last executing test programs: 10.684146354s ago: executing program 3 (id=1736): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c40)={0x4c, 0x0, &(0x7f0000000ac0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@weak_binder={0x77622a85, 0x1}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x49d3, 0x0, 0x0, 0x2, 0x36}}, &(0x7f00000007c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$char_usb(r1, &(0x7f0000000840)='3', 0x1) 7.517220955s ago: executing program 3 (id=1767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x80000001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x10, 0x5, 0x1, 0x7, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.13776674s ago: executing program 3 (id=1773): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001340)="06b02b6c752a9a17fd38", 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xfff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x100, 0x80, 0x8, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f4, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x7, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0x403d, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x24], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x9d2, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.692815251s ago: executing program 2 (id=1789): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) symlink(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@generic={&(0x7f0000000540)='./file0\x00', r0}, 0x18) 4.525798059s ago: executing program 2 (id=1793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x1, 0x367}}], 0x1, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440), 0x0, 0x0) 4.499187647s ago: executing program 4 (id=1795): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x7, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0xfffffffd, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x401, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x401, 0x5, 0x7, 0x2, 0x5, 0x5a3, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0xa, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x8, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0xffffff6a, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x9, 0x8, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x2, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3fc, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0x4, 0x7, 0x25ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 4.410014154s ago: executing program 2 (id=1797): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xfffffffffffffe8c, &(0x7f0000000200)="952bb3e00aae9a4c3a"}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x40) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80004509, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) listen(r2, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.396392403s ago: executing program 4 (id=1798): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x2, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x4e) syz_fuse_handle_req(r0, &(0x7f0000004200)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa34741845808000000fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab24ed74ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320bf6350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1586303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd6559e01f868e4d96d68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c57c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21e977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58a59320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea0010000805f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1105a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d434293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738a42258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0xffffffffffffffda, 0xa, {{0x200000008, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 4.335472199s ago: executing program 4 (id=1799): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffefdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb2a6, 0xffffffff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffffffff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3.962740712s ago: executing program 3 (id=1802): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0x7) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x0, 0x8) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) r3 = gettid() tkill(r3, 0x16) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xb]}, 0x8}) 3.942040697s ago: executing program 1 (id=1803): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0xbab6, 0x400, 0x3, 0x10000053}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x382a, 0x9286, 0x9, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x53) syz_usb_disconnect(r0) 3.902293434s ago: executing program 2 (id=1804): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x14) r0 = syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') 3.778938066s ago: executing program 3 (id=1806): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr(r2, 0x0, &(0x7f0000000180)='wireguard\x00', 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2d, {0x9, 0x0, 0x200001, 0x0, 0x0, 0x400}}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) 3.661413701s ago: executing program 4 (id=1809): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 3.24221631s ago: executing program 0 (id=1812): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 3.05989728s ago: executing program 4 (id=1813): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r2, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@ll={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @random="31d861384527"}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140)) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x2, 0x50000, 0x1000, &(0x7f000041e000/0x1000)=nil}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x40012ee4, 0x2) 3.058226391s ago: executing program 0 (id=1814): inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x6) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 2.785290509s ago: executing program 0 (id=1815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000900)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4000805}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000500000004000000"], 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000c2cb1aaf00fb59b4850000007d000000a00d00000000000000000000002020d1ff43ca9d0c50392e77a12100000000000007010000f8ffffffb70200000800"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8001, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040e1}, 0x44000) 1.867036395s ago: executing program 1 (id=1816): r0 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x1000, {0x0, 0x0, 0x0, 0x8, 0x4000000000000bfd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xe]}}) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000500)='\r', 0x1}], 0x1, 0x1, 0x9) 1.388711184s ago: executing program 1 (id=1817): r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d1) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x9) 1.27593181s ago: executing program 1 (id=1818): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f00000002c0)=0xc) 1.219065488s ago: executing program 2 (id=1819): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0}) 1.195576644s ago: executing program 0 (id=1820): setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x1, 0xfd}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') write(0xffffffffffffffff, &(0x7f0000000380)='\\x \\x00000001 2147483647 /tmp\n', 0x1f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)="5fd7ada3294a46793f7f4fbaf6c52b86c52159d22db74ebbdd4b99e019f2dc5ba4762a2eab1d038d7d1a00abd282ab6e151209843e7040de00d716d8a6e41411292f87535ba7b959d92490c0", 0x4c, r2}, 0x64) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) 1.091396782s ago: executing program 1 (id=1821): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)}], 0x1) 997.445026ms ago: executing program 2 (id=1822): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 988.436847ms ago: executing program 3 (id=1823): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="03", 0x1}], 0x1) 603.58138ms ago: executing program 0 (id=1824): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 297.033949ms ago: executing program 4 (id=1825): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8) dup3(r3, r2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bbf, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r6 = syz_pidfd_open(0x0, 0x0) process_madvise(r6, 0x0, 0x0, 0x9, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 0s ago: executing program 0 (id=1826): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48840, 0x0) socket(0xa, 0x80805, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) kernel console output (not intermixed with test programs): 116][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 322.424203][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.432859][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 322.443655][ T980] usb 2-1: Product: syz [ 322.447811][ T980] usb 2-1: Manufacturer: syz [ 322.452503][ T980] usb 2-1: SerialNumber: syz [ 322.457145][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.470691][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.482974][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 322.498718][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 322.508676][ T24] usb 4-1: Manufacturer: syz [ 322.518041][ T24] usb 4-1: config 0 descriptor?? [ 322.701478][ T980] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 322.901048][ T980] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 322.909581][ T980] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 322.934662][ T24] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 322.950221][ T24] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 323.362853][ T980] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 323.385932][ T980] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 323.554863][ T980] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 323.685823][ T980] usb 2-1: USB disconnect, device number 28 [ 323.719978][ T6379] udevd[6379]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 324.162225][ T5697] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 324.257132][ T30] audit: type=1400 audit(1786922395.836:553): avc: denied { connect } for pid=9484 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.287541][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'. [ 324.303416][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'. [ 324.332557][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.343785][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 324.355089][ T5697] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 324.367378][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.386206][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.404757][ T5697] usb 3-1: Product: syz [ 324.414337][ T5697] usb 3-1: Manufacturer: syz [ 324.420370][ T5697] usb 3-1: SerialNumber: syz [ 324.436025][ T5697] usb 3-1: config 0 descriptor?? [ 324.445076][ T5697] gspca_main: se401-2.14.0 probing 047d:5003 [ 324.804630][ T5697] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 324.853917][ T980] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 325.022665][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 325.031712][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.043830][ T980] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 325.052755][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.069254][ T9501] syzkaller0: entered promiscuous mode [ 325.075439][ T9501] syzkaller0: entered allmulticast mode [ 325.081874][ T5725] usb 4-1: USB disconnect, device number 27 [ 325.086047][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.126616][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.138345][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.141745][ T30] audit: type=1800 audit(1786922396.716:554): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1256" name="bmControls" dev="configfs" ino=20330 res=0 errno=0 [ 325.175442][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.204190][ T9503] openvswitch: netlink: IP tunnel dst address not specified [ 325.388764][ T9510] batadv_slave_0: entered promiscuous mode [ 325.874568][ T9509] batadv_slave_0: left promiscuous mode [ 325.891179][ T980] usb 5-1: usb_control_msg returned -71 [ 325.904114][ T980] usbtmc 5-1:16.0: can't read capabilities [ 325.926461][ T980] usb 5-1: USB disconnect, device number 27 [ 326.289148][ T5697] gspca_se401: read req failed req 0x06 error -19 [ 326.321454][ T5697] usb 3-1: USB disconnect, device number 30 [ 326.404764][ T9531] openvswitch: netlink: IP tunnel dst address not specified [ 326.407842][ T30] audit: type=1800 audit(1786922397.976:555): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1267" name="bmControls" dev="configfs" ino=20552 res=0 errno=0 [ 326.611313][ T9536] syzkaller0: entered promiscuous mode [ 326.623645][ T9536] syzkaller0: entered allmulticast mode [ 326.644218][ T9536] tipc: Started in network mode [ 326.658630][ T9536] tipc: Node identity a655b2a51415, cluster identity 4711 [ 326.673695][ T9536] tipc: Enabled bearer , priority 0 [ 326.684696][ T9536] syzkaller0: mtu less than device minimum [ 326.982454][ T980] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 327.046804][ T30] audit: type=1400 audit(1786922398.626:556): avc: denied { read write } for pid=9546 comm="syz.4.1274" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 327.109395][ T30] audit: type=1400 audit(1786922398.626:557): avc: denied { open } for pid=9546 comm="syz.4.1274" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 327.152311][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 327.159993][ T30] audit: type=1400 audit(1786922398.626:558): avc: denied { ioctl } for pid=9546 comm="syz.4.1274" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 327.160949][ T980] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 327.273490][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.286880][ T980] usb 3-1: Product: syz [ 327.296186][ T980] usb 3-1: Manufacturer: syz [ 327.307968][ T980] usb 3-1: SerialNumber: syz [ 327.324140][ T980] usb 3-1: config 0 descriptor?? [ 327.345526][ T980] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 328.248090][ T5697] tipc: Node number set to 2990584485 [ 328.310241][ T9555] vivid-000: ================= START STATUS ================= [ 328.325298][ T9555] vivid-000: Radio HW Seek Mode: Bounded [ 328.337605][ T9555] vivid-000: Radio Programmable HW Seek: false [ 328.344074][ T9555] vivid-000: RDS Rx I/O Mode: Block I/O [ 328.351340][ T9555] vivid-000: Generate RBDS Instead of RDS: false [ 328.358187][ T9555] vivid-000: RDS Reception: true [ 328.364567][ T9555] vivid-000: RDS Program Type: 0 inactive [ 328.370380][ T9555] vivid-000: RDS PS Name: