last executing test programs: 11m24.646796274s ago: executing program 0 (id=1285): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m24.613188051s ago: executing program 0 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 11m24.591929246s ago: executing program 0 (id=1287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 11m23.737618107s ago: executing program 0 (id=1296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x1c, 0xf5}, @val={0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, @mpls={[], @ipv4=@tipc={{0x5, 0x4, 0x0, 0x5, 0x40, 0x67, 0x0, 0x7f, 0x6, 0x0, @broadcast, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x0, 0x2, 0x8, 0x0, 0x2, 0x6, 0x0, 0x1, 0x9, 0x2c, 0x1, 0x4e23, 0x4e21}, 0x0, 0x2}, 0x2, 0x4}}}}}}}, 0x4e) 11m23.648324801s ago: executing program 0 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c080106, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x120) 11m23.580233711s ago: executing program 0 (id=1302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 11m8.203028672s ago: executing program 32 (id=1302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7.434228592s ago: executing program 4 (id=5325): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c5691", 0xf}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) 7.263398348s ago: executing program 3 (id=5331): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.979438748s ago: executing program 3 (id=5332): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x181800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) ioperm(0x0, 0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) 6.455228599s ago: executing program 4 (id=5334): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket(0xa, 0x40000000002, 0x0) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.453838247s ago: executing program 3 (id=5335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000007c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xb000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x21, 0x1, 0xfc}, {0x6000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x0, 0x5, 0x2000, 0x5000, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) 6.343208829s ago: executing program 5 (id=5336): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) syz_usb_disconnect(r0) 5.334135271s ago: executing program 4 (id=5339): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.812143432s ago: executing program 2 (id=5342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x4000) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="fbb9dc94dc91b776276a2966559869f4b70cf7a40afcf4b5c8313ce6cd4d45a9b525ea", 0x23) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x8000000000000001}) 4.595743525s ago: executing program 3 (id=5343): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x9624, 0x3180, 0x7ffe, 0x195}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.277847494s ago: executing program 4 (id=5344): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c5691", 0xf}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) 4.262676456s ago: executing program 3 (id=5345): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) 4.200343547s ago: executing program 1 (id=5346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4.112237828s ago: executing program 1 (id=5347): r0 = socket$netlink(0x10, 0x3, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 4.036926283s ago: executing program 1 (id=5348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) 3.909778303s ago: executing program 2 (id=5349): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c00014000"], 0x118}}, 0x0) 3.899577437s ago: executing program 5 (id=5350): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0xff, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 2.75226526s ago: executing program 1 (id=5351): socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.665726173s ago: executing program 4 (id=5352): creat(0x0, 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) listen(r4, 0x4000) close(r4) 2.620362828s ago: executing program 5 (id=5353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x4000, 0x0) 2.575498722s ago: executing program 1 (id=5354): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.487225737s ago: executing program 2 (id=5355): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/124, 0x7c}], 0x6, &(0x7f0000000a80)=[@mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000a00)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x58, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb9", 0x47}], 0x1}, 0x20048050) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14"], 0x232) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.020781952s ago: executing program 2 (id=5356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) close(r4) writev(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x400000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x8000000000000001}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 1.979852986s ago: executing program 3 (id=5357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x1}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2e}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xc}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa87aaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) 1.471762365s ago: executing program 5 (id=5358): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.383516144s ago: executing program 1 (id=5359): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000f40)={0x50, r0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1efa}, @device_b, @device_a, @device_a, {0x1, 0x792}, @device_b, @void, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000800) 1.31462706s ago: executing program 5 (id=5360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x4000) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="fbb9dc94dc91b776276a2966559869f4b70cf7a40afcf4b5c8313ce6cd4d45a9b525ea", 0x23) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x8000000000000001}) 1.079030421s ago: executing program 2 (id=5361): syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 431.224568ms ago: executing program 5 (id=5362): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa", 0x12}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) 184.597539ms ago: executing program 4 (id=5363): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 2 (id=5364): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20004804) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kernel console output (not intermixed with test programs): ings: Mfr=1, Product=2, SerialNumber=3 [ 635.577712][ T5961] usb 2-1: Product: syz [ 635.582482][ T5961] usb 2-1: Manufacturer: syz [ 635.587272][ T5961] usb 2-1: SerialNumber: syz [ 635.600581][ T5961] usb 2-1: config 0 descriptor?? [ 635.610608][ T5961] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 635.754691][ T5908] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 635.894710][ T5908] usb 4-1: device descriptor read/64, error -71 [ 636.004891][ T5908] usb usb4-port1: attempt power cycle [ 636.117603][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 636.149093][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 636.162491][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 636.187413][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 636.206547][ T10] usb 6-1: USB disconnect, device number 50 [ 636.375219][ T5908] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 636.396474][ T5908] usb 4-1: device descriptor read/8, error -71 [ 636.644712][ T5908] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 636.665072][ T5908] usb 4-1: device descriptor read/8, error -71 [ 636.783785][ T5908] usb usb4-port1: unable to enumerate USB device [ 636.889837][T18918] QAT: failed to copy from user cfg_data. [ 637.054675][ T5990] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 637.217034][ T5990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.227691][ T5990] usb 3-1: config 0 has no interfaces? [ 637.234659][ T5990] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 637.243717][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.251755][ T5990] usb 3-1: Product: syz [ 637.255939][ T5990] usb 3-1: Manufacturer: syz [ 637.260537][ T5990] usb 3-1: SerialNumber: syz [ 637.266283][ T5990] usb 3-1: config 0 descriptor?? [ 637.467188][ T5961] gspca_sonixj: reg_r err -32 [ 637.504725][ T5961] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 637.511101][ T10] usb 3-1: USB disconnect, device number 54 [ 638.376996][T18942] openvswitch: netlink: Missing valid actions attribute. [ 638.384137][T18942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.644899][ T5961] usb 2-1: USB disconnect, device number 68 [ 639.777507][T18980] netlink: 'syz.2.4153': attribute type 3 has an invalid length. [ 639.785503][T18980] netlink: 'syz.2.4153': attribute type 1 has an invalid length. [ 639.793191][T18980] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4153'. [ 639.972357][T18988] comedi: valid board names for 8255 driver are: [ 640.031630][T18988] 8255 [ 640.034405][T18988] comedi: valid board names for vmk80xx driver are: [ 640.084184][T18988] vmk80xx [ 640.093122][T18988] comedi: valid board names for usbduxsigma driver are: [ 640.115224][T18988] usbduxsigma [ 640.119041][T18988] comedi: valid board names for usbduxfast driver are: [ 640.126426][T18988] usbduxfast [ 640.129975][T18988] comedi: valid board names for usbdux driver are: [ 640.153660][T18988] usbdux [ 640.181691][T18988] comedi: valid board names for ni6501 driver are: [ 640.199658][T18988] ni6501 [ 640.332348][T18988] comedi: valid board names for dt9812 driver are: [ 640.369592][T18988] dt9812 [ 640.382221][T18988] comedi: valid board names for ni_labpc_cs driver are: [ 640.413244][T18988] ni_labpc_cs [ 640.418068][T18988] comedi: valid board names for ni_daq_700 driver are: [ 640.437520][T18988] ni_daq_700 [ 640.440898][T18988] comedi: valid board names for labpc_pci driver are: [ 640.449276][T18988] labpc_pci [ 640.452540][T18988] comedi: valid board names for adl_pci9118 driver are: [ 640.459981][T18988] pci9118dg [ 640.463527][T18988] pci9118hg [ 640.466937][T18988] pci9118hr [ 640.524738][T18988] comedi: valid board names for 8255_pci driver are: [ 640.531934][T18988] 8255_pci [ 640.541873][T18988] comedi: valid board names for s526 driver are: [ 640.550383][T18988] s526 [ 640.553240][T18988] comedi: valid board names for multiq3 driver are: [ 640.560391][T18988] multiq3 [ 640.563452][T18988] comedi: valid board names for pcmuio driver are: [ 640.573239][T18988] pcmuio48 [ 640.577662][T18988] pcmuio96 [ 640.580885][T18988] comedi: valid board names for pcmmio driver are: [ 640.588010][T18988] pcmmio [ 641.035797][T18988] comedi: valid board names for pcmda12 driver are: [ 641.161423][T18988] pcmda12 [ 641.169572][T18988] comedi: valid board names for pcmad driver are: [ 641.214758][T18988] pcmad12 [ 641.217784][T18988] pcmad16 [ 641.224356][T18988] comedi: valid board names for ni_labpc driver are: [ 641.235442][T18988] lab-pc-1200 [ 641.358215][T18988] lab-pc-1200ai [ 641.361799][T18988] lab-pc+ [ 641.364840][T18988] comedi: valid board names for atmio16 driver are: [ 641.427719][T19025] netlink: 'syz.3.4167': attribute type 3 has an invalid length. [ 641.435455][T19025] netlink: 'syz.3.4167': attribute type 1 has an invalid length. [ 641.443145][T19025] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4167'. [ 641.492134][T18988] atmio16 [ 641.511597][T18988] atmio16d [ 641.519208][T18988] comedi: valid board names for ni_at_ao driver are: [ 641.534314][T18988] at-ao-6 [ 641.614864][T18988] at-ao-10 [ 641.628393][T18988] comedi: valid board names for ni_at_a2150 driver are: [ 641.654787][T18988] ni_at_a2150 [ 642.056969][T18988] comedi: valid board names for adq12b driver are: [ 642.064153][T18988] adq12b [ 642.067610][T18988] comedi: valid board names for mpc624 driver are: [ 642.094685][T18988] mpc624 [ 642.101459][T18988] comedi: valid board names for c6xdigio driver are: [ 642.108274][T18988] c6xdigio [ 642.111425][T18988] comedi: valid board names for aio_iiro_16 driver are: [ 642.118480][T18988] aio_iiro_16 [ 642.121877][T18988] comedi: valid board names for aio_aio12_8 driver are: [ 642.129925][T18988] aio_aio12_8 [ 642.135254][T18988] aio_ai12_8 [ 642.139011][T18988] aio_ao12_4 [ 642.142337][T18988] comedi: valid board names for fl512 driver are: [ 642.149864][T18988] fl512 [ 642.153801][T18988] comedi: valid board names for dmm32at driver are: [ 642.161996][T18988] dmm32at [ 642.167276][T18988] comedi: valid board names for dt282x driver are: [ 642.174814][T18988] dt2821 [ 642.177795][T18988] dt2821-f [ 642.180937][T18988] dt2821-g [ 642.184758][ T5908] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 642.185724][T18988] dt2823 [ 642.195639][T18988] dt2824-pgh [ 642.198926][T18988] dt2824-pgl [ 642.202405][T18988] dt2825 [ 642.205783][T18988] dt2827 [ 642.208762][T18988] dt2828 [ 642.211724][T18988] dt2829 [ 642.217839][T18988] dt21-ez [ 642.220890][T18988] dt23-ez [ 642.223929][T18988] dt24-ez [ 642.232659][T18988] dt24-ez-pgl [ 642.241237][T18988] comedi: valid board names for dt2817 driver are: [ 642.250417][T18988] dt2817 [ 642.253399][T18988] comedi: valid board names for dt2815 driver are: [ 642.260123][T18988] dt2815 [ 642.263114][T18988] comedi: valid board names for dt2814 driver are: [ 642.269768][T18988] dt2814 [ 642.273020][T18988] comedi: valid board names for dt2811 driver are: [ 642.280166][T18988] dt2811-pgh [ 642.283503][T18988] dt2811-pgl [ 642.290252][T18988] comedi: valid board names for dt2801 driver are: [ 642.298866][T18988] dt2801 [ 642.303276][T18988] comedi: valid board names for das6402 driver are: [ 642.310023][T18988] das6402-12 [ 642.313369][T18988] das6402-16 [ 642.316841][T18988] comedi: valid board names for das1800 driver are: [ 642.324497][T18988] das-1701st [ 642.328859][T18988] das-1701st-da [ 642.333601][T18988] das-1702st [ 642.339370][T18988] das-1702st-da [ 642.343600][T18988] das-1702hr [ 642.348157][T18988] das-1702hr-da [ 642.351705][T18988] das-1701ao [ 642.400050][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 642.410291][ T5908] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 642.420255][T18988] das-1702ao [ 642.423720][T18988] das-1801st [ 642.428452][ T5908] usb 3-1: config 0 has no interface number 0 [ 642.434777][T18988] das-1801st-da [ 642.436953][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 642.448033][T18988] das-1802st [ 642.451423][T18988] das-1802st-da [ 642.451467][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.455296][T18988] das-1802hr [ 642.467465][ T5908] usb 3-1: Product: syz [ 642.474710][ T5908] usb 3-1: Manufacturer: syz [ 642.478883][T18988] das-1802hr-da [ 642.495841][ T5908] usb 3-1: SerialNumber: syz [ 642.501448][ T5908] usb 3-1: config 0 descriptor?? [ 642.517392][T18988] das-1801hc [ 642.520691][T18988] das-1802hc [ 642.523984][T18988] das-1801ao [ 642.530087][T18988] das-1802ao [ 642.533415][ T5908] hub 3-1:0.145: bad descriptor, ignoring hub [ 642.533934][T18988] comedi: valid board names for das800 driver are: [ 642.547538][T18988] das-800 [ 642.604825][ T30] audit: type=1400 audit(2000000032.710:541): avc: denied { read write } for pid=19044 comm="syz.3.4174" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 642.629781][T19045] sd 0:0:1:0: PR command failed: 1026 [ 642.635235][T19045] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 642.651332][ T5908] hub 3-1:0.145: probe with driver hub failed with error -5 [ 642.652628][T19045] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 642.666835][ T30] audit: type=1400 audit(2000000032.710:542): avc: denied { open } for pid=19044 comm="syz.3.4174" path="/294/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 642.666961][T18988] cio-das800 [ 642.997571][ T30] audit: type=1400 audit(2000000032.760:543): avc: denied { ioctl } for pid=19044 comm="syz.3.4174" path="/294/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 643.022734][T18988] das-801 [ 643.034810][T18988] cio-das801 [ 643.041599][T18988] das-802 [ 643.044693][T18988] cio-das802 [ 643.048287][T18988] cio-das802/16 [ 643.052029][T18988] comedi: valid board names for isa-das08 driver are: [ 643.059230][T18988] isa-das08 [ 643.062469][T18988] das08-pgm [ 643.066549][T18988] das08-pgh [ 643.069814][T18988] das08-pgl [ 643.073031][T18988] das08-aoh [ 643.076792][T18988] das08-aol [ 643.080029][T18988] das08-aom [ 643.083238][T18988] das08/jr-ao [ 643.088755][T18988] das08jr-16-ao [ 643.093348][T18988] pc104-das08 [ 643.096846][T18988] das08jr/16 [ 643.100142][T18988] comedi: valid board names for das16m1 driver are: [ 643.107089][T18988] das16m1 [ 643.110125][T18988] comedi: valid board names for dac02 driver are: [ 643.116674][T18988] dac02 [ 643.119551][T18988] comedi: valid board names for rti802 driver are: [ 643.126675][T18988] rti802 [ 643.130527][T18988] comedi: valid board names for rti800 driver are: [ 643.137251][T18988] rti800 [ 643.141767][T18988] rti815 [ 643.144916][ T5961] usb 3-1: USB disconnect, device number 55 [ 643.151616][T18988] comedi: valid board names for pcm3724 driver are: [ 643.158963][T18988] pcm3724 [ 643.163179][T18988] comedi: valid board names for pcl818 driver are: [ 643.169843][T18988] pcl818l [ 643.172893][T18988] pcl818h [ 643.176038][T18988] pcl818hd [ 643.179183][T18988] pcl818hg [ 643.182317][T18988] pcl818 [ 643.194513][T18988] pcl718 [ 643.197550][T18988] pcm3718 [ 643.200666][T18988] comedi: valid board names for pcl816 driver are: [ 643.207286][T18988] pcl816 [ 643.210222][T18988] pcl814b [ 643.213353][T18988] comedi: valid board names for pcl812 driver are: [ 643.222084][T18988] pcl812 [ 643.225144][T18988] pcl812pg [ 643.228899][T18988] acl8112pg [ 643.233526][T18988] acl8112dg [ 643.243862][T18988] acl8112hg [ 643.248154][T18988] a821pgl [ 643.253722][T18988] a821pglnda [ 643.257146][T18988] a821pgh [ 643.262221][T18988] a822pgl [ 643.267347][T18988] a822pgh [ 643.271590][T18988] a823pgl [ 643.274872][T18988] a823pgh [ 643.278146][T18988] pcl813 [ 643.281071][T18988] pcl813b [ 643.284152][T18988] acl8113 [ 643.291332][T18988] iso813 [ 643.296435][T18988] acl8216 [ 643.308162][T18988] a826pg [ 643.311725][T18988] comedi: valid board names for pcl730 driver are: [ 643.318478][T18988] pcl730 [ 643.321499][T18988] iso730 [ 643.326067][T18988] acl7130 [ 643.329150][T18988] pcm3730 [ 643.332248][T18988] pcl725 [ 643.511244][T18988] p8r8dio [ 643.525165][T18988] acl7225b [ 643.533857][T18988] p16r16dio [ 643.566843][T18988] pcl733 [ 643.617882][T18988] pcl734 [ 643.643449][T18988] opmm-1616-xt [ 643.676160][T18988] pearl-mm-p [ 643.703635][T18988] ir104-pbf [ 643.727192][T18988] comedi: valid board names for pcl726 driver are: [ 643.767701][T18988] pcl726 [ 644.150065][T18988] pcl727 [ 644.239028][T18988] pcl728 [ 644.257100][T18988] acl6126 [ 644.263489][T18988] acl6128 [ 644.320833][T18988] comedi: valid board names for pcl724 driver are: [ 644.327820][T18988] pcl724 [ 644.330750][T18988] pcl722 [ 644.334063][T18988] pcl731 [ 644.337235][T18988] acl7122 [ 644.341307][T18988] acl7124 [ 644.349183][T18988] pet48dio [ 644.353233][T18988] pcmio48 [ 644.364346][T18988] onyx-mm-dio [ 644.368186][T18988] comedi: valid board names for pcl711 driver are: [ 644.375293][T18988] pcl711 [ 644.378667][T18988] pcl711b [ 644.381729][T18988] acl8112hg [ 644.384932][T18988] acl8112dg [ 644.390118][T18988] comedi: valid board names for amplc_pc263 driver are: [ 644.397589][T18988] pc263 [ 644.400513][T18988] comedi: valid board names for amplc_pc236 driver are: [ 644.408110][T18988] pc36at [ 644.411099][T18988] comedi: valid board names for amplc_dio200 driver are: [ 644.418903][T18988] pc212e [ 644.421912][T18988] pc214e [ 644.440593][T19073] siw: device registration error -23 [ 644.680976][T18988] pc215e [ 644.686207][T18988] pc218e [ 644.691065][T18988] pc272e [ 644.696161][T18988] comedi: valid board names for comedi_parport driver are: [ 644.703398][T18988] comedi_parport [ 644.712243][T18988] comedi: valid board names for comedi_test driver are: [ 644.719285][T18988] comedi_test [ 644.722677][T18988] comedi: valid board names for comedi_bond driver are: [ 644.730137][T18988] comedi_bond [ 645.049812][T19086] tipc: Enabling of bearer rejected, failed to enable media [ 645.272783][T19099] netlink: 'syz.5.4189': attribute type 3 has an invalid length. [ 645.280572][T19099] netlink: 'syz.5.4189': attribute type 1 has an invalid length. [ 645.288342][T19099] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4189'. [ 645.354814][ T5961] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 645.504730][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 645.515329][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.636483][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 645.645540][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 645.646792][T19106] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4192'. [ 645.658152][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 645.696610][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.750382][ T5961] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 645.759584][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.764692][ T10] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 645.778941][ T5961] usb 4-1: Product: syz [ 645.784503][ T5961] usb 4-1: Manufacturer: syz [ 645.793930][ T5961] usb 4-1: SerialNumber: syz [ 645.809277][T10909] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.812579][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'. [ 645.850096][T10909] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.856443][ T5961] usb 4-1: config 0 descriptor?? [ 645.863748][T19106] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4192'. [ 645.873307][T10909] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.887503][T10909] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.953709][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 645.962719][ T10] usb 5-1: config 0 has no interface number 0 [ 645.969423][ T10] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 645.974673][ T5961] rc_core: IR keymap rc-xbox-dvd not found [ 645.985844][ T5961] Registered IR keymap rc-empty [ 646.001917][ T5961] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 646.002091][ T10] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 646.022890][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.031351][ T10] usb 5-1: Product: syz [ 646.035441][ T5961] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 646.035812][ T10] usb 5-1: Manufacturer: syz [ 646.049399][ T10] usb 5-1: SerialNumber: syz [ 646.090253][ T10] usb 5-1: config 0 descriptor?? [ 646.218979][ T5961] usb 4-1: USB disconnect, device number 93 [ 646.224976][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 646.756699][T19120] lo speed is unknown, defaulting to 1000 [ 646.762645][T19120] lo speed is unknown, defaulting to 1000 [ 646.769965][T19120] lo speed is unknown, defaulting to 1000 [ 646.799396][T19120] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 647.033916][ T30] audit: type=1400 audit(2000000036.870:544): avc: denied { create } for pid=19117 comm="syz.5.4196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 647.037038][ T10] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 647.065271][T19120] lo speed is unknown, defaulting to 1000 [ 647.076642][T19120] lo speed is unknown, defaulting to 1000 [ 647.082954][T19120] lo speed is unknown, defaulting to 1000 [ 647.089432][T19120] lo speed is unknown, defaulting to 1000 [ 647.094198][ T10] usb 5-1: USB disconnect, device number 76 [ 647.097297][T19120] lo speed is unknown, defaulting to 1000 [ 647.104146][ T30] audit: type=1400 audit(2000000036.880:545): avc: denied { ioctl } for pid=19117 comm="syz.5.4196" path="socket:[79254]" dev="sockfs" ino=79254 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 648.382919][T19142] netlink: 'syz.4.4202': attribute type 3 has an invalid length. [ 648.390777][T19142] netlink: 'syz.4.4202': attribute type 1 has an invalid length. [ 648.398515][T19142] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.4202'. [ 648.546594][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4204'. [ 650.100333][T19182] gfs2: not a GFS2 filesystem [ 650.533336][T19190] input: syz0 as /devices/virtual/input/input39 [ 652.935901][T19248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4232'. [ 653.404696][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 653.594663][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 653.624333][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 653.669708][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.727076][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.740741][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.750022][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.764308][ T10] usb 4-1: Product: syz [ 653.778384][ T10] usb 4-1: Manufacturer: syz [ 653.802510][ T10] usb 4-1: SerialNumber: syz [ 654.718224][T19249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.352223][T19290] input: syz0 as /devices/virtual/input/input40 [ 656.527481][ T10] usb 4-1: 0:2 : does not exist [ 656.541471][ T10] usb 4-1: USB disconnect, device number 94 [ 656.552358][T10575] udevd[10575]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.891485][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805a47ac00: rx timeout, send abort [ 656.906960][ T30] audit: type=1400 audit(2000000047.040:546): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 657.235002][ T30] audit: type=1400 audit(2000000047.040:547): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.267042][ T30] audit: type=1400 audit(2000000047.040:548): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.289069][ T30] audit: type=1400 audit(2000000047.040:549): avc: denied { add_name } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.310474][ T30] audit: type=1400 audit(2000000047.040:550): avc: denied { create } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 657.331670][ T30] audit: type=1400 audit(2000000047.040:551): avc: denied { append open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 657.354792][ T30] audit: type=1400 audit(2000000047.040:552): avc: denied { getattr } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 657.377441][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805a479800: rx timeout, send abort [ 657.399774][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805a47ac00: abort rx timeout. Force session deactivation [ 657.684697][ T5990] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 657.877477][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805a479800: abort rx timeout. Force session deactivation [ 658.075071][ T5990] usb 5-1: Using ep0 maxpacket: 8 [ 658.100573][ T5990] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 658.109282][ T5990] usb 5-1: config 2 has no interface number 0 [ 658.115877][ T5990] usb 5-1: config 2 interface 31 has no altsetting 0 [ 658.124046][ T5990] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 658.134064][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.143155][ T5990] usb 5-1: Product: syz [ 658.149496][ T5990] usb 5-1: Manufacturer: syz [ 658.157675][ T5990] usb 5-1: SerialNumber: syz [ 658.191093][ T5990] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 658.368780][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'. [ 658.521566][T19352] tipc: Enabling of bearer rejected, failed to enable media [ 660.340683][T19376] netlink: 'syz.5.4274': attribute type 3 has an invalid length. [ 660.365646][T19376] netlink: 'syz.5.4274': attribute type 1 has an invalid length. [ 660.373630][T19376] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4274'. [ 660.449181][ T5961] usb 5-1: USB disconnect, device number 77 [ 660.726121][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4278'. [ 661.719071][T19405] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 661.725593][T19405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 661.733444][T19405] vhci_hcd vhci_hcd.0: Device attached [ 661.999827][ T5990] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 662.217996][T19408] vhci_hcd: connection closed [ 662.318193][T16520] vhci_hcd: stop threads [ 662.869932][T16520] vhci_hcd: release socket [ 662.874405][T16520] vhci_hcd: disconnect device [ 663.597877][T19427] tipc: Enabling of bearer rejected, failed to enable media [ 663.972469][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 664.010052][T19442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4292'. [ 664.021898][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 664.030933][T19442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4292'. [ 664.164739][ T5882] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 665.526252][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.536537][ T5882] usb 2-1: config 0 has no interfaces? [ 665.547791][ T5882] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 665.564687][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.571578][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4298'. [ 665.573055][ T5882] usb 2-1: Product: syz [ 665.586407][ T5882] usb 2-1: Manufacturer: syz [ 665.591033][ T5882] usb 2-1: SerialNumber: syz [ 665.603620][ T5882] usb 2-1: config 0 descriptor?? [ 665.636649][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4299'. [ 665.828084][ T5882] usb 2-1: USB disconnect, device number 69 [ 666.075535][ T5922] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 666.234828][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 666.241351][ T5922] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 666.249644][ T5922] usb 4-1: config 0 has no interface number 0 [ 666.270715][ T5922] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 666.279984][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.288467][ T5922] usb 4-1: Product: syz [ 666.292721][ T5922] usb 4-1: Manufacturer: syz [ 666.298469][ T5922] usb 4-1: SerialNumber: syz [ 666.304219][ T5922] usb 4-1: config 0 descriptor?? [ 666.310600][ T5922] hub 4-1:0.145: bad descriptor, ignoring hub [ 666.331773][ T5922] hub 4-1:0.145: probe with driver hub failed with error -5 [ 666.340639][ T5922] usbhid 4-1:0.145: couldn't find an input interrupt endpoint [ 666.624765][ T5882] usb 4-1: USB disconnect, device number 95 [ 666.764688][ T5899] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 666.915097][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 666.930550][ T5899] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 666.943638][ T5899] usb 2-1: config 0 has no interface number 0 [ 666.955427][ T5899] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 666.964453][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.973295][ T5899] usb 2-1: Product: syz [ 666.978603][ T5899] usb 2-1: Manufacturer: syz [ 666.983255][ T5899] usb 2-1: SerialNumber: syz [ 666.996456][ T5899] usb 2-1: config 0 descriptor?? [ 667.013910][ T5899] hub 2-1:0.145: bad descriptor, ignoring hub [ 667.348069][ T5899] hub 2-1:0.145: probe with driver hub failed with error -5 [ 667.363890][ T5899] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input41 [ 667.490302][ T5899] usb 2-1: USB disconnect, device number 70 [ 667.636960][ T5990] vhci_hcd: vhci_device speed not set [ 668.285336][ T5922] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 668.444757][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 668.466442][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.494669][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 668.505419][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.598464][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.606696][ T5922] usb 5-1: Product: syz [ 668.610885][ T5922] usb 5-1: Manufacturer: syz [ 668.615670][ T5922] usb 5-1: SerialNumber: syz [ 669.123081][ T30] audit: type=1400 audit(2000000059.250:553): avc: denied { mount } for pid=19510 comm="syz.4.4319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 669.324065][ T30] audit: type=1400 audit(2000000059.410:554): avc: denied { mounton } for pid=19510 comm="syz.4.4319" path="/317/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 669.346777][ T30] audit: type=1400 audit(2000000059.410:555): avc: denied { read } for pid=19510 comm="syz.4.4319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 669.371437][ T30] audit: type=1400 audit(2000000059.410:556): avc: denied { open } for pid=19510 comm="syz.4.4319" path="/317/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 669.396726][ T30] audit: type=1400 audit(2000000059.410:557): avc: denied { read } for pid=19510 comm="syz.4.4319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 669.434376][ T30] audit: type=1400 audit(2000000059.410:558): avc: denied { read } for pid=19510 comm="syz.4.4319" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 669.724317][T19551] comedi: valid board names for 8255 driver are: [ 669.730766][T19551] 8255 [ 669.733561][T19551] comedi: valid board names for vmk80xx driver are: [ 669.740246][T19551] vmk80xx [ 669.743298][T19551] comedi: valid board names for usbduxsigma driver are: [ 669.750273][T19551] usbduxsigma [ 669.753661][T19551] comedi: valid board names for usbduxfast driver are: [ 669.760550][T19551] usbduxfast [ 669.763860][T19551] comedi: valid board names for usbdux driver are: [ 669.770399][T19551] usbdux [ 669.773360][T19551] comedi: valid board names for ni6501 driver are: [ 669.779929][T19551] ni6501 [ 669.782903][T19551] comedi: valid board names for dt9812 driver are: [ 669.789681][T19551] dt9812 [ 669.792861][T19551] comedi: valid board names for ni_labpc_cs driver are: [ 669.799863][T19551] ni_labpc_cs [ 669.803280][T19551] comedi: valid board names for ni_daq_700 driver are: [ 669.810222][T19551] ni_daq_700 [ 669.813553][T19551] comedi: valid board names for labpc_pci driver are: [ 669.820433][T19551] labpc_pci [ 669.823673][T19551] comedi: valid board names for adl_pci9118 driver are: [ 669.830657][T19551] pci9118dg [ 669.833889][T19551] pci9118hg [ 669.837149][T19551] pci9118hr [ 669.840394][T19551] comedi: valid board names for 8255_pci driver are: [ 669.847123][T19551] 8255_pci [ 669.850291][T19551] comedi: valid board names for s526 driver are: [ 669.856658][T19551] s526 [ 669.859487][T19551] comedi: valid board names for multiq3 driver are: [ 669.866114][T19551] multiq3 [ 669.869176][T19551] comedi: valid board names for pcmuio driver are: [ 669.875723][T19551] pcmuio48 [ 669.875744][ T30] audit: type=1800 audit(2000000059.850:559): pid=19551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4330" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 669.878874][T19551] pcmuio96 [ 669.903369][T19551] comedi: valid board names for pcmmio driver are: [ 669.909915][T19551] pcmmio [ 669.912881][T19551] comedi: valid board names for pcmda12 driver are: [ 669.919511][T19551] pcmda12 [ 669.922585][T19551] comedi: valid board names for pcmad driver are: [ 669.929038][T19551] pcmad12 [ 669.932119][T19551] pcmad16 [ 669.935192][T19551] comedi: valid board names for ni_labpc driver are: [ 669.941950][T19551] lab-pc-1200 [ 669.945795][T19551] lab-pc-1200ai [ 669.949355][T19551] lab-pc+ [ 669.952399][T19551] comedi: valid board names for atmio16 driver are: [ 669.959078][T19551] atmio16 [ 669.962177][T19551] atmio16d [ 669.965363][T19551] comedi: valid board names for ni_at_ao driver are: [ 669.972082][T19551] at-ao-6 [ 669.975186][T19551] at-ao-10 [ 669.978332][T19551] comedi: valid board names for ni_at_a2150 driver are: [ 669.985365][T19551] ni_at_a2150 [ 669.988839][T19551] comedi: valid board names for adq12b driver are: [ 669.995422][T19551] adq12b [ 669.998395][T19551] comedi: valid board names for mpc624 driver are: [ 670.004959][T19551] mpc624 [ 670.007925][T19551] comedi: valid board names for c6xdigio driver are: [ 670.014650][T19551] c6xdigio [ 670.017776][T19551] comedi: valid board names for aio_iiro_16 driver are: [ 670.024739][T19551] aio_iiro_16 [ 670.028130][T19551] comedi: valid board names for aio_aio12_8 driver are: [ 670.035111][T19551] aio_aio12_8 [ 670.038506][T19551] aio_ai12_8 [ 670.041819][T19551] aio_ao12_4 [ 670.045138][T19551] comedi: valid board names for fl512 driver are: [ 670.051596][T19551] fl512 [ 670.054453][T19551] comedi: valid board names for dmm32at driver are: [ 670.061110][T19551] dmm32at [ 670.064166][T19551] comedi: valid board names for dt282x driver are: [ 670.070688][T19551] dt2821 [ 670.073657][T19551] dt2821-f [ 670.076944][T19551] dt2821-g [ 670.080077][T19551] dt2823 [ 670.083028][T19551] dt2824-pgh [ 670.086409][T19551] dt2824-pgl [ 670.089710][T19551] dt2825 [ 670.092758][T19551] dt2827 [ 670.095784][T19551] dt2828 [ 670.098748][T19551] dt2829 [ 670.101699][T19551] dt21-ez [ 670.104958][T19551] dt23-ez [ 670.108023][T19551] dt24-ez [ 670.111114][T19551] dt24-ez-pgl [ 670.114510][T19551] comedi: valid board names for dt2817 driver are: [ 670.121075][T19551] dt2817 [ 670.124042][T19551] comedi: valid board names for dt2815 driver are: [ 670.130623][T19551] dt2815 [ 670.133579][T19551] comedi: valid board names for dt2814 driver are: [ 670.140163][T19551] dt2814 [ 670.143125][T19551] comedi: valid board names for dt2811 driver are: [ 670.149665][T19551] dt2811-pgh [ 670.152963][T19551] dt2811-pgl [ 670.156286][T19551] comedi: valid board names for dt2801 driver are: [ 670.162800][T19551] dt2801 [ 670.165781][T19551] comedi: valid board names for das6402 driver are: [ 670.172384][T19551] das6402-12 [ 670.175734][T19551] das6402-16 [ 670.179060][T19551] comedi: valid board names for das1800 driver are: [ 670.185786][T19551] das-1701st [ 670.189092][T19551] das-1701st-da [ 670.192645][T19551] das-1702st [ 670.196105][T19551] das-1702st-da [ 670.199689][T19551] das-1702hr [ 670.202996][T19551] das-1702hr-da [ 670.206592][T19551] das-1701ao [ 670.209900][T19551] das-1702ao [ 670.213194][T19551] das-1801st [ 670.216569][T19551] das-1801st-da [ 670.220130][T19551] das-1802st [ 670.223441][T19551] das-1802st-da [ 670.227002][T19551] das-1802hr [ 670.230305][T19551] das-1802hr-da [ 670.233868][T19551] das-1801hc [ 670.237179][T19551] das-1802hc [ 670.240470][T19551] das-1801ao [ 670.243778][T19551] das-1802ao [ 670.247073][T19551] comedi: valid board names for das800 driver are: [ 670.253601][T19551] das-800 [ 670.256668][T19551] cio-das800 [ 670.260021][T19551] das-801 [ 670.263075][T19551] cio-das801 [ 670.266394][T19551] das-802 [ 670.269473][T19551] cio-das802 [ 670.272770][T19551] cio-das802/16 [ 670.276339][T19551] comedi: valid board names for isa-das08 driver are: [ 670.283127][T19551] isa-das08 [ 670.286360][T19551] das08-pgm [ 670.289576][T19551] das08-pgh [ 670.292778][T19551] das08-pgl [ 670.296098][T19551] das08-aoh [ 670.299304][T19551] das08-aol [ 670.302518][T19551] das08-aom [ 670.305735][T19551] das08/jr-ao [ 670.309141][T19551] das08jr-16-ao [ 670.312698][T19551] pc104-das08 [ 670.316128][T19551] das08jr/16 [ 670.319422][T19551] comedi: valid board names for das16m1 driver are: [ 670.326029][T19551] das16m1 [ 670.329116][T19551] comedi: valid board names for dac02 driver are: [ 670.335558][T19551] dac02 [ 670.338432][T19551] comedi: valid board names for rti802 driver are: [ 670.344993][T19551] rti802 [ 670.347949][T19551] comedi: valid board names for rti800 driver are: [ 670.354468][T19551] rti800 [ 670.357448][T19551] rti815 [ 670.360393][T19551] comedi: valid board names for pcm3724 driver are: [ 670.367012][T19551] pcm3724 [ 670.370105][T19551] comedi: valid board names for pcl818 driver are: [ 670.376648][T19551] pcl818l [ 670.379688][T19551] pcl818h [ 670.382724][T19551] pcl818hd [ 670.386103][T19551] pcl818hg [ 670.389227][T19551] pcl818 [ 670.392155][T19551] pcl718 [ 670.395076][T19551] pcm3718 [ 670.398170][T19551] comedi: valid board names for pcl816 driver are: [ 670.404664][T19551] pcl816 [ 670.407585][T19551] pcl814b [ 670.410584][T19551] comedi: valid board names for pcl812 driver are: [ 670.417059][T19551] pcl812 [ 670.419978][T19551] pcl812pg [ 670.423064][T19551] acl8112pg [ 670.426265][T19551] acl8112dg [ 670.429438][T19551] acl8112hg [ 670.432611][T19551] a821pgl [ 670.435621][T19551] a821pglnda [ 670.438882][T19551] a821pgh [ 670.441881][T19551] a822pgl [ 670.444883][T19551] a822pgh [ 670.447880][T19551] a823pgl [ 670.450877][T19551] a823pgh [ 670.453874][T19551] pcl813 [ 670.456794][T19551] pcl813b [ 670.459805][T19551] acl8113 [ 670.462805][T19551] iso813 [ 670.465738][T19551] acl8216 [ 670.468755][T19551] a826pg [ 670.471673][T19551] comedi: valid board names for pcl730 driver are: [ 670.478159][T19551] pcl730 [ 670.481073][T19551] iso730 [ 670.483983][T19551] acl7130 [ 670.486989][T19551] pcm3730 [ 670.489989][T19551] pcl725 [ 670.492899][T19551] p8r8dio [ 670.495904][T19551] acl7225b [ 670.498990][T19551] p16r16dio [ 670.502255][T19551] pcl733 [ 670.505179][T19551] pcl734 [ 670.508091][T19551] opmm-1616-xt [ 670.511526][T19551] pearl-mm-p [ 670.514951][T19551] ir104-pbf [ 670.518156][T19551] comedi: valid board names for pcl726 driver are: [ 670.524651][T19551] pcl726 [ 670.527566][T19551] pcl727 [ 670.530478][T19551] pcl728 [ 670.533391][T19551] acl6126 [ 670.536401][T19551] acl6128 [ 670.539406][T19551] comedi: valid board names for pcl724 driver are: [ 670.545886][T19551] pcl724 [ 670.548797][T19551] pcl722 [ 670.551708][T19551] pcl731 [ 670.554630][T19551] acl7122 [ 670.557636][T19551] acl7124 [ 670.560636][T19551] pet48dio [ 670.563723][T19551] pcmio48 [ 670.566737][T19551] onyx-mm-dio [ 670.570084][T19551] comedi: valid board names for pcl711 driver are: [ 670.576560][T19551] pcl711 [ 670.579471][T19551] pcl711b [ 670.582491][T19551] acl8112hg [ 670.585713][T19551] acl8112dg [ 670.588890][T19551] comedi: valid board names for amplc_pc263 driver are: [ 670.595802][T19551] pc263 [ 670.598627][T19551] comedi: valid board names for amplc_pc236 driver are: [ 670.605630][T19551] pc36at [ 670.608546][T19551] comedi: valid board names for amplc_dio200 driver are: [ 670.615543][T19551] pc212e [ 670.618454][T19551] pc214e [ 670.621373][T19551] pc215e [ 670.624286][T19551] pc218e [ 670.627208][T19551] pc272e [ 670.630121][T19551] comedi: valid board names for comedi_parport driver are: [ 670.637297][T19551] comedi_parport [ 670.640910][T19551] comedi: valid board names for comedi_test driver are: [ 670.647862][T19551] comedi_test [ 670.651213][T19551] comedi: valid board names for comedi_bond driver are: [ 670.658131][T19551] comedi_bond [ 671.050552][ T5922] usb 5-1: 0:2 : does not exist [ 671.058453][ T5922] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 671.083993][ T30] audit: type=1400 audit(2000000061.200:560): avc: denied { unmount } for pid=14217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 671.143879][ T5922] usb 5-1: USB disconnect, device number 78 [ 671.164731][ T5899] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 672.234635][T19568] comedi comedi2: reset error (fatal) [ 672.425574][ T5922] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 672.510691][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 672.519802][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.535922][ T5899] usb 2-1: Product: syz [ 672.540254][ T5899] usb 2-1: Manufacturer: syz [ 672.544869][ T5899] usb 2-1: SerialNumber: syz [ 672.550862][ T5899] usb 2-1: config 0 descriptor?? [ 672.614656][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 672.636290][ T5922] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 672.647400][ T5922] usb 5-1: config 0 has no interface number 0 [ 672.655874][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 672.797057][T19590] syz.3.4343 (19590): drop_caches: 2 [ 672.810246][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.823025][ T5922] usb 5-1: Product: syz [ 672.823039][ T5899] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 672.838733][ T5922] usb 5-1: Manufacturer: syz [ 672.850988][ T5922] usb 5-1: SerialNumber: syz [ 672.958435][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'. [ 673.101784][ T5922] usb 5-1: config 0 descriptor?? [ 673.108255][ T5922] hub 5-1:0.145: bad descriptor, ignoring hub [ 673.114443][ T5922] hub 5-1:0.145: probe with driver hub failed with error -5 [ 673.123636][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input42 [ 673.836809][ T5899] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 675.573466][ T10] usb 2-1: USB disconnect, device number 71 [ 675.738575][ T5922] usb 5-1: USB disconnect, device number 79 [ 675.910414][ T5922] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 676.346561][ T5922] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 676.364637][ T5922] usb 5-1: config 0 has no interface number 0 [ 676.376357][ T5922] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 676.451292][ T51] Bluetooth: hci2: unexpected event for opcode 0x041b [ 676.488287][ T5922] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 676.498860][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.516013][ T5922] usb 5-1: Product: syz [ 676.520375][ T5922] usb 