 [ 1928.995207][T26500] ? __x64_sys_futex+0x1e0/0x4c0 [ 1929.000150][T26500] do_syscall_64+0xcd/0x4c0 [ 1929.004649][T26500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.010528][T26500] RIP: 0033:0x7fa92c78e9a9 [ 1929.014919][T26500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1929.034514][T26500] RSP: 002b:00007fa92d63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1929.042922][T26500] RAX: ffffffffffffffda RBX: 00007fa92c9b5fa0 RCX: 00007fa92c78e9a9 [ 1929.050876][T26500] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1929.058836][T26500] RBP: 00007fa92c810d69 R08: 0000000000000000 R09: 0000000000000000 [ 1929.066781][T26500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1929.074765][T26500] R13: 0000000000000000 R14: 00007fa92c9b5fa0 R15: 00007fffe1b12308 [ 1929.082731][T26500] [ 1929.085984][T26500] Kernel Offset: disabled [ 1929.090294][T26500] Rebooting in 86400 seconds..