inactive [ 328.377102][ T9555] vivid-000: RDS Radio Text: inactive [ 328.384443][ T9555] vivid-000: RDS Traffic Announcement: false inactive [ 328.392425][ T9555] vivid-000: RDS Traffic Program: false inactive [ 328.400467][ T9555] vivid-000: RDS Music: false inactive [ 328.409913][ T9555] vivid-000: ================== END STATUS ================== [ 328.510424][ T30] audit: type=1400 audit(1786922400.086:559): avc: denied { bind } for pid=9557 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.587497][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.596808][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.043717][ T980] gspca_ov534_9: reg_w failed -110 [ 329.237032][ T30] audit: type=1800 audit(1786922400.816:560): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1280" name="bmControls" dev="configfs" ino=21529 res=0 errno=0 [ 329.260621][ T9566] openvswitch: netlink: IP tunnel dst address not specified [ 329.342542][ T980] gspca_ov534_9: Unknown sensor 0000 [ 329.342614][ T980] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 329.439835][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 329.467415][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.477173][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.509940][ T9576] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1285'. [ 329.541452][ T9582] binder: 9581:9582 ioctl c0306201 0 returned -14 [ 329.582647][ T9584] vivid-003: ================= START STATUS ================= [ 329.591094][ T9584] vivid-003: Radio HW Seek Mode: Bounded [ 329.596793][ T9584] vivid-003: Radio Programmable HW Seek: false [ 329.605020][ T9584] vivid-003: RDS Rx I/O Mode: Block I/O [ 329.610565][ T9584] vivid-003: Generate RBDS Instead of RDS: false [ 329.617050][ T9584] vivid-003: RDS Reception: true [ 329.621996][ T9584] vivid-003: RDS Program Type: 0 inactive [ 329.627824][ T9584] vivid-003: RDS PS Name: inactive [ 329.634509][ T9584] vivid-003: RDS Radio Text: inactive [ 329.640043][ T9584] vivid-003: RDS Traffic Announcement: false inactive [ 329.646848][ T9584] vivid-003: RDS Traffic Program: false inactive [ 329.654306][ T9584] vivid-003: RDS Music: false inactive [ 329.659797][ T9584] vivid-003: ================== END STATUS ================== [ 329.756098][ T980] usb 3-1: USB disconnect, device number 31 [ 329.792231][ T5697] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 329.942689][ T5697] usb 2-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 329.952281][ T5697] usb 2-1: config 0 has no interfaces? [ 329.958966][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.971565][ T5697] usb 2-1: config 0 descriptor?? [ 330.099161][ T9599] batadv_slave_0: entered promiscuous mode [ 330.106020][ T980] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 330.114571][ T9598] batadv_slave_0: left promiscuous mode [ 330.186161][ T5697] usb 2-1: USB disconnect, device number 29 [ 330.263121][ T980] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 330.274906][ T980] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 330.283219][ T30] audit: type=1400 audit(1786922401.866:561): avc: denied { bind } for pid=9600 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.289093][ T980] usb 3-1: config 0 has no interface number 0 [ 330.309666][ T980] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.323048][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.331737][ T980] usb 3-1: Product: syz [ 330.335930][ T980] usb 3-1: Manufacturer: syz [ 330.388511][ T980] usb 3-1: SerialNumber: syz [ 330.404004][ T980] usb 3-1: config 0 descriptor?? [ 330.421704][ T980] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 330.641081][ T980] usb 3-1: USB disconnect, device number 32 [ 330.651971][ T980] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 330.659409][ T9606] ip_tables: iptables: counters copy to user failed while replacing table [ 330.795388][ T9610] vivid-002: ================= START STATUS ================= [ 330.803230][ T9610] vivid-002: Radio HW Seek Mode: Bounded [ 330.825013][ T9610] vivid-002: Radio Programmable HW Seek: false [ 330.833483][ T9610] vivid-002: RDS Rx I/O Mode: Block I/O [ 330.840405][ T9610] vivid-002: Generate RBDS Instead of RDS: false [ 330.849052][ T9610] vivid-002: RDS Reception: true [ 330.856470][ T9610] vivid-002: RDS Program Type: 0 inactive [ 330.863164][ T9610] vivid-002: RDS PS Name: inactive [ 330.868539][ T9610] vivid-002: RDS Radio Text: inactive [ 330.874101][ T9610] vivid-002: RDS Traffic Announcement: false inactive [ 330.883975][ T9610] vivid-002: RDS Traffic Program: false inactive [ 330.890390][ T9610] vivid-002: RDS Music: false inactive [ 330.896167][ T9610] vivid-002: ================== END STATUS ================== [ 331.131399][ T9624] batadv_slave_0: entered promiscuous mode [ 331.138358][ T9623] batadv_slave_0: left promiscuous mode [ 331.365247][ T5697] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 331.443035][ T5787] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.524844][ T5697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.532599][ T5697] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 331.543839][ T5697] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 331.556517][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.564539][ T5697] usb 2-1: Product: syz [ 331.568747][ T5697] usb 2-1: Manufacturer: syz [ 331.573363][ T5697] usb 2-1: SerialNumber: syz [ 331.613067][ T5787] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 331.633534][ T5787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.644972][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.683991][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 331.785168][ T5697] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 331.904423][ T980] usb 4-1: USB disconnect, device number 28 [ 331.984158][ T5697] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 331.992744][ T5697] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 332.184715][ T5697] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 332.401077][ T5593] usb 2-1: USB disconnect, device number 30 [ 332.438860][ T980] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 332.471295][ T9643] vivid-001: ================= START STATUS ================= [ 332.482385][ T9643] vivid-001: Radio HW Seek Mode: Bounded [ 332.488062][ T9643] vivid-001: Radio Programmable HW Seek: false [ 332.494323][ T9643] vivid-001: RDS Rx I/O Mode: Block I/O [ 332.502803][ T9643] vivid-001: Generate RBDS Instead of RDS: false [ 332.515566][ T9643] vivid-001: RDS Reception: true [ 332.520549][ T9643] vivid-001: RDS Program Type: 0 inactive [ 332.526936][ T9643] vivid-001: RDS PS Name: inactive [ 332.530622][ T30] audit: type=1400 audit(1786922404.106:562): avc: denied { read append } for pid=9645 comm="syz.0.1312" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 332.532334][ T9643] vivid-001: RDS Radio Text: [ 332.555774][ T30] audit: type=1400 audit(1786922404.106:563): avc: denied { open } for pid=9645 comm="syz.0.1312" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 332.585698][ T9643] inactive [ 332.585857][ T30] audit: type=1400 audit(1786922404.166:564): avc: denied { ioctl } for pid=9645 comm="syz.0.1312" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 332.588833][ T9643] vivid-001: RDS Traffic Announcement: false inactive [ 332.621527][ T980] usb 3-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 332.632373][ T9643] vivid-001: RDS Traffic Program: false inactive [ 332.641749][ T9643] vivid-001: RDS Music: false inactive [ 332.641864][ T980] usb 3-1: config 0 has no interfaces? [ 332.652637][ T30] audit: type=1400 audit(1786922404.216:565): avc: denied { write } for pid=9645 comm="syz.0.1312" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 332.676141][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.686283][ T980] usb 3-1: config 0 descriptor?? [ 332.694017][ T9643] [ 332.696364][ T9643] vivid-001: ================== END STATUS ================== [ 332.896073][ T980] usb 3-1: USB disconnect, device number 33 [ 333.037978][ T9662] loop8: detected capacity change from 0 to 7 [ 333.063845][ T9662] Dev loop8: unable to read RDB block 7 [ 333.080759][ T9662] loop8: unable to read partition table [ 333.090988][ T9662] loop8: partition table beyond EOD, truncated [ 333.102972][ T9662] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 333.470791][ T30] audit: type=1326 audit(1786922405.046:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.1325" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc3659e0d9 code=0x0 [ 333.632255][ T5787] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 333.768790][ T9682] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1326'. [ 333.807785][ T5787] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 333.824869][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.841316][ T5787] usb 5-1: config 0 descriptor?? [ 333.851828][ T5787] pwc: Creative Labs Webcam 5 detected. [ 333.957960][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.966707][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.135119][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076ebe000: rx timeout, send abort [ 334.158350][ T30] audit: type=1400 audit(1786922405.736:567): avc: denied { read } for pid=4945 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 334.180765][ T30] audit: type=1400 audit(1786922405.736:568): avc: denied { search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.254206][ T30] audit: type=1400 audit(1786922405.736:569): avc: denied { write search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.287674][ T30] audit: type=1400 audit(1786922405.736:570): avc: denied { add_name } for pid=4945 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.488739][ T5787] pwc: recv_control_msg error -32 req 02 val 2b00 [ 334.635239][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076ebdc00: rx timeout, send abort [ 334.644674][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076ebe000: abort rx timeout. Force session deactivation [ 334.708147][ T5787] pwc: recv_control_msg error -71 req 04 val 1600 [ 334.737235][ T5787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 334.774903][ T5787] pwc: recv_control_msg error -71 req 04 val 1000 [ 334.792922][ T5787] pwc: recv_control_msg error -71 req 04 val 1300 [ 334.802432][ T5593] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 334.811449][ T5787] pwc: recv_control_msg error -71 req 04 val 1400 [ 334.838807][ T5787] pwc: recv_control_msg error -71 req 02 val 2000 [ 334.853824][ T5787] pwc: recv_control_msg error -71 req 02 val 2100 [ 334.866217][ T5787] pwc: recv_control_msg error -71 req 06 val 0600 [ 334.908126][ T5787] pwc: recv_control_msg error -71 req 04 val 1500 [ 334.929364][ T5787] pwc: recv_control_msg error -71 req 02 val 2500 [ 334.948718][ T5787] pwc: recv_control_msg error -71 req 02 val 2400 [ 334.963134][ T5787] pwc: recv_control_msg error -71 req 02 val 2600 [ 334.971142][ T5787] pwc: recv_control_msg error -71 req 02 val 2900 [ 334.978004][ T5593] usb 3-1: Using ep0 maxpacket: 16 [ 334.980009][ T5593] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.991119][ T5787] pwc: recv_control_msg error -71 req 02 val 2800 [ 335.004807][ T5787] pwc: recv_control_msg error -71 req 04 val 1100 [ 335.024773][ T5787] pwc: recv_control_msg error -71 req 04 val 1200 [ 335.024811][ T5593] usb 3-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 335.036205][ T5787] pwc: Failed to power off camera (-71) [ 335.069048][ T5593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.086329][ T5787] pwc: Registered as video103. [ 335.100851][ T5787] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 335.118561][ T5593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.143465][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076ebdc00: abort rx timeout. Force session deactivation [ 335.148688][ T5787] usb 5-1: USB disconnect, device number 28 [ 335.159941][ T5593] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.186944][ T5593] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.230267][ T5593] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.260017][ T5593] usb 3-1: Manufacturer: syz [ 335.270112][ T5593] usb 3-1: config 0 descriptor?? [ 335.292229][ T980] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 335.452660][ T980] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 335.463796][ T980] usb 4-1: config 0 has no interfaces? [ 335.472235][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.487443][ T980] usb 4-1: config 0 descriptor?? [ 335.552240][ T5593] rc_core: IR keymap rc-hauppauge not found [ 335.558274][ T5593] Registered IR keymap rc-empty [ 335.563337][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.582238][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.613237][ T5593] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 335.626709][ T5593] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 335.641489][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.662289][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.692319][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.703007][ T5787] usb 4-1: USB disconnect, device number 29 [ 335.712333][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.743892][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.762257][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.782290][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.812567][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.842521][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.862249][ T5593] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 335.889564][ T5593] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 335.904386][ T5593] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 335.945748][ T5787] usb 3-1: USB disconnect, device number 34 [ 336.189350][ T9731] loop8: detected capacity change from 0 to 7 [ 336.198081][ T9731] Dev loop8: unable to read RDB block 7 [ 336.204603][ T9731] loop8: unable to read partition table [ 336.210333][ T9731] loop8: partition table beyond EOD, truncated [ 336.225272][ T9731] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 336.532207][ T5593] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 336.683750][ T5593] usb 5-1: unable to get BOS descriptor or descriptor too short [ 336.691551][ T5593] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 336.701583][ T5593] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 336.712622][ T24] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 336.722953][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.731089][ T5593] usb 5-1: Product: syz [ 336.735444][ T5593] usb 5-1: Manufacturer: syz [ 336.740044][ T5593] usb 5-1: SerialNumber: syz [ 336.862797][ T24] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 336.873009][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 336.884251][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 336.895655][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.903788][ T24] usb 3-1: Product: syz [ 336.907997][ T24] usb 3-1: Manufacturer: syz [ 336.912821][ T24] usb 3-1: SerialNumber: syz [ 336.920870][ T24] usb 3-1: config 0 descriptor?? [ 336.927204][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 336.933652][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 336.943689][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 336.954671][ T5593] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 337.153428][ T5593] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 337.165490][ T5593] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 337.248184][ T9740] vivid-001: ================= START STATUS ================= [ 337.255977][ T9740] vivid-001: Radio HW Seek Mode: Bounded [ 337.261616][ T9740] vivid-001: Radio Programmable HW Seek: false [ 337.267975][ T9740] vivid-001: RDS Rx I/O Mode: Block I/O [ 337.273898][ T9740] vivid-001: Generate RBDS Instead of RDS: false [ 337.280350][ T9740] vivid-001: RDS Reception: true [ 337.285797][ T9740] vivid-001: RDS Program Type: 0 inactive [ 337.291577][ T9740] vivid-001: RDS PS Name: inactive [ 337.296937][ T9740] vivid-001: RDS Radio Text: inactive [ 337.302481][ T9740] vivid-001: RDS Traffic Announcement: false inactive [ 337.309467][ T9740] vivid-001: RDS Traffic Program: false inactive [ 337.316451][ T9740] vivid-001: RDS Music: false inactive [ 337.323036][ T9740] vivid-001: ================== END STATUS ================== [ 337.335245][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1344'. [ 337.362926][ T5593] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 337.536077][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1346'. [ 337.595667][ T5787] usb 5-1: USB disconnect, device number 29 [ 338.045422][ T24] usb 3-1: USB disconnect, device number 35 [ 338.491957][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 338.536995][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 338.537009][ T30] audit: type=1400 audit(1786922410.116:574): avc: denied { create } for pid=9773 comm="syz.2.