5-1: Manufacturer: syz [ 676.525214][ T5922] usb 5-1: SerialNumber: syz [ 676.530938][ T5922] usb 5-1: config 0 descriptor?? [ 678.354275][ T5922] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 678.369126][ T5922] usb 5-1: USB disconnect, device number 80 [ 679.449480][ T5899] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 679.614860][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 679.657458][ T5899] usb 5-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 679.709833][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 679.770298][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 679.795917][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 679.813858][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.880277][ T51] Bluetooth: hci4: unexpected event for opcode 0x041b [ 679.952460][ T5899] usb 5-1: config 0 descriptor?? [ 682.371663][T19672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.443726][ T5922] usb 5-1: USB disconnect, device number 81 [ 683.522201][T19730] tipc: Enabled bearer , priority 0 [ 683.591254][T19729] tipc: Disabling bearer [ 683.723359][ T51] Bluetooth: hci0: unexpected event for opcode 0x041b [ 685.056473][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4394'. [ 685.075278][T19768] binder: 19767:19768 unknown command 0 [ 685.080871][T19768] binder: 19767:19768 ioctl c0306201 200000000080 returned -22 [ 685.089707][T19768] binder: 19767:19768 ioctl 4018620d 0 returned -22 [ 685.119814][T19764] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 685.405126][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.544360][T19764] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 685.591005][T19764] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 687.374621][T19785] comedi comedi2: reset error (fatal) [ 688.465218][ T5908] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 688.636125][ T5908] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 688.648468][ T5908] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 688.660760][ T5908] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 688.671833][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.940270][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4416'. [ 689.024447][ T5899] usb 4-1: USB disconnect, device number 96 [ 689.633093][T19849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4421'. [ 690.360203][T19857] siw: device registration error -23 [ 691.291792][T19867] binder: 19866:19867 unknown command 0 [ 691.297354][T19867] binder: 19866:19867 ioctl c0306201 200000000080 returned -22 [ 691.305999][T19867] binder: 19866:19867 ioctl c0306201 0 returned -14 [ 691.634514][ T30] audit: type=1400 audit(4147483735.761:561): avc: denied { write } for pid=19873 comm="syz.4.4427" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 691.659441][T19874] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 691.659441][T19874] program syz.4.4427 not setting count and/or reply_len properly [ 692.504647][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 692.745719][T19893] ALSA: mixer_oss: invalid OSS volume '8' [ 692.866102][ T5908] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 692.927281][T19893] syz.2.4434 (19893): drop_caches: 2 [ 693.064426][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.106295][ T5908] usb 4-1: config 0 has no interfaces? [ 693.125621][ T5908] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 693.141425][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.179144][ T5908] usb 4-1: Product: syz [ 693.194294][ T5908] usb 4-1: Manufacturer: syz [ 693.215821][ T5908] usb 4-1: SerialNumber: syz [ 693.244924][ T5908] usb 4-1: config 0 descriptor?? [ 693.704634][ T5922] usb 4-1: USB disconnect, device number 97 [ 694.357159][T19923] netlink: 'syz.3.4443': attribute type 3 has an invalid length. [ 694.417888][T19923] netlink: 'syz.3.4443': attribute type 1 has an invalid length. [ 694.428536][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4446'. [ 694.446621][T19923] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4443'. [ 697.376541][ T30] audit: type=1400 audit(4147483741.181:562): avc: denied { create } for pid=19973 comm="syz.1.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 699.968017][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.979362][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.988099][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 700.005109][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 700.012554][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 700.050639][T20027] lo speed is unknown, defaulting to 1000 [ 700.063394][T20027] lo speed is unknown, defaulting to 1000 [ 700.262731][T16523] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.291358][T16523] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.315855][T20027] chnl_net:caif_netlink_parms(): no params data found [ 700.478800][T16523] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.493111][T16523] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.541371][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 700.550567][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4483'. [ 700.567013][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 700.575899][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4483'. [ 700.601269][T16523] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.611752][T16523] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.137719][T16523] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.181344][T16523] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.266818][T20027] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.273938][T20027] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.281288][T20027] bridge_slave_0: entered allmulticast mode [ 701.289992][T20027] bridge_slave_0: entered promiscuous mode [ 701.299068][T20027] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.316036][T20027] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.331809][T20027] bridge_slave_1: entered allmulticast mode [ 701.349732][T20027] bridge_slave_1: entered promiscuous mode [ 701.449261][T20027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.499429][T20027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.516126][T20059] netlink: 'syz.3.4487': attribute type 3 has an invalid length. [ 701.527698][T20059] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4487'. [ 701.571958][T20027] team0: Port device team_slave_0 added [ 701.585757][T20027] team0: Port device team_slave_1 added [ 701.715885][T16523] bridge0: port 3(team0) entered disabled state [ 701.746110][T16523] bridge_slave_1: left allmulticast mode [ 701.751750][T16523] bridge_slave_1: left promiscuous mode [ 701.815615][T20065] QAT: failed to copy from user cfg_data. [ 701.837435][T16523] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.100702][ T5845] Bluetooth: hci5: command tx timeout [ 702.129269][T16523] bridge_slave_0: left allmulticast mode [ 702.148556][T16523] bridge_slave_0: left promiscuous mode [ 702.163407][T16523] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.725958][T16523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.736275][T16523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.755428][T16523] bond0 (unregistering): Released all slaves [ 703.101524][T20027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.120449][T20027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.179292][T20027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.230434][T16523] tipc: Left network mode [ 703.235224][T20027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.248393][T20027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.277258][T20027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.317473][T20027] hsr_slave_0: entered promiscuous mode [ 703.323465][T20027] hsr_slave_1: entered promiscuous mode [ 703.330132][T20027] debugfs: 'hsr0' already exists in 'hsr' [ 703.336505][T20027] Cannot create hsr debugfs directory [ 703.575849][ T5845] Bluetooth: hci0: unexpected event for opcode 0x041b [ 703.601063][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4498'. [ 703.656397][T16523] hsr_slave_0: left promiscuous mode [ 703.675341][T16523] hsr_slave_1: left promiscuous mode [ 703.761208][T16523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.771688][T16523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.780542][T16523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.790481][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.804276][T16523] veth1_macvtap: left promiscuous mode [ 703.810989][T16523] veth0_macvtap: left promiscuous mode [ 703.816634][T16523] veth1_vlan: left promiscuous mode [ 704.092523][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4504'. [ 705.054666][ T5845] Bluetooth: hci5: command tx timeout [ 705.292208][T16523] team_slave_1 (unregistering): left promiscuous mode [ 705.304754][T16523] team_slave_1 (unregistering): left allmulticast mode [ 705.343026][T16523] team0 (unregistering): Port device team_slave_1 removed [ 705.413710][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4503'. [ 705.618058][ T5882] lo speed is unknown, defaulting to 1000 [ 705.655696][ T5882] infiniband 3yz0: ib_query_port failed (-19) [ 705.965113][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4509'. [ 705.974141][T20166] fuse: Bad value for 'fd' [ 706.388408][T20027] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 706.411814][T20027] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 706.443654][T20027] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 706.493391][T20027] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 706.671021][T20027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.717084][T20027] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.748336][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.755390][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.792596][T16523] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.799673][T16523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.068644][ T5845] Bluetooth: hci5: command tx timeout [ 707.240046][T20027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.811248][T20027] veth0_vlan: entered promiscuous mode [ 708.139372][T20027] veth1_vlan: entered promiscuous mode [ 708.231502][T20027] veth0_macvtap: entered promiscuous mode [ 708.241106][T20027] veth1_macvtap: entered promiscuous mode [ 708.266459][T20027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.283711][T20027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.773384][ T30] audit: type=1400 audit(4147483752.831:563): avc: denied { write } for pid=20224 comm="syz.3.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 709.144728][ T5845] Bluetooth: hci5: command tx timeout [ 711.224763][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.234067][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.285903][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.494691][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.696025][ T30] audit: type=1400 audit(4147483755.831:564): avc: denied { create } for pid=20277 comm="syz.4.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 711.726128][ T30] audit: type=1400 audit(4147483755.831:565): avc: denied { write } for pid=20277 comm="syz.4.4528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 711.919947][T16523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.928171][T16523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.016707][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.029183][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.951616][T20324] netlink: 'syz.2.4539': attribute type 3 has an invalid length. [ 712.990423][T20324] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4539'. [ 716.027460][ T5845] Bluetooth: hci0: unexpected event for opcode 0x041b [ 717.184010][T20401] lo speed is unknown, defaulting to 1000 [ 717.201221][T20401] lo speed is unknown, defaulting to 1000 [ 717.211158][T20401] lo speed is unknown, defaulting to 1000 [ 717.264030][T20390] comedi comedi2: reset error (fatal) [ 717.339654][ T30] audit: type=1400 audit(4147483761.471:566): avc: denied { bind } for pid=20402 comm="syz.3.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 717.513254][T20401] infiniband syz2: set active [ 717.518108][ T5922] lo speed is unknown, defaulting to 1000 [ 717.524308][T20401] infiniband syz2: added lo [ 717.835193][T20401] RDS/IB: syz2: added [ 717.842621][T20401] smc: adding ib device syz2 with port count 1 [ 717.852202][T20401] smc: ib device syz2 port 1 has pnetid [ 717.860315][ T5899] lo speed is unknown, defaulting to 1000 [ 718.370749][T20401] lo speed is unknown, defaulting to 1000 [ 718.842397][T20401] lo speed is unknown, defaulting to 1000 [ 719.495566][T20401] lo speed is unknown, defaulting to 1000 [ 720.060547][T20401] lo speed is unknown, defaulting to 1000 [ 720.172176][T20401] lo speed is unknown, defaulting to 1000 [ 721.350989][T20470] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 721.350989][T20470] program syz.3.4578 not setting count and/or reply_len properly [ 725.911243][T20518] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 725.911243][T20518] program syz.2.4592 not setting count and/or reply_len properly [ 727.295040][T20537] binder: 20536:20537 unknown command 0 [ 727.300603][T20537] binder: 20536:20537 ioctl c0306201 200000000080 returned -22 [ 727.351311][T20539] fuse: Bad value for 'fd' [ 727.927864][T20552] 9p filesystem being mounted at /264/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 729.595866][T20579] sd 0:0:1:0: device reset [ 730.154659][ T3497] Bluetooth: hci3: Frame reassembly failed (-84) [ 730.814207][T20609] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 730.820727][T20609] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 730.828405][T20609] vhci_hcd vhci_hcd.0: Device attached [ 731.430186][T20610] vhci_hcd: connection closed [ 731.430442][ T3497] vhci_hcd: stop threads [ 731.449602][ T3497] vhci_hcd: release socket [ 731.458469][ T3497] vhci_hcd: disconnect device [ 731.496714][ T5899] vhci_hcd: vhci_device speed not set [ 731.866946][T20620] sd 0:0:1:0: device reset [ 732.122134][ T5845] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 732.686238][ T30] audit: type=1400 audit(4147483776.821:567): avc: denied { ioctl } for pid=20641 comm="syz.1.4632" path="socket:[85349]" dev="sockfs" ino=85349 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 732.713044][ T30] audit: type=1400 audit(4147483776.821:568): avc: denied { write } for pid=20641 comm="syz.1.4632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 733.413997][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4638'. [ 735.781123][T20699] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 735.781123][T20699] program syz.2.4648 not setting count and/or reply_len properly [ 736.466737][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4653'. [ 736.756257][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4652'. [ 