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.566646][ T30] audit: type=1400 audit(1786922410.116:575): avc: denied { bind } for pid=9773 comm="syz.2.1356" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.587971][ T30] audit: type=1400 audit(1786922410.116:576): avc: denied { node_bind } for pid=9773 comm="syz.2.1356" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 338.634638][ T30] audit: type=1400 audit(1786922410.116:577): avc: denied { setopt } for pid=9773 comm="syz.2.1356" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.673101][ T5787] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 338.710685][ T30] audit: type=1400 audit(1786922410.116:578): avc: denied { connect } for pid=9773 comm="syz.2.1356" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.766687][ T30] audit: type=1400 audit(1786922410.116:579): avc: denied { write } for pid=9773 comm="syz.2.1356" path="socket:[21985]" dev="sockfs" ino=21985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.913094][ T5787] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.923306][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.943543][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.962243][ T5787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.986430][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.015360][ T5787] usb 5-1: config 0 descriptor?? [ 339.488008][ T5787] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 339.758023][ T24] usb 5-1: USB disconnect, device number 30 [ 339.854466][ T9795] syz_tun: entered allmulticast mode [ 339.890279][ T9794] syz_tun: left allmulticast mode [ 339.982829][ T5787] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 340.164086][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.176038][ T5787] usb 4-1: not running at top speed; connect to a high speed hub [ 340.192298][ T5787] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 340.213102][ T5787] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 340.213571][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 340.250015][ T5787] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 340.268511][ T5787] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 340.305636][ T5787] usb 4-1: config 14 has no interface number 0 [ 340.332105][ T5787] usb 4-1: config 14 has no interface number 1 [ 340.368888][ T5787] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 340.396040][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 340.418292][ T5787] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 340.421365][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 340.466924][ T30] audit: type=1400 audit(1786922412.046:580): avc: denied { connect } for pid=9800 comm="syz.4.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.489835][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 340.501739][ T30] audit: type=1400 audit(1786922412.066:581): avc: denied { setopt } for pid=9800 comm="syz.4.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.535019][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.543035][ T24] usb 2-1: Product: syz [ 340.548689][ T24] usb 2-1: Manufacturer: syz [ 340.555840][ T24] usb 2-1: SerialNumber: syz [ 340.568826][ T5787] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.591259][ T9803] loop8: detected capacity change from 0 to 7 [ 340.599431][ T5787] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 340.613917][ T9803] Dev loop8: unable to read RDB block 7 [ 340.620861][ T9803] loop8: unable to read partition table [ 340.623643][ T5787] usb 4-1: config 14 interface 57 has no altsetting 0 [ 340.629372][ T9803] loop8: partition table beyond EOD, truncated [ 340.640121][ T9803] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 340.659112][ T30] audit: type=1400 audit(1786922412.236:582): avc: denied { read } for pid=9800 comm="syz.4.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.659232][ T5787] usb 4-1: config 14 interface 228 has no altsetting 0 [ 340.710521][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.752068][ T5787] usb 4-1: Product: syz [ 340.758024][ T5787] usb 4-1: Manufacturer: syz [ 340.773902][ T5787] usb 4-1: SerialNumber: syz [ 340.812903][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 341.007574][ T24] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 341.025752][ T24] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 341.205152][ T5787] legousbtower 4-1:14.57: interrupt endpoints not found [ 341.208047][ T24] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 341.282372][ T980] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 341.442505][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 341.455059][ T980] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 341.468180][ T5593] usb 2-1: USB disconnect, device number 31 [ 341.475684][ T980] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 341.495968][ T980] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 341.529603][ T980] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 341.543908][ T980] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 341.559303][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 341.567942][ T980] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 341.576638][ T980] usb 5-1: Product: syz [ 341.580833][ T980] usb 5-1: Manufacturer: syz [ 341.592231][ T980] usb 5-1: SerialNumber: syz [ 341.600039][ T980] usb 5-1: config 0 descriptor?? [ 341.606006][ T5787] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 341.608350][ T980] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 341.630928][ T980] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 341.639917][ T5787] legousbtower 4-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 341.642415][ T29] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 341.679461][ T9828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9828 comm=syz.0.1376 [ 341.812649][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 341.818165][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.828414][ T29] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 341.837308][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 341.848717][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 341.858900][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 341.870234][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 341.880406][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.893488][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.110127][ T29] usb 3-1: GET_CAPABILITIES returned 0 [ 342.125565][ T29] usbtmc 3-1:16.0: can't read capabilities [ 342.145981][ T5787] usb 5-1: USB disconnect, device number 31 [ 342.151921][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 342.162287][ T9820] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 342.183398][ T9833] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 342.191989][ T5787] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 342.370372][ T29] usb 3-1: USB disconnect, device number 36 [ 342.676154][ T9857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1386'. [ 342.704658][ T9857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1386'. [ 342.722811][ T30] audit: type=1400 audit(1786922414.306:583): avc: denied { create } for pid=9851 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 343.448286][ T29] usb 4-1: USB disconnect, device number 30 [ 343.467548][ T29] legousbtower 4-1:14.228: LEGO USB Tower #-159 now disconnected [ 344.284222][ T5787] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 344.489636][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 344.569773][ T5787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 344.655865][ T5787] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 344.748776][ T5787] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 344.826303][ T5787] usb 2-1: config 2 has no interface number 0 [ 344.946167][ T5787] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 345.060878][ T5787] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 345.085189][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.158860][ T5787] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.181822][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.219453][ T9899] loop8: detected capacity change from 0 to 7 [ 345.226834][ T9899] Dev loop8: unable to read RDB block 7 [ 345.229995][ T5787] usb 2-1: config 2 interface 99 has no altsetting 0 [ 345.232491][ T9899] loop8: unable to read partition table [ 345.232640][ T9899] loop8: partition table beyond EOD, truncated [ 345.232670][ T9899] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 345.297082][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.313710][ T5787] usb 2-1: Product: syz [ 345.327948][ T5787] usb 2-1: Manufacturer: syz [ 345.344970][ T5787] usb 2-1: SerialNumber: syz [ 345.533290][ T9905] loop5: detected capacity change from 0 to 4095 [ 345.577278][ T5787] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input24 [ 345.601027][ T9905] Buffer I/O error on dev loop5, logical block 511, async page read [ 345.628299][ T6395] Buffer I/O error on dev loop5, logical block 511, async page read [ 346.274261][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 346.274277][ T30] audit: type=1400 audit(1786922417.856:585): avc: denied { write } for pid=9920 comm="syz.0.1408" name="/" dev="ocfs2_dlmfs" ino=22226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.274292][ T9923] o2cb: This node has not been configured. [ 346.274303][ T9923] o2cb: Cluster check failed. Fix errors before retrying. [ 346.274321][ T9923] (syz.0.1408,9923,0):user_dlm_register:674 ERROR: status = -22 [ 346.274344][ T9923] (syz.0.1408,9923,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 346.822171][ T9934] syzkaller0: entered promiscuous mode [ 346.853348][ T9934] syzkaller0: entered allmulticast mode [ 346.892302][ T9935] tipc: Started in network mode [ 346.902301][ T9935] tipc: Node identity 2a470edd7b7e, cluster identity 4711 [ 346.920536][ T29] usb 2-1: USB disconnect, device number 32 [ 346.940805][ T9935] tipc: Enabled bearer , priority 0 [ 347.005355][ T9933] tipc: Resetting bearer [ 347.096343][ T9933] tipc: Disabling bearer [ 349.042239][ T980] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 349.272296][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 349.331019][ T980] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 349.530244][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.570251][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.608801][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.641541][ T980] usb 5-1: config 0 descriptor?? [ 349.673750][ T9959] syzkaller0: entered promiscuous mode [ 349.701845][ T9959] syzkaller0: entered allmulticast mode [ 349.992193][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 350.072928][ T980] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 350.092039][ T980] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 350.152328][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 350.164101][ T29] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 350.185135][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 350.208594][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 350.234388][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.262882][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.271770][ T980] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 350.279629][ T29] usb 3-1: Product: syz [ 350.312260][ T29] usb 3-1: Manufacturer: syz [ 350.348106][ T29] usb 3-1: SerialNumber: syz [ 350.369764][ T29] usb 3-1: config 0 descriptor?? [ 350.385850][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 350.411258][ T4948] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.472642][ T980] ft260 0003:0403:6030.0004: failed to retrieve system status [ 350.493963][ T4948] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.507806][ T980] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -5 [ 350.564977][ T4948] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.600761][ T5950] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.617473][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 350.636457][ T9971] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 350.684631][ T4948] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.702223][ T5609] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 350.751146][ T9959] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.810863][ T4948] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.849031][ T4948] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 350.883438][ T5609] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 350.903327][ T5609] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 350.914575][ T5609] usb 2-1: config 0 has no interface number 0 [ 350.927139][ T5609] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.951412][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.967693][ T5609] usb 2-1: Product: syz [ 350.975507][ T5609] usb 2-1: Manufacturer: syz [ 350.984606][ T5609] usb 2-1: SerialNumber: syz [ 351.007317][ T5609] usb 2-1: config 0 descriptor?? [ 351.033355][ T5609] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 351.227488][ T5609] usb 2-1: USB disconnect, device number 33 [ 351.248531][ T5609] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 351.366414][ T29] usb 3-1: USB disconnect, device number 37 [ 351.725364][ T980] usb 5-1: USB disconnect, device number 32 [ 351.832525][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 352.012969][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.043609][ T29] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.066240][ T29] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 352.108887][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.143692][ T9978] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 352.167365][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.648383][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.708809][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.767757][ T29] usb 3-1: USB disconnect, device number 38 [ 352.993245][T10003] syzkaller0: entered promiscuous mode [ 353.012829][T10003] syzkaller0: entered allmulticast mode [ 353.616119][ T30] audit: type=1800 audit(1786922425.196:586): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1444" name="bmControls" dev="configfs" ino=22595 res=0 errno=0 [ 353.640382][T10020] openvswitch: netlink: IP tunnel dst address not specified [ 354.091968][T10020] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1444'. [ 354.632748][ T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 354.749020][T10048] syzkaller0: entered promiscuous mode [ 354.783957][T10048] syzkaller0: entered allmulticast mode [ 354.844096][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 354.870326][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 354.909911][ T29] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 354.943551][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.976279][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.010630][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.031030][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.074414][ T29] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.101779][ T29] usb 5-1: Manufacturer: syz [ 355.141557][ T29] usb 5-1: config 0 descriptor?? [ 355.522321][ T29] rc_core: IR keymap rc-hauppauge not found [ 355.547272][ T29] Registered IR keymap rc-empty [ 355.562397][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 355.602583][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 355.653622][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 355.712970][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 355.786959][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 355.832999][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.002294][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.031869][ T30] audit: type=1400 audit(1786922427.596:587): avc: denied { create } for pid=10062 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 356.082437][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.182327][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.190921][ T30] audit: type=1400 audit(1786922427.616:588): avc: denied { write } for pid=10062 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 356.232239][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.282615][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.382356][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.434747][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.555359][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 356.615713][ T29] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 356.644165][ T29] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.694522][ T30] audit: type=1400 audit(1786922428.276:589): avc: denied { read } for pid=10085 comm="syz.3.1466" name="usbmon8" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 356.753756][ T29] usb 5-1: USB disconnect, device number 33 [ 356.802102][ T30] audit: type=1400 audit(1786922428.276:590): avc: denied { open } for pid=10085 comm="syz.3.1466" path="/dev/usbmon8" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 358.132323][ T29] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 358.742525][ T29] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 358.771497][ T29] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 358.787621][ T29] usb 2-1: can't read configurations, error -71 [ 360.206841][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 360.346795][ T30] audit: type=1400 audit(1786922431.916:591): avc: denied { name_bind } for pid=10129 comm="syz.0.1478" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 361.212516][ T5609] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 361.373691][ T5609] usb 3-1: Using ep0 maxpacket: 32 [ 361.382912][ T5609] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 361.414496][ T5609] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 361.459366][ T5609] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 361.484208][ T5609] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 361.560641][ T5609] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 361.629167][ T5609] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.647052][ T5609] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 361.662900][ T5609] usb 3-1: Product: syz [ 361.773304][ T5609] usb 3-1: Manufacturer: syz [ 361.816744][ T5609] usb 3-1: SerialNumber: syz [ 361.861317][ T5609] usb 3-1: config 0 descriptor?? [ 361.869111][T10150] vivid-002: ================= START STATUS ================= [ 362.143175][T10150] vivid-002: Radio HW Seek Mode: Bounded [ 362.149025][T10150] vivid-002: Radio Programmable HW Seek: false [ 362.155411][T10150] vivid-002: RDS Rx I/O Mode: Block I/O [ 362.205373][ T5609] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.239643][T10150] vivid-002: Generate RBDS Instead of RDS: false [ 362.272432][ T5609] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 362.289996][T10150] vivid-002: RDS Reception: true [ 362.440566][T10150] vivid-002: RDS Program Type: 0 inactive [ 362.522507][T10150] vivid-002: RDS PS Name: inactive [ 362.712579][T10150] vivid-002: RDS Radio Text: inactive [ 362.771743][T10150] vivid-002: RDS Traffic Announcement: false inactive [ 363.182215][T10150] vivid-002: RDS Traffic Program: false inactive [ 363.240652][ T5725] usb 3-1: USB disconnect, device number 39 [ 363.240770][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 363.267973][T10146] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 363.355757][T10157] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 363.355858][T10150] vivid-002: RDS Music: false inactive [ 363.427614][ T5725] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 363.529758][T10150] vivid-002: ================== END STATUS ================== [ 365.588081][T10198] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 366.010864][T10200] bond1 (unregistering): Released all slaves [ 366.427110][ T720] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 366.506977][T10176] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 366.519108][T10198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.608285][T10201] bond1 (unregistering): Released all slaves [ 368.202241][ T5725] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 368.363657][ T5725] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 368.405233][ T5725] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 368.449294][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.481009][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.508187][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 368.531166][ T5725] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 368.548250][ T5725] usb 5-1: Manufacturer: syz [ 368.564130][ T5725] usb 5-1: config 0 descriptor?? [ 369.026912][ T5725] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 369.112805][ T5725] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 369.259557][T10231] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10238] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10231] [ 370.306798][T10271] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1523'. [ 370.413258][ T5725] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 370.631941][ T5725] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 370.666766][ T5725] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 370.692639][ T5725] usb 3-1: can't read configurations, error -71 [ 371.343215][ T5593] usb 5-1: USB disconnect, device number 34 [ 371.444565][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033bf7000: rx timeout, send abort [ 371.453151][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033bf7000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 371.718091][T10287] syzkaller0: entered promiscuous mode [ 371.740254][T10287] syzkaller0: entered allmulticast mode [ 371.816936][ T30] audit: type=1400 audit(1786922443.396:592): avc: denied { watch_mount watch_reads } for pid=10290 comm="syz.0.1531" path="/proc/940/ns" dev="proc" ino=23938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 372.382195][ T5593] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 373.072326][ T5787] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 373.352260][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 373.603056][ T5787] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 373.648969][ T5787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.686516][ T5787] usb 3-1: config 0 has no interface number 0 [ 373.726636][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.742331][ T5593] usb 4-1: device descriptor read/64, error -71 [ 373.774922][ T5787] usb 3-1: Product: syz [ 373.800321][ T5787] usb 3-1: Manufacturer: syz [ 373.821556][ T5787] usb 3-1: SerialNumber: syz [ 373.847817][ T5787] usb 3-1: config 0 descriptor?? [ 373.895804][ T5787] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 373.927405][ T5787] usb 3-1: selecting invalid altsetting 1 [ 373.932914][T10309] tipc: Enabling of bearer rejected, already enabled [ 373.967400][ T5787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 373.992201][ T5593] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 374.077133][ T5787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 374.115931][ T5787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 374.136410][ T5787] usb 3-1: media controller created [ 374.167757][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.172189][ T5593] usb 4-1: device descriptor read/64, error -71 [ 374.253411][ T5787] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 374.274534][ T5787] zl10353_read_register: readreg error (reg=127, ret==-71) [ 374.298587][ T5787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 374.324356][ T5593] usb usb4-port1: attempt power cycle [ 374.410122][ T5787] usb 3-1: USB disconnect, device number 42 [ 374.528657][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.554987][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.682191][ T5593] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 374.712712][ T5593] usb 4-1: device descriptor read/8, error -71 [ 374.972229][ T5593] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 374.999458][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.028650][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.042783][ T5593] usb 4-1: device descriptor read/8, error -71 [ 375.130190][ T30] audit: type=1400 audit(1786922446.706:593): avc: denied { mount } for pid=10330 comm="syz.2.1548" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 375.168238][ T5593] usb usb4-port1: unable to enumerate USB device [ 375.314260][T10337] fuse: Bad value for 'group_id' [ 375.332091][T10337] fuse: Bad value for 'group_id' [ 375.450575][T10341] loop5: detected capacity change from 0 to 7 [ 375.516780][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.604266][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.649824][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.693681][T10350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.730474][T10350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.754561][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.795385][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.849376][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.920340][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 375.975596][T10341] ldm_validate_partition_table(): Disk read failed. [ 375.992214][ T5593] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 376.027796][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.064950][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.145538][T10341] Buffer I/O error on dev loop5, logical block 0, async page read [ 376.153413][ T5593] usb 4-1: Using ep0 maxpacket: 32 [ 376.182255][ T5593] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 376.209008][T10341] Dev loop5: unable to read RDB block 0 [ 376.216448][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.231494][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.251613][T10341] loop5: unable to read partition table [ 376.269249][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.358990][ T5593] usb 4-1: config 0 descriptor?? [ 376.377530][T10341] loop5: partition table beyond EOD, truncated [ 376.419161][T10341] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 376.816394][ T5593] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 376.834869][ T5593] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 377.024394][ T5593] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 377.224740][ T5593] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 377.536159][ T5593] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 377.571856][ T5593] ft260 0003:0403:6030.0006: failed to retrieve status: -5 [ 377.772836][ T5593] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 377.795683][T10370] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1563'. [ 377.805755][T10371] vivid-002: ================= START STATUS ================= [ 377.851976][ T5593] usb 4-1: USB disconnect, device number 35 [ 377.852652][T10371] vivid-002: Radio HW Seek Mode: Bounded [ 377.900685][T10371] vivid-002: Radio Programmable HW Seek: false [ 377.937517][T10371] vivid-002: RDS Rx I/O Mode: Block I/O [ 377.966288][T10371] vivid-002: Generate RBDS Instead of RDS: false [ 377.986226][T10371] vivid-002: RDS Reception: true [ 377.996058][T10371] vivid-002: RDS Program Type: 0 inactive [ 378.017273][T10371] vivid-002: RDS PS Name: inactive [ 378.032327][T10371] vivid-002: RDS Radio Text: inactive [ 378.057832][T10371] vivid-002: RDS Traffic Announcement: false inactive [ 378.084345][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.090653][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.103356][T10371] vivid-002: RDS Traffic Program: false inactive [ 378.136606][T10371] vivid-002: RDS Music: false inactive [ 378.150403][T10371] vivid-002: ================== END STATUS ================== [ 378.396191][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 378.598552][ T30] audit: type=1400 audit(1786922450.176:594): avc: denied { write } for pid=10382 comm="syz.1.1568" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 378.606598][T10383] random: crng reseeded on system resumption [ 378.682978][ T30] audit: type=1400 audit(1786922450.176:595): avc: denied { open } for pid=10382 comm="syz.1.1568" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 379.013368][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.034038][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.083891][ T5593] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 379.242191][ T5593] usb 2-1: Using ep0 maxpacket: 16 [ 379.257115][ T5593] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 379.279571][ T5593] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 379.302226][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.323961][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.341660][ T5593] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.359108][ T5593] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.385764][ T5593] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 379.396123][ T5593] usb 2-1: Manufacturer: syz [ 379.413575][ T5593] usb 2-1: config 0 descriptor?? [ 379.822313][ T5593] rc_core: IR keymap rc-hauppauge not found [ 379.833847][ T5593] Registered IR keymap rc-empty [ 379.843935][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 379.855543][T10417] vivid-004: ================= START STATUS ================= [ 379.863428][T10417] vivid-004: Radio HW Seek Mode: Bounded [ 379.869136][T10417] vivid-004: Radio Programmable HW Seek: false [ 379.872891][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 379.875432][T10417] vivid-004: RDS Rx I/O Mode: Block I/O [ 379.888321][T10417] vivid-004: Generate RBDS Instead of RDS: false [ 379.895229][T10417] vivid-004: RDS Reception: true [ 379.900232][T10417] vivid-004: RDS Program Type: 0 inactive [ 379.904505][ T5593] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 379.906008][T10417] vivid-004: RDS PS Name: inactive [ 379.925568][ T5593] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 379.929905][T10417] vivid-004: RDS Radio Text: inactive [ 379.943606][T10417] vivid-004: RDS Traffic Announcement: false inactive [ 379.950689][T10417] vivid-004: RDS Traffic Program: false inactive [ 379.957313][T10417] vivid-004: RDS Music: false inactive [ 379.957409][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 379.962911][T10417] vivid-004: ================== END STATUS ================== [ 379.992528][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.022230][ T5725] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 380.033385][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.062496][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.082335][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.104038][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.132302][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.165026][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.182958][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 380.188576][ T5725] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 380.192268][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.198780][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.215213][ T5725] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 380.224453][ T5725] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.242353][ T5593] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 380.243680][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.259404][ T5725] usb 4-1: Product: syz [ 380.263737][ T5725] usb 4-1: Manufacturer: syz [ 380.268044][ T5593] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 380.268377][ T5725] usb 4-1: SerialNumber: syz [ 380.293565][ T5593] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 380.312633][ T5787] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 380.315867][ T5593] usb 2-1: USB disconnect, device number 36 [ 380.482987][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 380.489167][ T5787] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 380.503515][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.515364][ T30] audit: type=1400 audit(1786922452.096:596): avc: denied { getopt } for pid=10414 comm="syz.3.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.534960][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.535000][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.537157][ T5787] usb 3-1: config 0 descriptor?? [ 380.611627][ T30] audit: type=1400 audit(1786922452.096:597): avc: denied { map } for pid=10414 comm="syz.3.1574" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 380.651567][ T5725] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 380.716584][ T5725] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 380.733614][ T5725] usb 4-1: USB disconnect, device number 36 [ 380.760561][ T6379] udevd[6379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 380.994552][ T5787] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 381.003405][ T5787] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 381.105964][T10444] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1585'. [ 381.192749][ T5787] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 381.393772][ T5787] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 381.593867][ T5787] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 381.607003][ T5787] ft260 0003:0403:6030.0007: failed to retrieve status: -5 [ 381.807195][ T5787] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 381.847019][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 381.878633][ T5787] usb 3-1: USB disconnect, device number 43 [ 382.104407][ T30] audit: type=1800 audit(1786922453.686:598): pid=10450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1587" name="bus" dev="ramfs" ino=23429 res=0 errno=0 [ 382.372219][ T5593] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 382.492194][ T29] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 382.532250][ T5593] usb 5-1: Using ep0 maxpacket: 16 [ 382.540992][ T5593] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.552385][ T5593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.564636][ T5593] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 382.578447][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.607059][ T5593] usb 5-1: config 0 descriptor?? [ 382.621357][ T5593] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 382.642588][ T29] usb 4-1: device descriptor read/64, error -71 [ 382.825940][ T5593] usb 5-1: USB disconnect, device number 35 [ 382.903006][ T29] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 382.955298][ T30] audit: type=1400 audit(1786922454.536:599): avc: denied { create } for pid=10486 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 382.985430][ T30] audit: type=1400 audit(1786922454.566:600): avc: denied { write } for pid=10486 comm="syz.1.1597" path="socket:[24581]" dev="sockfs" ino=24581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 383.072274][ T29] usb 4-1: device descriptor read/64, error -71 [ 383.194543][ T29] usb usb4-port1: attempt power cycle [ 383.492233][ T5710] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 383.552206][ T29] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 383.583470][ T29] usb 4-1: device descriptor read/8, error -71 [ 383.652575][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 383.660033][ T5710] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 383.675300][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.688511][ T5710] usb 2-1: Product: syz [ 383.696335][ T5710] usb 2-1: Manufacturer: syz [ 383.704496][ T5710] usb 2-1: SerialNumber: syz [ 383.714324][ T5710] usb 2-1: config 0 descriptor?? [ 383.732428][ T5710] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 383.744886][ T5710] dvb-usb: bulk message failed: -22 (4/0) [ 383.753845][ T5710] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 383.766314][ T5710] dvb-usb: bulk message failed: -22 (5/0) [ 383.772051][ T5710] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 383.789906][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.800869][ T5710] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 383.809166][ T5710] usb 2-1: media controller created [ 383.821398][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.832907][ T5725] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 383.841472][ T5710] usb 2-1: selecting invalid altsetting 3 [ 383.847672][ T29] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 383.855304][ T5710] ttusb2: set interface to alts=3 failed [ 383.872674][ T29] usb 4-1: device descriptor read/8, error -71 [ 383.883635][ T5710] DVB: Unable to find symbol tda10086_attach() [ 383.889803][ T5710] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 383.898546][ T5710] dvb-usb: bulk message failed: -22 (4/0) [ 383.904371][ T5710] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 383.916754][ T5710] dvb-usb: bulk message failed: -22 (5/0) [ 383.922971][ T5710] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 383.933230][ T5710] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 383.983067][ T5725] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.002270][ T29] usb usb4-port1: unable to enumerate USB device [ 384.010525][ T5725] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.040547][ T5725] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 384.067376][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.086194][T10505] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 384.126715][ T5725] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.426187][ T30] audit: type=1400 audit(1786922456.006:601): avc: denied { ioctl } for pid=10504 comm="syz.4.1603" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 384.460953][ T29] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 384.528139][ T5710] usb 2-1: USB disconnect, device number 37 [ 384.590519][ T5710] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 384.610364][ T5725] usb 5-1: USB disconnect, device number 36 [ 384.633192][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 384.646674][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.673518][ T29] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 384.687680][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 384.710664][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 384.736153][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 384.752032][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 384.767794][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.789428][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.808933][ T29] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 385.327140][T10527] loop5: detected capacity change from 0 to 7 [ 385.335746][T10527] buffer_io_error: 14 callbacks suppressed [ 385.335759][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.350234][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.364006][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.372388][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.381728][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.389936][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.400411][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.408490][T10527] ldm_validate_partition_table(): Disk read failed. [ 385.418680][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.426844][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.440708][T10527] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.449422][T10527] Dev loop5: unable to read RDB block 0 [ 385.455384][T10527] loop5: unable to read partition table [ 385.462626][T10527] loop5: partition table beyond EOD, truncated [ 385.468954][T10527] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 385.867451][T10540] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1613'. [ 386.195572][T10553] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 386.226978][T10553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.243686][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1619'. [ 386.269506][T10553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.278766][T10553] bond1: (slave bond4): Enslaving as an active interface with a down link [ 386.297672][T10553] bond1 (unregistering): (slave bond4): Releasing active interface [ 386.309159][T10553] bond1 (unregistering): Released all slaves [ 386.392234][ T29] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 386.542332][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 386.549864][ T29] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 386.566525][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 386.570491][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 386.591738][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.605800][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 386.620104][ T29] usb 5-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 386.628522][ T29] usb 5-1: Product: syz [ 386.635254][ T29] usb 5-1: config 0 descriptor?? [ 387.080755][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'. [ 387.095841][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.130971][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.151319][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.169861][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.179638][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.188898][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.197136][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.217986][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.232900][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.243260][ T980] usb 3-1: USB disconnect, device number 44 [ 387.256752][ T29] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 387.293438][ T29] monterey 0003:0566:3004.0008: hidraw0: USB HID v5.40 Device [syz] on usb-dummy_hcd.4-1/input0 [ 387.373464][ T30] audit: type=1400 audit(1786922458.946:602): avc: denied { read } for pid=10587 comm="syz.0.1633" path="socket:[25864]" dev="sockfs" ino=25864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.405592][ T5593] usb 5-1: USB disconnect, device number 37 [ 387.412299][ T5710] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 387.446956][T10591] fido_id[10591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 387.572703][ T5710] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 387.582648][ T5710] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 387.594554][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.602635][ T29] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 387.610383][ T5710] usb 2-1: Product: syz [ 387.615596][ T5710] usb 2-1: Manufacturer: syz [ 387.620399][ T5710] usb 2-1: SerialNumber: syz [ 387.630221][ T5710] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 387.672234][ T980] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 387.772221][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 387.778846][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.786626][ T29] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 387.796567][ T29] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 387.804852][ T29] usb 4-1: config 2 has no interface number 0 [ 387.811659][ T29] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 387.823336][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 387.828486][ T29] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 387.839859][ T29] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.849895][ T980] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 387.858993][ T29] usb 4-1: config 2 interface 99 has no altsetting 0 [ 387.866942][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.877860][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.887666][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.896658][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.905157][ T29] usb 4-1: Product: syz [ 387.910025][ T980] usb 3-1: config 0 descriptor?? [ 387.915710][ T29] usb 4-1: Manufacturer: syz [ 387.920522][ T29] usb 4-1: SerialNumber: syz [ 388.000682][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'. [ 388.044290][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 388.044675][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.062431][ T5710] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 388.074508][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.085692][ T5710] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 388.094188][ T5710] usb 2-1: media controller created [ 388.111740][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.137002][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.99/input/input28 [ 388.289277][ T30] audit: type=1326 audit(1786922459.866:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.0.1638" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01d579e0d9 code=0x0 [ 388.342768][ T5609] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 388.372889][ T5787] usb 4-1: USB disconnect, device number 41 [ 388.512167][ T5609] usb 5-1: Using ep0 maxpacket: 32 [ 388.517905][ T5609] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 388.530614][ T980] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 388.534298][ T5609] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 388.554963][ T5609] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 388.577426][ T5609] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 388.601380][ T5609] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 388.631550][ T5609] usb 5-1: config 0 interface 0 has no altsetting 0 [ 388.647730][ T5609] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 388.659599][ T5609] usb 5-1: Product: syz [ 388.670342][ T5609] usb 5-1: Manufacturer: syz [ 388.679679][ T5609] usb 5-1: SerialNumber: syz [ 388.693287][ T5609] usb 5-1: config 0 descriptor?? [ 388.711174][ T5609] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 388.732461][ T5609] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 388.743890][ T980] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 388.932868][ T980] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 388.956051][ T980] ft260 0003:0403:6030.0009: failed to retrieve status: -5 [ 389.157405][ T980] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 389.171593][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.180906][T10601] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1637'. [ 389.197094][ T980] usb 3-1: USB disconnect, device number 45 [ 389.205293][T10601] bridge0: port 3(veth0) entered blocking state [ 389.211874][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.221930][T10601] bridge0: port 3(veth0) entered disabled state [ 389.230976][T10601] veth0: entered allmulticast mode [ 389.247343][T10601] veth0: entered promiscuous mode [ 389.252920][T10601] bridge0: port 3(veth0) entered blocking state [ 389.259363][T10601] bridge0: port 3(veth0) entered forwarding state [ 389.273506][ T5593] usb 5-1: USB disconnect, device number 38 [ 389.289339][ T5593] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 389.850629][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.884462][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.966934][T10629] syzkaller0: left promiscuous mode [ 389.981688][T10629] syzkaller0: left allmulticast mode [ 389.989651][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 390.034149][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1649'. [ 390.275779][ T5710] usb 2-1: USB disconnect, device number 38 [ 390.552828][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.580139][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.641701][T10662] o2cb: This node has not been configured. [ 390.647579][T10662] o2cb: Cluster check failed. Fix errors before retrying. [ 390.654734][T10662] (syz.1.1656,10662,0):user_dlm_register:674 ERROR: status = -22 [ 390.662477][T10662] (syz.1.1656,10662,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 390.676096][ T30] audit: type=1400 audit(1786922462.216:604): avc: denied { write } for pid=10649 comm="syz.1.1656" name="/" dev="ocfs2_dlmfs" ino=25976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 391.134565][T10670] ip6gre1: entered allmulticast mode [ 391.166043][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 391.259651][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 391.283394][ T5725] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 391.305949][T10678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1664'. [ 391.316954][T10678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1664'. [ 391.388871][T10684] syzkaller0: entered promiscuous mode [ 391.394506][T10684] syzkaller0: entered allmulticast mode [ 391.464073][ T5725] usb 5-1: New USB device found, idVendor=1668, idProduct=0000, bcdDevice= 0.00 [ 391.473274][ T5725] usb 5-1: no configurations [ 391.477875][ T5725] usb 5-1: can't read configurations, error -22 [ 391.592201][ T5710] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 391.602996][T10690] tipc: Enabling of bearer rejected, failed to enable media [ 391.614448][ T5725] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 391.749350][ T5710] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 391.838173][ T5725] usb 5-1: New USB device found, idVendor=1668, idProduct=0000, bcdDevice= 0.00 [ 391.839073][ T5710] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 391.862021][ T30] audit: type=1400 audit(1786922463.416:605): avc: denied { watch watch_reads } for pid=10697 comm="syz.0.1672" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 391.864088][ T5725] usb 5-1: no configurations [ 391.894203][ T5725] usb 5-1: can't read configurations, error -22 [ 391.901849][ T5725] usb usb5-port1: attempt power cycle [ 391.952853][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.989022][ T5710] usb 2-1: Product: syz [ 392.028713][ T5710] usb 2-1: Manufacturer: syz [ 392.059491][ T5710] usb 2-1: SerialNumber: syz [ 392.164035][ T5710] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 392.368233][ T5725] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 392.391966][T10708] syz_tun: entered allmulticast mode [ 392.403888][ T5725] usb 5-1: New USB device found, idVendor=1668, idProduct=0000, bcdDevice= 0.00 [ 392.417083][ T5725] usb 5-1: no configurations [ 392.420081][T10708] dvmrp8: entered allmulticast mode [ 392.483607][T10711] o2cb: This node has not been configured. [ 392.489464][T10711] o2cb: Cluster check failed. Fix errors before retrying. [ 392.496721][T10711] (syz.3.1675,10711,1):user_dlm_register:674 ERROR: status = -22 [ 392.504467][T10711] (syz.3.1675,10711,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 392.515725][ T30] audit: type=1400 audit(1786922464.066:606): avc: denied { write } for pid=10706 comm="syz.3.1675" name="/" dev="ocfs2_dlmfs" ino=24997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.798013][ T5725] usb 5-1: can't read configurations, error -22 [ 392.799615][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.829947][ T5710] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 392.842571][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.866738][ T5710] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 392.877050][ T5710] usb 2-1: media controller created [ 392.895874][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 392.924807][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.942635][ T5725] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 392.984890][ T5725] usb 5-1: New USB device found, idVendor=1668, idProduct=0000, bcdDevice= 0.00 [ 393.019464][T10699] syz_tun: left allmulticast mode [ 393.026309][ T5725] usb 5-1: no configurations [ 393.042423][ T5725] usb 5-1: can't read configurations, error -22 [ 393.059582][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.071469][ T5725] usb usb5-port1: unable to enumerate USB device [ 393.086082][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.432182][ T980] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 393.582198][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 393.588357][ T980] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.598693][ T980] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 393.607188][ T980] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 393.628514][ T980] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.642230][ T5725] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 393.643033][ T980] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 393.681294][ T980] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 393.693487][ T980] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.707885][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.723780][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.731547][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.822184][ T5725] usb 3-1: Using ep0 maxpacket: 32 [ 393.832289][ T5725] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 393.848106][ T5725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 393.863910][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.873675][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 393.887459][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 393.895562][ T5725] usb 3-1: Product: syz [ 393.901453][ T5725] usb 3-1: config 0 descriptor?? [ 393.948374][ T980] usb 4-1: GET_CAPABILITIES returned 0 [ 393.954148][ T980] usbtmc 4-1:16.0: can't read capabilities [ 393.973125][ T5787] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 394.122177][ T5787] usb 5-1: Using ep0 maxpacket: 16 [ 394.127783][ T5787] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.137742][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.147903][ T5787] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 394.162482][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.173898][ T5787] usb 5-1: config 0 descriptor?? [ 394.183858][ T5787] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 394.190536][T10721] binder_alloc: 10720: binder_alloc_buf, no vma [ 394.198856][ T30] audit: type=1326 audit(1786922465.776:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.3.1679" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0ed9e0d9 code=0x0 [ 394.250611][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 394.260183][T10737] usbtmc 4-1:16.0: Unable to send data, error -71 [ 394.311624][ T5725] hid_parser_main: 13 callbacks suppressed [ 394.311638][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.324648][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.331747][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.338890][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.346116][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.353245][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.360354][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.370103][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.377355][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.386092][ T5725] monterey 0003:0566:3004.000A: unknown main item tag 0x0 [ 394.394877][ T5710] usb 2-1: USB disconnect, device number 39 [ 394.421169][ T5725] monterey 0003:0566:3004.000A: hidraw0: USB HID v5.40 Device [syz] on usb-dummy_hcd.2-1/input0 [ 394.441142][ T5787] usb 5-1: USB disconnect, device number 43 [ 394.639286][ T5710] usb 3-1: USB disconnect, device number 46 [ 395.122429][ T5710] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 395.246663][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 395.282256][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 395.291998][ T5710] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice=10.00 [ 395.307060][ T5710] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 395.318396][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.330130][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 395.343382][ T980] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 395.375402][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=31, SerialNumber=0 [ 395.389505][ T5710] usb 2-1: Product: syz [ 395.404654][ T5710] usb 2-1: config 0 descriptor?? [ 395.512803][ T980] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 395.525639][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.536173][ T980] usb 5-1: config 0 descriptor?? [ 395.543580][ T980] pwc: Creative Labs Webcam 5 detected. [ 395.732239][ T5787] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 395.832010][ T5710] monterey 0003:0566:3004.000B: hidraw0: USB HID v5.40 Device [syz] on usb-dummy_hcd.1-1/input0 [ 395.883636][ T5787] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 395.894023][ T5787] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 395.910275][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.918552][ T5787] usb 3-1: Product: syz [ 395.927202][ T5787] usb 3-1: Manufacturer: syz [ 395.931888][ T5787] usb 3-1: SerialNumber: syz [ 395.941156][ T5787] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 396.106048][ T5710] usb 2-1: USB disconnect, device number 40 [ 396.145053][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 396.152007][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 396.206619][ T5593] usb 4-1: USB disconnect, device number 42 [ 396.343877][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.357454][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.359122][ T5787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 396.376920][ T980] pwc: recv_control_msg error -71 req 02 val 2c00 [ 396.394302][ T980] pwc: recv_control_msg error -71 req 04 val 1000 [ 396.402936][ T5787] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 396.408098][ T980] pwc: recv_control_msg error -71 req 04 val 1300 [ 396.411261][ T5787] usb 3-1: media controller created [ 396.427657][ T980] pwc: recv_control_msg error -71 req 04 val 1400 [ 396.435776][ T980] pwc: recv_control_msg error -71 req 02 val 2000 [ 396.436637][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.442640][ T980] pwc: recv_control_msg error -71 req 02 val 2100 [ 396.457879][ T980] pwc: recv_control_msg error -71 req 06 val 0600 [ 396.465444][ T980] pwc: recv_control_msg error -71 req 04 val 1500 [ 396.472332][ T980] pwc: recv_control_msg error -71 req 02 val 2500 [ 396.479256][ T980] pwc: recv_control_msg error -71 req 02 val 2400 [ 396.486297][ T980] pwc: recv_control_msg error -71 req 02 val 2600 [ 396.493245][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 396.500096][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 396.507181][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 396.514211][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 396.523258][ T980] pwc: Failed to power off camera (-71) [ 396.525121][ T5787] usb 3-1: USB disconnect, device number 47 [ 396.556423][ T980] pwc: Registered as video103. [ 396.577727][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 396.646451][ T980] usb 5-1: USB disconnect, device number 44 [ 396.668877][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 397.004622][ T5787] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 397.183530][ T5787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.277354][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.464732][ T5787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.576807][T10798] tipc: Started in network mode [ 397.593610][ T5787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.625084][T10798] tipc: Node identity 2000004, cluster identity 4711 [ 397.631787][T10798] tipc: Node number set to 33554436 [ 397.640947][ T30] audit: type=1400 audit(1786922469.216:608): avc: denied { read write } for pid=10797 comm="syz.0.1707" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 397.657269][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.676481][ T30] audit: type=1400 audit(1786922469.216:609): avc: denied { open } for pid=10797 comm="syz.0.1707" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 397.677852][ T5787] usb 2-1: config 0 descriptor?? [ 397.872188][ T980] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 398.022923][ T5593] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 398.052729][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 398.058677][ T980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.068999][ T980] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 398.078210][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 398.089587][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 398.100621][ T980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 398.112603][ T980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 398.124520][ T5787] usbhid 2-1:0.0: can't add hid device: -71 [ 398.126726][ T980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.132167][ T5787] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.143668][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.184311][ T5787] usb 2-1: USB disconnect, device number 41 [ 398.192524][ T5593] usb 4-1: Using ep0 maxpacket: 8 [ 398.199408][ T5593] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 398.210763][ T5593] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 398.219165][ T5593] usb 4-1: config 0 has no interface number 0 [ 398.225623][ T5593] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.236754][ T5593] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 398.243303][T10808] loop5: detected capacity change from 0 to 4095 [ 398.248946][ T5593] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.266584][ T5593] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.280908][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.283231][ T6379] buffer_io_error: 14 callbacks suppressed [ 398.283243][ T6379] Buffer I/O error on dev loop5, logical block 511, async page read [ 398.315145][ T5593] usb 4-1: config 0 descriptor?? [ 398.349584][ T5593] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.355360][T10808] Buffer I/O error on dev loop5, logical block 511, async page read [ 398.373605][ T980] usb 5-1: GET_CAPABILITIES returned 0 [ 398.386586][T10812] fuse: Bad value for 'fd' [ 398.394186][ T980] usbtmc 5-1:16.0: can't read capabilities [ 398.422019][ T30] audit: type=1400 audit(1786922469.996:610): avc: denied { ioctl } for pid=10807 comm="syz.2.1711" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 398.475268][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.486617][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.500247][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.510168][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.619082][T10800] binder_alloc: 10799: binder_alloc_buf, no vma [ 398.634938][ T30] audit: type=1326 audit(1786922470.216:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10799 comm="syz.4.1708" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85499e0d9 code=0x0 [ 398.669617][ T5787] usb 4-1: USB disconnect, device number 43 [ 398.669755][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 398.690954][ T30] audit: type=1400 audit(1786922470.266:612): avc: denied { ioctl } for pid=10802 comm="syz.3.1709" path="socket:[25425]" dev="sockfs" ino=25425 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.791770][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 398.793284][T10815] ldusb: No device or device unplugged -19 [ 398.806601][ T5787] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 398.839682][T10803] ldusb: No device or device unplugged -19 [ 399.314544][ T5787] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 399.473282][ T5787] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 399.490504][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.524143][ T5787] usb 4-1: config 0 descriptor?? [ 399.547286][ T5787] pwc: Creative Labs Webcam 5 detected. [ 400.148857][ T5787] pwc: recv_control_msg error -32 req 02 val 2b00 [ 400.171334][ T5787] pwc: recv_control_msg error -32 req 02 val 2700 [ 400.396753][ T5787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 400.413941][ T5787] pwc: recv_control_msg error -71 req 04 val 1000 [ 400.430613][ T5787] pwc: recv_control_msg error -71 req 04 val 1300 [ 400.446569][ T5787] pwc: recv_control_msg error -71 req 04 val 1400 [ 400.458800][ T5787] pwc: recv_control_msg error -71 req 02 val 2000 [ 400.466246][ T5787] pwc: recv_control_msg error -71 req 02 val 2100 [ 400.474524][ T5787] pwc: recv_control_msg error -71 req 06 val 0600 [ 400.484028][ T5787] pwc: recv_control_msg error -71 req 04 val 1500 [ 400.498889][ T5787] pwc: recv_control_msg error -71 req 02 val 2500 [ 400.527833][ T5787] pwc: recv_control_msg error -71 req 02 val 2400 [ 400.541917][ T5787] pwc: recv_control_msg error -71 req 02 val 2600 [ 400.559039][ T5787] pwc: recv_control_msg error -71 req 02 val 2900 [ 400.581869][ T5787] pwc: recv_control_msg error -71 req 02 val 2800 [ 400.609552][ T5787] pwc: recv_control_msg error -71 req 04 val 1100 [ 400.623146][ T5787] pwc: recv_control_msg error -71 req 04 val 1200 [ 400.629078][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 400.639031][ T5787] pwc: Failed to power off camera (-71) [ 400.658274][ T5593] usb 5-1: USB disconnect, device number 45 [ 400.670520][ T5787] pwc: Registered as video103. [ 400.692377][ T5787] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 400.744390][ T5787] usb 4-1: USB disconnect, device number 44 [ 400.798332][T10859] syz_tun: entered allmulticast mode [ 400.803891][ T5710] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 400.841038][T10859] dvmrp6: entered allmulticast mode [ 400.853858][T10857] syz_tun: left allmulticast mode [ 400.891268][T10863] fuse: Unknown parameter 'group_i00000000000000000000' [ 401.022228][ T980] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 401.045979][ T5710] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 401.065794][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 401.081430][ T5710] usb 2-1: can't read configurations, error -71 [ 401.127751][T10869] Set syz1 is full, maxelem 6117 reached [ 401.161234][ T5593] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 401.182250][ T980] usb 3-1: device descriptor read/64, error -71 [ 401.322193][ T5593] usb 5-1: Using ep0 maxpacket: 32 [ 401.328275][ T5593] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 401.340016][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.348086][ T5593] usb 5-1: Product: syz [ 401.352301][ T5593] usb 5-1: Manufacturer: syz [ 401.356899][ T5593] usb 5-1: SerialNumber: syz [ 401.363997][ T5593] usb 5-1: config 0 descriptor?? [ 401.370729][ T5593] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 401.378748][ T5593] dvb-usb: bulk message failed: -22 (4/0) [ 401.384518][ T5593] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.394733][ T5593] dvb-usb: bulk message failed: -22 (5/0) [ 401.400487][ T5593] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.412339][ T5593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.422022][ T5593] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 401.431724][ T5593] usb 5-1: media controller created [ 401.437029][ T980] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 401.449443][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.452220][ T5787] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 401.470467][ T5593] usb 5-1: selecting invalid altsetting 3 [ 401.476270][ T5593] ttusb2: set interface to alts=3 failed [ 401.497088][ T5593] DVB: Unable to find symbol tda10086_attach() [ 401.503374][ T5593] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 401.511818][ T5593] dvb-usb: bulk message failed: -22 (4/0) [ 401.517607][ T5593] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.530763][ T5593] dvb-usb: bulk message failed: -22 (5/0) [ 401.537789][ T5593] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.547964][ T5593] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 401.592223][ T980] usb 3-1: device descriptor read/64, error -71 [ 401.598350][T10861] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 401.609360][T10861] dvb-usb: bulk message failed: -22 (7/0) [ 401.615428][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 401.623699][T10861] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 401.637830][T10861] ttusb2: i2c transfer failed. [ 401.638048][ T5787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.657909][ T5725] usb 5-1: USB disconnect, device number 46 [ 401.669407][ T5787] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 401.683856][ T5787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 401.703279][ T980] usb usb3-port1: attempt power cycle [ 401.705955][ T5725] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 401.718114][ T5787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 401.730944][ T5787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 401.747326][ T5787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 401.752932][ T30] audit: type=1400 audit(1786922473.336:613): avc: denied { watch watch_reads } for pid=10877 comm="syz.1.1737" path="/335" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 401.757854][ T5787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.796619][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.937444][T10886] syz_tun: entered allmulticast mode [ 401.946574][T10885] syz_tun: left allmulticast mode [ 402.016915][ T5787] usb 4-1: GET_CAPABILITIES returned 0 [ 402.025135][ T5787] usbtmc 4-1:16.0: can't read capabilities [ 402.036942][T10890] fuse: Unknown parameter 'group_id00000000000000000000' [ 402.052491][ T980] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 402.073143][ T980] usb 3-1: device descriptor read/8, error -71 [ 402.235658][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.254341][T10875] binder_alloc: 10874: binder_alloc_buf, no vma [ 402.255153][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.263605][ T30] audit: type=1326 audit(1786922473.846:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.3.1736" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0ed9e0d9 code=0x0 [ 402.315196][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 402.322288][ T980] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 402.326034][T10901] usbtmc 4-1:16.0: Unable to send data, error -71 [ 402.353318][ T980] usb 3-1: device descriptor read/8, error -71 [ 402.472407][ T980] usb usb3-port1: unable to enumerate USB device [ 402.571341][T10905] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10907] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10905] [ 402.676409][T10911] syz_tun: entered allmulticast mode [ 402.701506][T10911] dvmrp6: entered allmulticast mode [ 402.731645][T10910] syz_tun: left allmulticast mode [ 402.977882][T10918] loop5: detected capacity change from 0 to 4095 [ 403.005754][ T6379] Buffer I/O error on dev loop5, logical block 511, async page read [ 403.230823][ T30] audit: type=1400 audit(1786922474.806:615): avc: denied { create } for pid=10928 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.270208][ T30] audit: type=1400 audit(1786922474.826:616): avc: denied { setopt } for pid=10928 comm="syz.0.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.401413][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.413666][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.430932][T10934] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 403.439814][T10934] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 403.519734][ T30] audit: type=1400 audit(1786922475.096:617): avc: denied { create } for pid=10935 comm="syz.0.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.201170][ T30] audit: type=1400 audit(1786922475.776:618): avc: denied { write } for pid=10950 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.222252][ T30] audit: type=1400 audit(1786922475.776:619): avc: denied { shutdown } for pid=10950 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.296177][ T30] audit: type=1400 audit(1786922475.776:620): avc: denied { getopt } for pid=10950 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 404.345699][ T5725] usb 4-1: USB disconnect, device number 45 [ 404.439447][T10955] syzkaller0: entered promiscuous mode [ 404.447149][T10955] syzkaller0: entered allmulticast mode [ 404.486209][ T30] audit: type=1400 audit(1786922476.056:621): avc: denied { write } for pid=10954 comm="syz.3.