736.793765][T20718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4652'. [ 737.157505][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4652'. [ 737.176691][T20718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4652'. [ 737.439908][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4656'. [ 737.772286][T20739] netlink: 'syz.5.4660': attribute type 3 has an invalid length. [ 737.781653][T20739] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4660'. [ 738.214628][ T5908] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 738.922564][T20752] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 738.922564][T20752] program syz.5.4664 not setting count and/or reply_len properly [ 738.924945][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 738.957168][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.971581][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 739.003700][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 739.025042][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 739.036052][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.055702][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 739.074596][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.092710][ T5908] usb 4-1: Product: syz [ 739.103407][ T5908] usb 4-1: Manufacturer: syz [ 739.113484][ T5908] usb 4-1: SerialNumber: syz [ 739.119560][ T5908] usb 4-1: config 0 descriptor?? [ 739.127992][ T5908] xbox_remote_probe: endpoint_in message size==0? [ 739.346159][ T5882] usb 4-1: USB disconnect, device number 98 [ 740.220783][T20779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4672'. [ 740.444626][ T5882] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 740.518380][T20790] QAT: failed to copy from user cfg_data. [ 740.610815][ T5882] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 740.621735][ T5882] usb 4-1: config 0 has no interface number 0 [ 740.629325][ T5882] usb 4-1: config 0 interface 41 has no altsetting 0 [ 740.647733][ T5882] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 740.657403][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.665663][ T5882] usb 4-1: Product: syz [ 740.669933][ T5882] usb 4-1: Manufacturer: syz [ 740.674680][ T5882] usb 4-1: SerialNumber: syz [ 740.693877][ T5882] usb 4-1: config 0 descriptor?? [ 741.055272][T20796] rdma_rxe: rxe_newlink: failed to add lo [ 741.620495][T20822] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4686'. [ 741.621842][ T5882] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 741.646889][ T5882] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 741.720665][ T5882] usb 4-1: USB disconnect, device number 99 [ 742.363733][T20835] rdma_rxe: rxe_newlink: failed to add lo [ 742.404648][ T5882] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 742.584609][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 742.664302][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 742.675582][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.685351][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.695177][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 742.706790][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 742.716868][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 742.725947][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.738940][ T5882] usb 3-1: config 0 descriptor?? [ 742.744402][T20831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.964442][ T5908] usb 3-1: USB disconnect, device number 56 [ 743.314228][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 743.387976][T20853] netlink: 'syz.5.4695': attribute type 3 has an invalid length. [ 743.398651][T20853] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4695'. [ 743.516358][T20861] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4698'. [ 744.137393][T20870] sd 0:0:1:0: device reset [ 744.762482][T20882] binder: 20881:20882 unknown command 0 [ 744.786749][T20882] binder: 20881:20882 ioctl c0306201 200000000080 returned -22 [ 746.745834][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.140541][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4718'. [ 748.056631][T20951] overlayfs: missing 'lowerdir' [ 749.548993][T20973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4731'. [ 749.905567][ T5899] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 750.095875][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.115867][ T5899] usb 6-1: config 0 has no interfaces? [ 750.129984][ T5899] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 750.139497][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.148019][ T5899] usb 6-1: Product: syz [ 750.152847][ T5899] usb 6-1: Manufacturer: syz [ 750.158877][ T5899] usb 6-1: SerialNumber: syz [ 750.189064][ T5899] usb 6-1: config 0 descriptor?? [ 751.133866][ T5908] usb 6-1: USB disconnect, device number 51 [ 751.331379][T20999] netlink: 'syz.3.4738': attribute type 3 has an invalid length. [ 751.418518][T20999] netlink: 199644 bytes leftover after parsing attributes in process `syz.3.4738'. [ 751.604034][T21006] QAT: failed to copy from user cfg_data. [ 751.898474][ T5845] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 751.898491][ T5845] Bluetooth: hci5: adv larger than maximum supported [ 751.905660][ T5845] Bluetooth: hci5: Malformed LE Event: 0x0d [ 751.949806][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4745'. [ 752.932085][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 753.169807][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4755'. [ 753.740568][ T30] audit: type=1400 audit(4147483797.701:569): avc: denied { audit_write } for pid=21043 comm="syz.2.4756" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 753.762928][ T30] audit: type=1107 audit(4147483797.701:570): pid=21043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 754.394879][ T5845] Bluetooth: hci2: unexpected event for opcode 0x041b [ 754.936017][T21083] syzkaller0: entered promiscuous mode [ 754.945299][T21083] syzkaller0: entered allmulticast mode [ 755.093252][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4770'. [ 756.584816][ T5882] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 756.745872][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.818517][ T5882] usb 3-1: config 0 has no interfaces? [ 756.832864][ T5882] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 756.862736][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.920111][ T5882] usb 3-1: Product: syz [ 757.119341][ T5882] usb 3-1: Manufacturer: syz [ 757.123971][ T5882] usb 3-1: SerialNumber: syz [ 757.135118][ T5882] usb 3-1: config 0 descriptor?? [ 757.441925][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 757.656183][ T5908] usb 3-1: USB disconnect, device number 57 [ 757.911787][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 757.999835][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 758.010907][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.026737][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.063818][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 758.079716][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 758.121025][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 758.131587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.143899][ T9] usb 4-1: config 0 descriptor?? [ 758.150950][T21137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 758.382793][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4795'. [ 758.457475][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 758.464076][ T9] usb 4-1: USB disconnect, device number 100 [ 760.684717][ T5899] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 761.519449][ T30] audit: type=1400 audit(4147483805.611:571): avc: denied { read } for pid=21195 comm="syz.5.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.686901][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 761.842113][ T5899] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 761.853974][ T5899] usb 3-1: config 0 has no interface number 0 [ 761.868526][ T5899] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 761.879939][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.888487][ T5899] usb 3-1: Product: syz [ 761.892643][ T5899] usb 3-1: Manufacturer: syz [ 761.897319][ T5899] usb 3-1: SerialNumber: syz [ 761.915072][ T5899] usb 3-1: config 0 descriptor?? [ 761.920985][ T5899] smsc95xx v2.0.0 [ 762.337205][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 762.349833][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 762.364609][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 762.664596][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 762.672016][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 762.693513][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.714611][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.734864][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 762.761765][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 762.786522][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 762.812379][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.838075][ T9] usb 4-1: config 0 descriptor?? [ 762.849796][T21222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 763.121658][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 763.128194][ T9] usb 4-1: USB disconnect, device number 101 [ 763.572022][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 763.595819][ T5899] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 764.495398][T21241] comedi comedi2: reset error (fatal) [ 764.640624][ T5899] usb 3-1: USB disconnect, device number 58 [ 765.544572][ T30] audit: type=1326 audit(4147483809.661:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21268 comm="syz.3.4825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb085b8ebe9 code=0x0 [ 765.913992][ T30] audit: type=1400 audit(4147483810.011:573): avc: denied { firmware_load } for pid=21281 comm="syz.5.4828" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 766.176678][T21283] syz.5.4828 (21283) used greatest stack depth: 19480 bytes left [ 767.796395][T21324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4840'. [ 767.932909][T21326] netlink: 'syz.1.4841': attribute type 3 has an invalid length. [ 767.934594][ T5908] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 767.950901][T21326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4841'. [ 768.114601][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 768.132379][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.152267][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 768.164413][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 768.192070][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 768.250271][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.334062][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 768.343551][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.351767][ T5908] usb 4-1: Product: syz [ 768.588457][ T5908] usb 4-1: Manufacturer: syz [ 768.601448][ T5908] usb 4-1: SerialNumber: syz [ 768.616965][ T5908] usb 4-1: config 0 descriptor?? [ 768.976891][ T5908] xbox_remote_probe: endpoint_in message size==0? [ 769.030163][ T5908] usb 4-1: USB disconnect, device number 102 [ 770.539128][T21348] comedi comedi2: reset error (fatal) [ 771.393617][ T30] audit: type=1400 audit(4147483815.521:574): avc: denied { map } for pid=21372 comm="syz.1.4856" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 771.417296][ T30] audit: type=1400 audit(4147483815.521:575): avc: denied { execute } for pid=21372 comm="syz.1.4856" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 771.699767][T21385] syz_tun: entered allmulticast mode [ 773.218016][T21411] sd 0:0:1:0: device reset [ 773.404638][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 773.412362][ T5908] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 773.564596][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 773.574988][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4873'. [ 773.759360][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.770377][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 773.779444][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 773.784675][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.793613][ T5908] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 773.802366][ T5908] usb 2-1: config 0 has no interface number 0 [ 773.811249][ T5908] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 773.820807][ T9] usb 6-1: config 0 descriptor?? [ 773.839976][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.860608][ T5908] usb 2-1: Product: syz [ 773.864869][ T5908] usb 2-1: Manufacturer: syz [ 773.869520][ T5908] usb 2-1: SerialNumber: syz [ 773.877723][ T5908] usb 2-1: config 0 descriptor?? [ 773.886914][ T5908] smsc95xx v2.0.0 [ 774.516662][ T9] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 774.523812][ T9] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 774.675207][ T5908] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 775.039262][ T5908] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 775.048363][ T9] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 775.056028][ T9] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 775.063206][ T9] koneplus 0003:1E7D:2D51.001F: unknown main item tag 0x0 [ 775.073906][ T9] koneplus 0003:1E7D:2D51.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 775.085743][ T9] koneplus 0003:1E7D:2D51.001F: couldn't init struct koneplus_device [ 775.093998][ T9] koneplus 0003:1E7D:2D51.001F: couldn't install mouse [ 775.104881][ T9] koneplus 0003:1E7D:2D51.001F: probe with driver koneplus failed with error -71 [ 775.126682][ T9] usb 6-1: USB disconnect, device number 52 [ 775.152633][T21434] fido_id[21434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 775.349343][ T30] audit: type=1326 audit(4147483819.481:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21444 comm="syz.5.4879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668f98ebe9 code=0x0 [ 775.894964][T21457] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4882'. [ 776.176629][ T5908] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 776.187581][ T5908] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 776.514583][ T5908] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 777.006920][ T5908] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 777.018211][ T5908] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 777.028307][ T5908] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 777.039505][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.052114][T21459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 777.061192][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.451707][ T5899] usb 6-1: USB disconnect, device number 53 [ 777.460963][ T5990] usb 2-1: USB disconnect, device number 72 [ 778.610094][T21490] comedi comedi2: reset error (fatal) [ 779.194608][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 779.355084][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 779.362131][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 779.373400][ T10] usb 4-1: config 0 has no interface number 0 [ 779.392137][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 779.416428][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.438790][ T10] usb 4-1: Product: syz [ 779.445412][ T10] usb 4-1: Manufacturer: syz [ 779.470769][ T10] usb 4-1: SerialNumber: syz [ 779.487298][ T10] usb 4-1: config 0 descriptor?? [ 779.493407][ T10] smsc95xx v2.0.0 [ 779.587526][T21530] netlink: 'syz.4.4909': attribute type 3 has an invalid length. [ 779.596060][T21530] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4909'. [ 779.975258][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 780.067101][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 780.709228][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 780.905525][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 780.910793][T21539] comedi comedi2: reset error (fatal) [ 780.922492][ T9] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 780.941023][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.962043][ T9] usb 6-1: Product: syz [ 780.998557][ T9] usb 6-1: Manufacturer: syz [ 781.003182][ T9] usb 6-1: SerialNumber: syz [ 781.179928][T21548] QAT: failed to copy from user cfg_data. [ 781.443930][ T9] usb 6-1: palm_os_4_probe - error -71 getting connection info [ 781.451584][ T9] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 781.462400][ T9] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 781.484877][ T9] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 781.538030][ T9] usb 6-1: USB disconnect, device number 54 [ 781.559337][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 781.604669][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 781.616629][ T9] visor 6-1:1.0: device disconnected [ 781.894002][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 781.930890][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 782.305585][T21569] overlayfs: overlapping lowerdir path [ 782.312930][ T5845] Bluetooth: hci2: unexpected event for opcode 0x041b [ 782.922423][ T9] usb 4-1: USB disconnect, device number 103 [ 783.464729][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 784.679792][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 784.694668][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 784.704808][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 784.715473][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.728992][T21577] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 784.740108][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 784.768778][T21593] netlink: 'syz.1.4929': attribute type 3 has an invalid length. [ 784.785578][T21593] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4929'. [ 785.336153][ T9] usb 3-1: USB disconnect, device number 59 [ 785.881832][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4937'. [ 785.936827][T21618] veth1_macvtap: left promiscuous mode [ 786.264589][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 786.315557][T21628] QAT: failed to copy from user cfg_data. [ 786.614599][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 786.625262][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.637162][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 786.646927][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.664301][ T10] usb 5-1: config 0 descriptor?? [ 787.913000][ T5845] Bluetooth: hci2: unexpected event for opcode 0x041b [ 787.932575][T21644] netlink: 'syz.5.4944': attribute type 3 has an invalid length. [ 787.940554][T21644] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4944'. [ 788.027004][ T10] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0 [ 788.044148][ T10] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0 [ 788.060830][ T10] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0 [ 788.082959][ T10] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0 [ 788.091213][ T10] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0 [ 788.109569][ T10] koneplus 0003:1E7D:2D51.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 788.733520][ T10] koneplus 0003:1E7D:2D51.0020: couldn't init struct koneplus_device [ 788.743464][ T10] koneplus 0003:1E7D:2D51.0020: couldn't install mouse [ 788.756919][ T10] koneplus 0003:1E7D:2D51.0020: probe with driver koneplus failed with error -71 [ 788.776049][ T10] usb 5-1: USB disconnect, device number 82 [ 789.378938][ T30] audit: type=1400 audit(4147483833.461:577): avc: denied { append } for pid=21671 comm="syz.4.4952" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 790.145257][ T5882] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 790.445013][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 790.451200][ T5882] usb 2-1: config 0 has no interfaces? [ 790.458346][ T5882] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.f8 [ 790.467927][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.483800][ T5882] usb 2-1: Product: syz [ 790.490846][ T5882] usb 2-1: Manufacturer: syz [ 790.517673][ T5882] usb 2-1: SerialNumber: syz [ 790.529160][ T5882] usb 2-1: config 0 descriptor?? [ 790.537629][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888031e37400: rx timeout, send abort [ 790.780642][ T5882] usb 2-1: USB disconnect, device number 73 [ 791.020948][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888031e37000: rx timeout, send abort [ 791.045915][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888031e37400: abort rx timeout. Force session deactivation [ 791.129303][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 791.138354][T21695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4959'. [ 791.148649][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 791.157586][T21695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4959'. [ 791.529266][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888031e37000: abort rx timeout. Force session deactivation [ 791.549713][ T5845] Bluetooth: hci0: unexpected event for opcode 0x041b [ 791.641676][T21705] netlink: 'syz.3.4963': attribute type 3 has an invalid length. [ 791.649517][T21705] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4963'. [ 792.037453][T21717] overlayfs: overlapping lowerdir path [ 792.141319][T21723] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4967'. [ 792.150873][T21722] fuse: Unknown parameter 'group_i00000000000000000000' [ 792.236896][T21727] rdma_rxe: rxe_newlink: failed to add lo [ 792.578291][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4971'. [ 792.724582][ T5908] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 793.482683][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 793.640230][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 793.651757][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.661447][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 793.671136][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 793.682315][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 793.692442][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 793.701494][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.715633][ T5908] usb 4-1: config 0 descriptor?? [ 793.721238][T21729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 793.984208][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 793.995030][ T5899] usb 4-1: USB disconnect, device number 104 [ 794.777563][T21765] fuse: Unknown parameter 'group_i00000000000000000000' [ 794.879470][T21777] ALSA: mixer_oss: invalid OSS volume '8' [ 796.082027][T21805] fuse: Unknown parameter 'group_id00000000000000000000' [ 796.624040][ T5845] Bluetooth: hci5: link tx timeout [ 796.629836][ T5845] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 796.637966][ T5845] Bluetooth: hci5: link tx timeout [ 796.643118][ T5845] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 796.675401][ T5845] Bluetooth: hci5: link tx timeout [ 796.680513][ T5845] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 796.688415][ T5845] Bluetooth: hci5: link tx timeout [ 796.693610][ T5845] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 796.774765][ T5990] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 797.242396][ T5990] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.267214][ T5990] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.285653][ T5990] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 797.294868][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.621627][ T5990] usb 4-1: usb_control_msg returned -32 [ 797.631576][ T5990] usbtmc 4-1:16.0: can't read capabilities [ 797.724148][T21849] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5010'. [ 797.904632][T21848] netlink: 'syz.1.5011': attribute type 3 has an invalid length. [ 797.927279][T21848] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5011'. [ 798.446381][T21868] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 798.446381][T21868] program syz.2.5013 not setting count and/or reply_len properly [ 798.800998][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 798.829752][T21871] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 799.487414][T21886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5021'. [ 799.496508][T21886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5021'. [ 800.315575][ T5990] usb 4-1: USB disconnect, device number 105 [ 800.850242][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 800.914183][T21892] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 800.920698][T21892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.977222][T21892] vhci_hcd vhci_hcd.0: Device attached [ 800.982743][T21893] vhci_hcd: connection closed [ 801.001144][ T77] vhci_hcd: stop threads [ 801.015222][ T77] vhci_hcd: release socket [ 801.020549][ T77] vhci_hcd: disconnect device [ 801.250651][T21915] netlink: 'syz.4.5031': attribute type 1 has an invalid length. [ 801.278959][T21915] bond3: entered promiscuous mode [ 801.292642][T21915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.338867][T21915] bond3: (slave veth3): making interface the new active one [ 801.346436][T21915] veth3: entered promiscuous mode [ 801.351968][T21915] bond3: (slave veth3): Enslaving as an active interface with an up link [ 802.260237][ T30] audit: type=1400 audit(4147483846.361:578): avc: denied { read } for pid=21925 comm="syz.1.5035" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 802.676542][T21941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5040'. [ 803.101238][ T30] audit: type=1400 audit(4147483847.221:579): avc: denied { getopt } for pid=21937 comm="syz.1.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 803.524646][ T5990] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 804.321359][ T5990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.332736][ T5990] usb 5-1: config 0 has no interfaces? [ 804.340643][ T5990] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 804.354447][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.363465][ T5990] usb 5-1: Product: syz [ 804.367877][ T5990] usb 5-1: Manufacturer: syz [ 804.373579][ T5990] usb 5-1: SerialNumber: syz [ 804.379363][ T5990] usb 5-1: config 0 descriptor?? [ 804.497137][T21977] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 804.503651][T21977] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 804.511555][T21977] vhci_hcd vhci_hcd.0: Device attached [ 804.774621][ T5899] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 805.630332][T21978] vhci_hcd: connection closed [ 805.660005][T16523] vhci_hcd: stop threads [ 805.771208][ T5990] usb 5-1: USB disconnect, device number 83 [ 806.125158][T16523] vhci_hcd: release socket [ 806.131776][T16523] vhci_hcd: disconnect device [ 806.237959][T21992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5058'. [ 807.094578][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 807.564573][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 807.578645][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.609101][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 807.641866][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.660150][ T10] usb 4-1: config 0 descriptor?? [ 808.110645][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 808.121312][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 808.132020][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 808.229780][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.245459][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 808.280715][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 808.287912][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 808.372807][ T10] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 808.389235][T22025] ALSA: mixer_oss: invalid OSS volume '8' [ 808.404637][ T10] koneplus 0003:1E7D:2D51.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 808.436105][ T10] koneplus 0003:1E7D:2D51.0021: couldn't init struct koneplus_device [ 808.444197][ T10] koneplus 0003:1E7D:2D51.0021: couldn't install mouse [ 808.447262][T22028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5070'. [ 808.473990][ T10] koneplus 0003:1E7D:2D51.0021: probe with driver koneplus failed with error -71 [ 808.492663][ T10] usb 4-1: USB disconnect, device number 106 [ 808.701292][T22036] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5071'. [ 808.897097][T22011] comedi comedi2: reset error (fatal) [ 811.034346][ T5899] vhci_hcd: vhci_device speed not set [ 812.084530][T22077] comedi comedi2: reset error (fatal) [ 812.254663][ T5990] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 812.338149][T22085] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5086'. [ 812.436423][T22086] overlayfs: overlapping lowerdir path [ 812.714657][ T5990] usb 5-1: Using ep0 maxpacket: 32 [ 812.724777][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.778972][ T5990] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 812.814933][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.418667][ T5990] usb 5-1: config 0 descriptor?? [ 813.754753][ T5882] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 813.844100][ T5990] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 814.326271][ T5990] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 814.333385][ T5990] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 814.351017][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.422740][ T5882] usb 2-1: config 0 has no interfaces? [ 815.447459][ T5990] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 815.457832][ T5882] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 815.504917][ T5990] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 815.512090][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.524046][ T5882] usb 2-1: Product: syz [ 815.528496][ T5990] koneplus 0003:1E7D:2D51.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 815.546979][ T5882] usb 2-1: Manufacturer: syz [ 815.561728][ T5882] usb 2-1: SerialNumber: syz [ 815.569482][ T5990] koneplus 0003:1E7D:2D51.0022: couldn't init struct koneplus_device [ 815.585847][ T5882] usb 2-1: config 0 descriptor?? [ 815.594104][ T5990] koneplus 0003:1E7D:2D51.0022: couldn't install mouse [ 815.618827][ T5990] koneplus 0003:1E7D:2D51.0022: probe with driver koneplus failed with error -71 [ 815.647072][ T5990] usb 5-1: USB disconnect, device number 84 [ 815.887966][ T10] usb 2-1: USB disconnect, device number 74 [ 817.481542][T22143] overlayfs: overlapping lowerdir path [ 817.845848][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5105'. [ 818.264593][ T5922] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 818.704658][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 818.711550][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 818.722722][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.732981][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.742635][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 818.754370][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 818.764463][ T5922] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 818.773996][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.799274][ T5922] usb 4-1: config 0 descriptor?? [ 818.813316][T22149] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 819.060383][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 819.060403][ T5922] usb 4-1: USB disconnect, device number 107 [ 819.094572][ T5990] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 819.300395][ T5990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.557610][ T5990] usb 3-1: config 0 has no interfaces? [ 819.565678][ T5990] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 819.575154][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.583254][ T5990] usb 3-1: Product: syz [ 819.587526][ T5990] usb 3-1: Manufacturer: syz [ 819.592211][ T5990] usb 3-1: SerialNumber: syz [ 819.633371][ T5990] usb 3-1: config 0 descriptor?? [ 819.865019][ T5990] usb 3-1: USB disconnect, device number 60 [ 820.168963][T22194] overlayfs: overlapping lowerdir path [ 820.175089][T22197] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 820.184788][T22197] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 821.624553][T22203] comedi comedi2: reset error (fatal) [ 823.194695][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 823.364693][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 823.382232][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 823.395714][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 823.406038][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 823.416974][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 823.428829][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 823.439878][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 823.449965][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.465253][ T10] usb 2-1: config 0 descriptor?? [ 823.471429][T22230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 824.664520][T22243] comedi comedi2: reset error (fatal) [ 824.790288][T22246] netlink: 'syz.4.5136': attribute type 3 has an invalid length. [ 824.904133][T22246] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5136'. [ 824.938452][ T5990] usb 2-1: USB disconnect, device number 75 [ 824.938541][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 825.204606][ T5882] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 825.417980][ T5882] usb 3-1: device descriptor read/64, error -71 [ 825.926534][ T5882] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 826.734824][ T5882] usb 3-1: device descriptor read/64, error -71 [ 827.006729][ T5882] usb usb3-port1: attempt power cycle [ 827.714400][ T5882] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 827.752723][ T5882] usb 3-1: device descriptor read/8, error -71 [ 827.975267][ T30] audit: type=1400 audit(4147483872.111:580): avc: denied { watch_mount watch_reads } for pid=22288 comm="syz.2.5148" path="/465" dev="tmpfs" ino=2424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 829.159353][T22301] rdma_rxe: rxe_newlink: failed to add lo [ 831.202289][T22326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5157'. [ 831.228983][T22330] sctp: [Deprecated]: syz.2.5160 (pid 22330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 831.228983][T22330] Use struct sctp_sack_info instead [ 831.983739][T22338] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 832.080819][ T5990] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 832.216501][ T5990] usb 5-1: device descriptor read/64, error -71 [ 832.454698][ T5990] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 832.604685][ T5990] usb 5-1: device descriptor read/64, error -71 [ 833.388377][ T5990] usb usb5-port1: attempt power cycle [ 834.404521][T22354] comedi comedi2: reset error (fatal) [ 834.919008][T22353] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 835.175319][T22353] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 835.185716][T22353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.210313][T22378] IPv6: Can't replace route, no match found [ 835.261892][T22353] usb 2-1: Product: syz [ 835.309137][T22353] usb 2-1: Manufacturer: syz [ 835.474628][T22353] usb 2-1: SerialNumber: syz [ 835.480309][T22353] usb 2-1: config 0 descriptor?? [ 835.826879][T22353] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.044176][T22389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5174'. [ 836.250824][T22353] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 837.684522][T22396] comedi comedi2: reset error (fatal) [ 837.728194][ T10] usb 2-1: USB disconnect, device number 76 [ 841.034515][T22432] comedi comedi2: reset error (fatal) [ 841.174546][ T10] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 841.507269][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 841.517006][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.525249][ T10] usb 6-1: Product: syz [ 841.543110][ T10] usb 6-1: Manufacturer: syz [ 841.553289][ T10] usb 6-1: SerialNumber: syz [ 841.565161][T22442] overlayfs: failed to resolve './file0': -2 [ 841.590178][ T10] usb 6-1: config 0 descriptor?? [ 842.716340][ T10] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 842.723723][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 843.090891][ T30] audit: type=1400 audit(4147483887.221:581): avc: denied { create } for pid=22453 comm="syz.2.5197" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=blk_file permissive=1 [ 843.134838][T22463] sctp: [Deprecated]: syz.3.5198 (pid 22463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.134838][T22463] Use struct sctp_sack_info instead [ 843.747616][T22353] usb 6-1: USB disconnect, device number 55 [ 844.054723][T22485] overlayfs: failed to resolve './file0': -2 [ 845.487566][T22510] tipc: Started in network mode [ 845.492439][T22510] tipc: Node identity 2e7a0089c28f, cluster identity 4711 [ 845.504127][T22510] tipc: Enabled bearer , priority 0 [ 845.512857][T22509] tipc: Resetting bearer [ 845.524809][T22353] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 845.694633][ T30] audit: type=1400 audit(4147483889.701:582): avc: denied { execute } for pid=22506 comm="syz.3.5212" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 845.748976][T22514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5214'. [ 845.765860][T22353] usb 5-1: Using ep0 maxpacket: 8 [ 845.774806][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 845.788119][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 845.800373][T22353] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 845.848783][T22509] tipc: Disabling bearer [ 845.866265][T22353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 845.889541][T22353] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 845.961756][T22353] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 846.022738][T22525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5217'. [ 846.455059][T22353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.470470][T22353] usb 5-1: config 0 descriptor?? [ 846.481643][T22505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 846.526730][ T30] audit: type=1400 audit(4147483890.651:583): avc: denied { execute } for pid=22530 comm="syz.2.5219" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 846.894758][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 846.901067][ T5922] usb 5-1: USB disconnect, device number 88 [ 848.654511][T22550] comedi comedi2: reset error (fatal) [ 849.147947][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5229'. [ 850.265949][T22586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5234'. [ 850.493175][ T30] audit: type=1400 audit(4147483894.621:584): avc: denied { ioctl } for pid=22605 comm="syz.5.5242" path="socket:[92796]" dev="sockfs" ino=92796 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 850.524550][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 850.785861][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.795968][ T10] usb 4-1: config 0 has no interfaces? [ 850.809299][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 850.856604][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.874842][ T10] usb 4-1: Product: syz [ 850.879000][ T10] usb 4-1: Manufacturer: syz [ 850.883579][ T10] usb 4-1: SerialNumber: syz [ 850.906716][ T10] usb 4-1: config 0 descriptor?? [ 851.257031][ T5882] usb 4-1: USB disconnect, device number 108 [ 851.954286][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'. [ 852.345237][ T36] Bluetooth: (null): Invalid header checksum [ 852.357839][ T36] Bluetooth: (null): Invalid header checksum [ 852.454921][ T36] Bluetooth: (null): Invalid header checksum [ 852.584937][T16523] Bluetooth: (null): Invalid header checksum [ 852.717135][ T13] Bluetooth: (null): Invalid header checksum [ 852.795118][ T13] Bluetooth: (null): Invalid header checksum [ 852.924159][T22662] comedi: valid board names for 8255 driver are: [ 852.930596][T22662] 8255 [ 852.933345][T22662] comedi: valid board names for vmk80xx driver are: [ 852.939935][T22662] vmk80xx [ 852.942940][T22662] comedi: valid board names for usbduxsigma driver are: [ 852.949870][T22662] usbduxsigma [ 852.953220][T22662] comedi: valid board names for usbduxfast driver are: [ 852.960071][T22662] usbduxfast [ 852.963336][T22662] comedi: valid board names for usbdux driver are: [ 852.969845][T22662] usbdux [ 852.972761][T22662] comedi: valid board names for ni6501 driver are: [ 852.979320][T22662] ni6501 [ 852.982241][T22662] comedi: valid board names for dt9812 driver are: [ 852.988814][T22662] dt9812 [ 852.991734][T22662] comedi: valid board names for ni_labpc_cs driver are: [ 852.998660][T22662] ni_labpc_cs [ 853.002046][T22662] comedi: valid board names for ni_daq_700 driver are: [ 853.009001][T22662] ni_daq_700 [ 853.012273][T22662] comedi: valid board names for labpc_pci driver are: [ 853.019038][T22662] labpc_pci [ 853.022220][T22662] comedi: valid board names for adl_pci9118 driver are: [ 853.029172][T22662] pci9118dg [ 853.032373][T22662] pci9118hg [ 853.035623][T22662] pci9118hr [ 853.038807][T22662] comedi: valid board names for 8255_pci driver are: [ 853.045485][T22662] 8255_pci [ 853.048600][T22662] comedi: valid board names for s526 driver are: [ 853.054920][T22662] s526 [ 853.057667][T22662] comedi: valid board names for multiq3 driver are: [ 853.064236][T22662] multiq3 [ 853.067294][T22662] comedi: valid board names for pcmuio driver are: [ 853.073776][T22662] pcmuio48 [ 853.076897][T22662] pcmuio96 [ 853.080053][T22662] comedi: valid board names for pcmmio driver are: [ 853.086563][T22662] pcmmio [ 853.089483][T22662] comedi: valid board names for pcmda12 driver are: [ 853.096063][T22662] pcmda12 [ 853.099072][T22662] comedi: valid board names for pcmad driver are: [ 853.105492][T22662] pcmad12 [ 853.108498][T22662] pcmad16 [ 853.111502][T22662] comedi: valid board names for ni_labpc driver are: [ 853.118172][T22662] lab-pc-1200 [ 853.121530][T22662] lab-pc-1200ai [ 853.125076][T22662] lab-pc+ [ 853.128086][T22662] comedi: valid board names for atmio16 driver are: [ 853.134688][T22662] atmio16 [ 853.137698][T22662] atmio16d [ 853.140793][T22662] comedi: valid board names for ni_at_ao driver are: [ 853.147483][T22662] at-ao-6 [ 853.150490][T22662] at-ao-10 [ 853.153583][T22662] comedi: valid board names for ni_at_a2150 driver are: [ 853.160525][T22662] ni_at_a2150 [ 853.163879][T22662] comedi: valid board names for adq12b driver are: [ 853.170385][T22662] adq12b [ 853.173307][T22662] comedi: valid board names for mpc624 driver are: [ 853.179816][T22662] mpc624 [ 853.182794][T22662] comedi: valid board names for c6xdigio driver are: [ 853.189472][T22662] c6xdigio [ 853.192565][T22662] comedi: valid board names for aio_iiro_16 driver are: [ 853.199514][T22662] aio_iiro_16 [ 853.202866][T22662] comedi: valid board names for aio_aio12_8 driver are: [ 853.209804][T22662] aio_aio12_8 [ 853.213156][T22662] aio_ai12_8 [ 853.216434][T22662] aio_ao12_4 [ 853.219698][T22662] comedi: valid board names for fl512 driver are: [ 853.226172][T22662] fl512 [ 853.229004][T22662] comedi: valid board names for dmm32at driver are: [ 853.235599][T22662] dmm32at [ 853.238607][T22662] comedi: valid board names for dt282x driver are: [ 853.245122][T22662] dt2821 [ 853.248046][T22662] dt2821-f [ 853.251139][T22662] dt2821-g [ 853.254231][T22662] dt2823 [ 853.257177][T22662] dt2824-pgh [ 853.260444][T22662] dt2824-pgl [ 853.263711][T22662] dt2825 [ 853.266652][T22662] dt2827 [ 853.269570][T22662] dt2828 [ 853.272493][T22662] dt2829 [ 853.275439][T22662] dt21-ez [ 853.278445][T22662] dt23-ez [ 853.281450][T22662] dt24-ez [ 853.284537][T22662] dt24-ez-pgl [ 853.287891][T22662] comedi: valid board names for dt2817 driver are: [ 853.294374][T22662] dt2817 [ 853.297340][T22662] comedi: valid board names for dt2815 driver are: [ 853.303816][T22662] dt2815 [ 853.306742][T22662] comedi: valid board names for dt2814 driver are: [ 853.313206][T22662] dt2814 [ 853.316135][T22662] comedi: valid board names for dt2811 driver are: [ 853.322598][T22662] dt2811-pgh [ 853.325864][T22662] dt2811-pgl [ 853.329115][T22662] comedi: valid board names for dt2801 driver are: [ 853.335592][T22662] dt2801 [ 853.338496][T22662] comedi: valid board names for das6402 driver are: [ 853.345066][T22662] das6402-12 [ 853.348316][T22662] das6402-16 [ 853.351565][T22662] comedi: valid board names for das1800 driver are: [ 853.358128][T22662] das-1701st [ 853.361379][T22662] das-1701st-da [ 853.364909][T22662] das-1702st [ 853.368160][T22662] das-1702st-da [ 853.371671][T22662] das-1702hr [ 853.374950][T22662] das-1702hr-da [ 853.378460][T22662] das-1701ao [ 853.381709][T22662] das-1702ao [ 853.384993][T22662] das-1801st [ 853.388294][T22662] das-1801st-da [ 853.391805][T22662] das-1802st [ 853.395074][T22662] das-1802st-da [ 853.398585][T22662] das-1802hr [ 853.401836][T22662] das-1802hr-da [ 853.405359][T22662] das-1801hc [ 853.408610][T22662] das-1802hc [ 853.411861][T22662] das-1801ao [ 853.415126][T22662] das-1802ao [ 853.418384][T22662] comedi: valid board names for das800 driver are: [ 853.424861][T22662] das-800 [ 853.427851][T22662] cio-das800 [ 853.431107][T22662] das-801 [ 853.434104][T22662] cio-das801 [ 853.437375][T22662] das-802 [ 853.440364][T22662] cio-das802 [ 853.443614][T22662] cio-das802/16 [ 853.447135][T22662] comedi: valid board names for isa-das08 driver are: [ 853.453858][T22662] isa-das08 [ 853.457036][T22662] das08-pgm [ 853.460200][T22662] das08-pgh [ 853.463366][T22662] das08-pgl [ 853.466564][T22662] das08-aoh [ 853.469743][T22662] das08-aol [ 853.472922][T22662] das08-aom [ 853.476124][T22662] das08/jr-ao [ 853.479479][T22662] das08jr-16-ao [ 853.483004][T22662] pc104-das08 [ 853.486385][T22662] das08jr/16 [ 853.489718][T22662] comedi: valid board names for das16m1 driver are: [ 853.496323][T22662] das16m1 [ 853.499331][T22662] comedi: valid board names for dac02 driver are: [ 853.505749][T22662] dac02 [ 853.505757][T22662] comedi: valid board names for rti802 driver are: [ 853.505766][T22662] rti802 [ 853.505773][T22662] comedi: valid board names for rti800 driver are: [ 853.524431][T22662] rti800 [ 853.527350][T22662] rti815 [ 853.530252][T22662] comedi: valid board names for pcm3724 driver are: [ 853.536821][T22662] pcm3724 [ 853.539811][T22662] comedi: valid board names for pcl818 driver are: [ 853.546285][T22662] pcl818l [ 853.549286][T22662] pcl818h [ 853.552276][T22662] pcl818hd [ 853.555383][T22662] pcl818hg [ 853.558460][T22662] pcl818 [ 853.561362][T22662] pcl718 [ 853.564265][T22662] pcm3718 [ 853.567275][T22662] comedi: valid board names for pcl816 driver are: [ 853.573739][T22662] pcl816 [ 853.576669][T22662] pcl814b [ 853.579659][T22662] comedi: valid board names for pcl812 driver are: [ 853.586136][T22662] pcl812 [ 853.589038][T22662] pcl812pg [ 853.592152][T22662] acl8112pg [ 853.595340][T22662] acl8112dg [ 853.598509][T22662] acl8112hg [ 853.601679][T22662] a821pgl [ 853.604681][T22662] a821pglnda [ 853.607930][T22662] a821pgh [ 853.610920][T22662] a822pgl [ 853.613910][T22662] a822pgh [ 853.616916][T22662] a823pgl [ 853.619906][T22662] a823pgh [ 853.622897][T22662] pcl813 [ 853.625846][T22662] pcl813b [ 853.628845][T22662] acl8113 [ 853.631836][T22662] iso813 [ 853.634754][T22662] acl8216 [ 853.637744][T22662] a826pg [ 853.640646][T22662] comedi: valid board names for pcl730 driver are: [ 853.647119][T22662] pcl730 [ 853.650020][T22662] iso730 [ 853.652921][T22662] acl7130 [ 853.655925][T22662] pcm3730 [ 853.658916][T22662] pcl725 [ 853.661819][T22662] p8r8dio [ 853.664816][T22662] acl7225b [ 853.667890][T22662] p16r16dio [ 853.671049][T22662] pcl733 [ 853.673952][T22662] pcl734 [ 853.676876][T22662] opmm-1616-xt [ 853.680300][T22662] pearl-mm-p [ 853.683548][T22662] ir104-pbf [ 853.686750][T22662] comedi: valid board names for pcl726 driver are: [ 853.693218][T22662] pcl726 [ 853.696173][T22662] pcl727 [ 853.699078][T22662] pcl728 [ 853.701979][T22662] acl6126 [ 853.704993][T22662] acl6128 [ 853.707984][T22662] comedi: valid board names for pcl724 driver are: [ 853.714447][T22662] pcl724 [ 853.717372][T22662] pcl722 [ 853.720274][T22662] pcl731 [ 853.723174][T22662] acl7122 [ 853.726174][T22662] acl7124 [ 853.729163][T22662] pet48dio [ 853.732239][T22662] pcmio48 [ 853.735261][T22662] onyx-mm-dio [ 853.738607][T22662] comedi: valid board names for pcl711 driver are: [ 853.745085][T22662] pcl711 [ 853.747997][T22662] pcl711b [ 853.750986][T22662] acl8112hg [ 853.754148][T22662] acl8112dg [ 853.757336][T22662] comedi: valid board names for amplc_pc263 driver are: [ 853.764235][T22662] pc263 [ 853.767081][T22662] comedi: valid board names for amplc_pc236 driver are: [ 853.773979][T22662] pc36at [ 853.776899][T22662] comedi: valid board names for amplc_dio200 driver are: [ 853.783892][T22662] pc212e [ 853.786877][T22662] pc214e [ 853.789795][T22662] pc215e [ 853.792698][T22662] pc218e [ 853.795624][T22662] pc272e [ 853.798604][T22662] comedi: valid board names for comedi_parport driver are: [ 853.805782][T22662] comedi_parport [ 853.809384][T22662] comedi: valid board names for comedi_test driver are: [ 853.816301][T22662] comedi_test [ 853.819642][T22662] comedi: valid board names for comedi_bond driver are: [ 853.826550][T22662] comedi_bond [ 854.126013][T22667] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 856.444683][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 856.714555][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 856.731041][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 856.804629][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.814388][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 856.824130][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 856.836854][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 857.574916][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 857.680869][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.807329][ T10] usb 3-1: config 0 descriptor?? [ 857.812836][T22690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 858.123687][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 858.130327][ T5922] usb 3-1: USB disconnect, device number 65 [ 858.258037][T22730] overlayfs: failed to resolve './file1': -2 [ 859.284597][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 859.665483][T22755] fuse: Unknown parameter 'user_i00000000000000000000' [ 859.797087][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.812016][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.840610][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.854555][T22353] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 859.872718][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 859.883788][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.891849][ T10] usb 3-1: Product: syz [ 859.897775][ T10] usb 3-1: Manufacturer: syz [ 859.902487][ T10] usb 3-1: SerialNumber: syz [ 859.909678][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 859.916890][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 860.004560][T22353] usb 6-1: Using ep0 maxpacket: 32 [ 860.010830][T22353] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 860.068066][T22353] usb 6-1: config 0 has no interface number 0 [ 860.081847][T22353] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 860.092142][T22353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.100546][T22353] usb 6-1: Product: syz [ 860.105486][T22353] usb 6-1: Manufacturer: syz [ 860.110154][T22353] usb 6-1: SerialNumber: syz [ 860.174459][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 860.196278][T22353] usb 6-1: config 0 descriptor?? [ 860.206926][T22353] smsc95xx v2.0.0 [ 860.326565][ T30] audit: type=1400 audit(4147483904.461:585): avc: denied { read write } for pid=22745 comm="syz.2.5286" name="lp0" dev="devtmpfs" ino=3951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 860.357474][ T30] audit: type=1400 audit(4147483904.461:586): avc: denied { open } for pid=22745 comm="syz.2.5286" path="/dev/usb/lp0" dev="devtmpfs" ino=3951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 860.384053][T22771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.403686][T22771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.716477][ T5990] usb 3-1: USB disconnect, device number 66 [ 861.535063][T22353] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 861.797985][T22745] usblp0: removed [ 861.802081][T22353] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 861.879467][T22353] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 861.894292][T22353] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 863.265167][T22802] fuse: Unknown parameter 'user_id00000000000000000000' [ 863.312540][ T5990] usb 6-1: USB disconnect, device number 56 [ 866.980817][ T51] Bluetooth: hci5: unexpected event for opcode 0x041b [ 867.658215][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 867.668193][T22864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5320'. [ 867.679240][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 867.694681][T22864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5320'. [ 868.264554][ T5922] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 868.435963][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 868.459359][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 868.495653][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.512056][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.820592][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 868.974578][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 869.059148][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 869.071774][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.083615][ T5922] usb 3-1: config 0 descriptor?? [ 869.090160][T22878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.159314][T22906] IPv6: Can't replace route, no match found [ 869.805512][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.063809][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 870.079668][ T5922] usb 3-1: USB disconnect, device number 67 [ 870.144653][T22353] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 870.357041][T22353] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 870.378684][T22353] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 870.404814][T22353] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.431963][T22353] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.451874][T22353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.475976][T22353] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 870.523221][T22353] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 870.538330][T22747] udevd[22747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.756100][T22353] usb 6-1: USB disconnect, device number 57 [ 870.851769][T22933] sd 0:0:1:0: device reset [ 873.527174][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5357'. [ 873.615664][ T51] Bluetooth: hci2: unexpected event for opcode 0x041b [ 873.961055][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5357'. [ 874.201340][T22978] bridge_slave_0: left allmulticast mode [ 874.207268][T22978] bridge_slave_0: left promiscuous mode [ 874.213920][T22978] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.223987][T22978] bridge_slave_1: left allmulticast mode [ 874.230109][T22978] bridge_slave_1: left promiscuous mode [ 874.237625][T22978] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.340605][T22986] sd 0:0:1:0: device reset [ 874.530159][T22978] veth0_to_bond: left allmulticast mode [ 874.535805][T22978] veth0_to_bond: left promiscuous mode [ 874.541451][T22978] bridge1: port 2(veth0_to_bond) entered disabled state [ 874.594081][T22978] bond0: (slave bond_slave_0): Releasing backup interface [ 875.316877][T22978] bond0: (slave bond_slave_1): Releasing backup interface [ 875.397299][T22978] team0: Port device team_slave_1 removed [ 875.411486][T22978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.431260][T22978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.516629][T22978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.639480][T22978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.673981][T22978] veth3: left allmulticast mode [ 875.678885][T22978] veth3: left promiscuous mode [ 875.688974][T22978] bridge1: port 1(veth3) entered disabled state [ 875.696404][ T5922] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 875.708438][ T5922] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 875.717950][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 875.727309][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.737339][ T5922] Workqueue: mld mld_ifc_work [ 875.742004][ T5922] RIP: 0010:add_grec+0xac4/0x1720 [ 875.747003][ T5922] Code: 42 84 70 f7 e8 ad 99 48 01 31 ff 41 89 c5 89 c6 e8 71 7f 70 f7 45 85 ed 0f 85 76 02 00 00 e8 23 84 70 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 2d 0a 00 00 48 8b 7c 24 70 44 8b 44 24 64 4c [ 875.766595][ T5922] RSP: 0018:ffffc9000abd7ae0 EFLAGS: 00010206 [ 875.772642][ T5922] RAX: 000000001fffe000 RBX: ffff88807443a280 RCX: ffffffff8a4b07bf [ 875.780590][ T5922] RDX: ffff888028b44880 RSI: ffffffff8a4b07cd RDI: 0000000000000005 [ 875.788541][ T5922] RBP: ffffc9000abd7be8 R08: 0000000000000005 R09: 0000000000000000 [ 875.796488][ T5922] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 875.804437][ T5922] R13: 0000000000000000 R14: ffff8880236dc000 R15: 00000000ffff0000 [ 875.812388][ T5922] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 875.821302][ T5922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.827867][ T5922] CR2: 0000001b2ef1dff8 CR3: 0000000068a7a000 CR4: 00000000003526f0 [ 875.835821][ T5922] Call Trace: [ 875.839078][ T5922] [ 875.841991][ T5922] ? __pfx_add_grec+0x10/0x10 [ 875.846649][ T5922] ? __pfx_debug_object_deactivate+0x10/0x10 [ 875.852616][ T5922] mld_ifc_work+0x392/0xbf0 [ 875.857101][ T5922] process_one_work+0x9cf/0x1b70 [ 875.862020][ T5922] ? __pfx_mld_ifc_work+0x10/0x10 [ 875.867025][ T5922] ? __pfx_process_one_work+0x10/0x10 [ 875.872380][ T5922] ? assign_work+0x1a0/0x250 [ 875.876948][ T5922] worker_thread+0x6c8/0xf10 [ 875.881520][ T5922] ? __pfx_worker_thread+0x10/0x10 [ 875.886616][ T5922] kthread+0x3c2/0x780 [ 875.890674][ T5922] ? __pfx_kthread+0x10/0x10 [ 875.895244][ T5922] ? ret_from_fork+0x25/0x6f0 [ 875.899911][ T5922] ? rcu_is_watching+0x12/0xc0 [ 875.904661][ T5922] ? rcu_is_watching+0x12/0xc0 [ 875.909410][ T5922] ? __pfx_kthread+0x10/0x10 [ 875.913978][ T5922] ret_from_fork+0x5d7/0x6f0 [ 875.918547][ T5922] ? __pfx_kthread+0x10/0x10 [ 875.923116][ T5922] ret_from_fork_asm+0x1a/0x30 [ 875.927869][ T5922] [ 875.930866][ T5922] Modules linked in: [ 875.935114][ T5922] ---[ end trace 0000000000000000 ]--- [ 875.960151][T22978] vlan2: left promiscuous mode [ 875.964993][T22978] veth0_to_hsr: left promiscuous mode [ 875.973862][T22978] bridge1: port 3(vlan2) entered disabled state [ 875.986971][ T5922] RIP: 0010:add_grec+0xac4/0x1720 [ 875.992149][ T5922] Code: 42 84 70 f7 e8 ad 99 48 01 31 ff 41 89 c5 89 c6 e8 71 7f 70 f7 45 85 ed 0f 85 76 02 00 00 e8 23 84 70 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 2d 0a 00 00 48 8b 7c 24 70 44 8b 44 24 64 4c [ 876.039278][T22971] team0: Mode changed to "loadbalance" [ 876.044922][ T5922] RSP: 0018:ffffc9000abd7ae0 EFLAGS: 00010206 [ 876.051370][ T5922] RAX: 000000001fffe000 RBX: ffff88807443a280 RCX: ffffffff8a4b07bf [ 876.061755][ T5922] RDX: ffff888028b44880 RSI: ffffffff8a4b07cd RDI: 0000000000000005 [ 876.069846][ T5922] RBP: ffffc9000abd7be8 R08: 0000000000000005 R09: 0000000000000000 [ 876.077934][ T5922] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 876.086010][ T5922] R13: 0000000000000000 R14: ffff8880236dc000 R15: 00000000ffff0000 [ 876.094077][ T5922] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 876.107131][ T5922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.113823][ T5922] CR2: 0000001b2fe1fff8 CR3: 000000005eb6a000 CR4: 00000000003526f0 [ 876.121935][ T5922] Kernel panic - not syncing: Fatal exception [ 876.128179][ T5922] Kernel Offset: disabled [ 876.132481][ T5922] Rebooting in 86400 seconds..