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.582181][ T5787] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 404.854700][ T5787] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 404.862223][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.871560][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.879978][ T30] audit: type=1400 audit(1786922476.436:622): avc: denied { ioctl } for pid=10963 comm="syz.1.1771" path="socket:[27216]" dev="sockfs" ino=27216 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.914420][ T5787] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 404.949798][ T5787] usb 3-1: can't read configurations, error -71 [ 405.072261][ T980] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 405.232184][ T980] usb 4-1: device descriptor read/64, error -71 [ 405.484101][ T980] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 405.632186][ T980] usb 4-1: device descriptor read/64, error -71 [ 405.732243][ T30] audit: type=1400 audit(1786922477.306:623): avc: denied { bind } for pid=10980 comm="syz.2.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 405.764206][ T980] usb usb4-port1: attempt power cycle [ 406.122690][ T980] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 406.154638][ T980] usb 4-1: device descriptor read/8, error -71 [ 406.252226][ T5787] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 406.402447][ T980] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 406.433020][ T980] usb 4-1: device descriptor read/8, error -71 [ 406.442258][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 406.453761][ T5787] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 406.472489][ T5787] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 406.480941][ T5787] usb 3-1: config 0 has no interface number 0 [ 406.488322][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.501358][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 406.514901][ T5787] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.528228][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.542091][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.553549][ T980] usb usb4-port1: unable to enumerate USB device [ 406.554901][ T5787] usb 3-1: config 0 descriptor?? [ 406.561716][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.594921][ T5787] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 406.596611][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.895272][ T980] usb 3-1: USB disconnect, device number 54 [ 406.901205][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 406.925017][T11004] ldusb: No device or device unplugged -19 [ 406.925027][ T980] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 406.925079][T10985] ldusb: No device or device unplugged -19 [ 407.133126][T11011] fuse: Unknown parameter 'use00000000000000000000' [ 407.469998][T11027] syzkaller0: entered promiscuous mode [ 407.488476][T11027] syzkaller0: entered allmulticast mode [ 407.497768][T11034] fuse: Unknown parameter 'use00000000000000000000' [ 407.803950][T11041] tipc: Enabling of bearer rejected, failed to enable media [ 408.222935][ T5787] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 408.287078][T11068] TC_ACT_REPEAT abuse ? [ 408.397150][ T5787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.470321][ T5787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 408.509427][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.583480][ T5787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 408.610645][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.639160][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.649910][ T5787] usb 2-1: Product: syz [ 408.658147][ T5787] usb 2-1: Manufacturer: syz [ 408.685115][ T5787] cdc_wdm 2-1:1.0: skipping garbage [ 408.691757][ T5787] cdc_wdm 2-1:1.0: skipping garbage [ 408.716280][ T5787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 408.729345][ T5787] cdc_wdm 2-1:1.0: Unknown control protocol [ 408.896199][ T30] audit: type=1400 audit(1786922480.476:624): avc: denied { read write } for pid=11052 comm="syz.1.1803" name="cdc-wdm0" dev="devtmpfs" ino=4333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 408.987041][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 408.993743][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 408.999957][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 409.006522][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 409.013104][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 409.019669][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 409.026218][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 409.032793][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 409.038922][ T5787] usb 2-1: USB disconnect, device number 44 [ 409.044900][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 409.044921][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 409.044936][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 409.106698][ T30] audit: type=1400 audit(1786922480.476:625): avc: denied { open } for pid=11052 comm="syz.1.1803" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 409.310883][ T30] audit: type=1400 audit(1786922480.886:626): avc: denied { setopt } for pid=11087 comm="syz.0.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.012352][ T30] audit: type=1400 audit(1786922480.886:627): avc: denied { bind } for pid=11087 comm="syz.0.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 410.825433][ T30] audit: type=1400 audit(1786922482.406:628): avc: denied { bind } for pid=11099 comm="syz.0.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 411.023572][ T980] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 411.162181][ T5593] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 411.173192][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 411.182288][ T5710] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 411.193026][ T980] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 411.209079][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.217753][ T980] usb 2-1: Product: syz [ 411.223714][ T980] usb 2-1: Manufacturer: syz [ 411.231549][ T980] usb 2-1: SerialNumber: syz [ 411.241196][ T980] usb 2-1: config 0 descriptor?? [ 411.332671][ T5593] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 411.344387][ T5593] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 411.355220][ T5710] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 411.367048][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.377306][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.385529][ T5593] usb 4-1: Product: syz [ 411.390454][ T5710] usb 3-1: config 0 has no interfaces? [ 411.396130][ T5593] usb 4-1: Manufacturer: syz [ 411.400786][ T5593] usb 4-1: SerialNumber: syz [ 411.407257][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.420751][ T5710] usb 3-1: Product: syz [ 411.425852][ T5710] usb 3-1: Manufacturer: syz [ 411.431354][ T5710] usb 3-1: SerialNumber: syz [ 411.439682][ T5593] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 411.452415][ T5710] usb 3-1: config 0 descriptor?? [ 411.669146][ T5710] usb 3-1: USB disconnect, device number 55 [ 411.680981][ T980] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 411.703667][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.715153][ T980] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 411.723587][ T980] usb 2-1: media controller created [ 411.740048][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.840071][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.852917][ T5593] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 411.863945][ T5593] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 411.886731][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.897393][ T980] zl10353_read_register: readreg error (reg=127, ret==0) [ 411.912298][ T5593] usb 4-1: media controller created [ 411.917540][ T980] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 411.936497][T11107] ------------[ cut here ]------------ [ 411.941962][T11107] usb 2-1: BOGUS control dir, pipe 80002d80 doesn't match bRequestType c0 [ 411.950608][T11107] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.3.1823/11107 [ 411.960948][T11107] Modules linked in: [ 411.964373][ T980] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 411.965726][T11107] CPU: 0 UID: 0 PID: 11107 Comm: syz.3.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.985409][T11107] Tainted: [L]=SOFTLOCKUP [ 411.990160][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.000260][T11107] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 412.005910][T11107] Code: 48 89 54 24 40 e8 13 44 8b fa 4c 89 e7 e8 6b e0 db fe 48 89 c6 48 8d 3d 41 23 d0 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 e4 43 8b fa 89 ee bf ff 00 00 00 [ 412.025536][T11107] RSP: 0018:ffffc9000375f760 EFLAGS: 00010287 [ 412.031585][T11107] RAX: ffffffff8cc5aba0 RBX: ffff88807717a500 RCX: 0000000080002d80 [ 412.039600][T11107] RDX: ffff888056f29a60 RSI: ffffffff8cc5aba0 RDI: ffffffff914f52c0 [ 412.047590][T11107] RBP: ffff888077e09058 R08: 00000000000000c0 R09: 0000000000000000 [ 412.049175][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.055590][T11107] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888077e090b0 [ 412.055606][T11107] R13: ffff88803c0f0420 R14: ffff88803c0f0426 R15: ffff88803c0f0427 [ 412.055619][T11107] FS: 00007f0a0fc686c0(0000) GS:ffff888123bde000(0000) knlGS:0000000000000000 [ 412.055639][T11107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.066552][ T980] usb 2-1: USB disconnect, device number 45 [ 412.071908][T11107] CR2: 000000110c247f18 CR3: 0000000077c4c000 CR4: 00000000003526f0 [ 412.071925][T11107] Call Trace: [ 412.071932][T11107] [ 412.071945][T11107] ? __init_swait_queue_head+0xca/0x150 [ 412.123101][T11107] usb_start_wait_urb+0x10e/0x580 [ 412.128126][T11107] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 412.133663][T11107] ? trace_kmalloc+0xeb/0x110 [ 412.138324][T11107] ? __asan_memset+0x23/0x50 [ 412.142914][T11107] usb_control_msg+0x328/0x4b0 [ 412.147653][T11107] ? __pfx_usb_control_msg+0x10/0x10 [ 412.152930][T11107] ? do_writev+0x13e/0x340 [ 412.157326][T11107] ? do_syscall_64+0x115/0x870 [ 412.162069][T11107] dtv5100_i2c_msg+0x1be/0x340 [ 412.166835][T11107] dtv5100_i2c_xfer+0x131/0x3d0 [ 412.171666][T11107] __i2c_transfer+0x5d9/0x1740 [ 412.176439][T11107] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 412.183118][T11107] ? __pfx___i2c_transfer+0x10/0x10 [ 412.188304][T11107] ? rt_mutex_slowtrylock+0x93/0x100 [ 412.194048][T11107] i2c_transfer+0x15f/0x380 [ 412.198537][T11107] i2c_transfer_buffer_flags+0x10c/0x190 [ 412.204170][T11107] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 412.210304][T11107] ? _copy_from_user+0x59/0xd0 [ 412.215071][T11107] i2cdev_write+0x11e/0x240 [ 412.219558][T11107] ? __pfx_i2cdev_write+0x10/0x10 [ 412.224571][T11107] vfs_writev+0x5ed/0xdd0 [ 412.228881][T11107] ? __pfx_vfs_writev+0x10/0x10 [ 412.233720][T11107] ? lockdep_init_map_type+0x5c/0x250 [ 412.239078][T11107] ? __fget_files+0x21f/0x3d0 [ 412.243888][T11107] ? do_writev+0x13e/0x340 [ 412.248354][T11107] do_writev+0x13e/0x340 [ 412.252600][T11107] ? __pfx_do_writev+0x10/0x10 [ 412.257357][T11107] do_syscall_64+0x115/0x870 [ 412.261933][T11107] ? clear_bhb_loop+0x70/0xc0 [ 412.266608][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.272511][T11107] RIP: 0033:0x7f0a0ed9e0d9 [ 412.276907][T11107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.297203][T11107] RSP: 002b:00007f0a0fc68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 412.306086][T11107] RAX: ffffffffffffffda RBX: 00007f0a0f025fa0 RCX: 00007f0a0ed9e0d9 [ 412.314052][T11107] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 412.321998][T11107] RBP: 00007f0a0ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 412.329969][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.337985][T11107] R13: 00007f0a0f026038 R14: 00007f0a0f025fa0 R15: 00007ffc33dbb7d8 [ 412.345980][T11107] [ 412.348998][T11107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.356272][T11107] CPU: 0 UID: 0 PID: 11107 Comm: syz.3.1823 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.367190][T11107] Tainted: [L]=SOFTLOCKUP [ 412.371495][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.381534][T11107] Call Trace: [ 412.384801][T11107] [ 412.387716][T11107] dump_stack_lvl+0x100/0x190 [ 412.392382][T11107] vpanic+0x552/0x970 [ 412.396346][T11107] ? __pfx_vpanic+0x10/0x10 [ 412.400838][T11107] panic+0xd1/0xe0 [ 412.404539][T11107] ? __pfx_panic+0x10/0x10 [ 412.408944][T11107] check_panic_on_warn.cold+0x19/0x34 [ 412.414298][T11107] ? usb_submit_urb+0x15ff/0x19b0 [ 412.419310][T11107] __warn.cold+0x191/0x318 [ 412.423713][T11107] __report_bug+0x30f/0x440 [ 412.428201][T11107] ? usb_submit_urb+0x15ff/0x19b0 [ 412.433208][T11107] ? __pfx___report_bug+0x10/0x10 [ 412.438221][T11107] ? lockdep_hardirqs_on+0x78/0x100 [ 412.443416][T11107] ? kasan_save_stack+0x3f/0x50 [ 412.448251][T11107] ? kasan_save_stack+0x30/0x50 [ 412.453089][T11107] report_bug_entry+0xe1/0x290 [ 412.457837][T11107] ? usb_submit_urb+0x160d/0x19b0 [ 412.462842][T11107] handle_bug+0x1cd/0x2a0 [ 412.467157][T11107] exc_invalid_op+0x17/0x50 [ 412.471646][T11107] asm_exc_invalid_op+0x1a/0x20 [ 412.476480][T11107] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 412.482095][T11107] Code: 48 89 54 24 40 e8 13 44 8b fa 4c 89 e7 e8 6b e0 db fe 48 89 c6 48 8d 3d 41 23 d0 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 e4 43 8b fa 89 ee bf ff 00 00 00 [ 412.501688][T11107] RSP: 0018:ffffc9000375f760 EFLAGS: 00010287 [ 412.507736][T11107] RAX: ffffffff8cc5aba0 RBX: ffff88807717a500 RCX: 0000000080002d80 [ 412.515686][T11107] RDX: ffff888056f29a60 RSI: ffffffff8cc5aba0 RDI: ffffffff914f52c0 [ 412.523635][T11107] RBP: ffff888077e09058 R08: 00000000000000c0 R09: 0000000000000000 [ 412.531584][T11107] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888077e090b0 [ 412.539532][T11107] R13: ffff88803c0f0420 R14: ffff88803c0f0426 R15: ffff88803c0f0427 [ 412.547495][T11107] ? __init_swait_queue_head+0xca/0x150 [ 412.553030][T11107] usb_start_wait_urb+0x10e/0x580 [ 412.558037][T11107] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 412.563559][T11107] ? trace_kmalloc+0xeb/0x110 [ 412.568225][T11107] ? __asan_memset+0x23/0x50 [ 412.572802][T11107] usb_control_msg+0x328/0x4b0 [ 412.577556][T11107] ? __pfx_usb_control_msg+0x10/0x10 [ 412.582824][T11107] ? do_writev+0x13e/0x340 [ 412.587225][T11107] ? do_syscall_64+0x115/0x870 [ 412.591976][T11107] dtv5100_i2c_msg+0x1be/0x340 [ 412.596727][T11107] dtv5100_i2c_xfer+0x131/0x3d0 [ 412.601564][T11107] __i2c_transfer+0x5d9/0x1740 [ 412.606315][T11107] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 412.612107][T11107] ? __pfx___i2c_transfer+0x10/0x10 [ 412.617298][T11107] ? rt_mutex_slowtrylock+0x93/0x100 [ 412.622577][T11107] i2c_transfer+0x15f/0x380 [ 412.627069][T11107] i2c_transfer_buffer_flags+0x10c/0x190 [ 412.632690][T11107] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 412.638833][T11107] ? _copy_from_user+0x59/0xd0 [ 412.643586][T11107] i2cdev_write+0x11e/0x240 [ 412.648081][T11107] ? __pfx_i2cdev_write+0x10/0x10 [ 412.653088][T11107] vfs_writev+0x5ed/0xdd0 [ 412.657411][T11107] ? __pfx_vfs_writev+0x10/0x10 [ 412.662249][T11107] ? lockdep_init_map_type+0x5c/0x250 [ 412.667620][T11107] ? __fget_files+0x21f/0x3d0 [ 412.672281][T11107] ? do_writev+0x13e/0x340 [ 412.676685][T11107] do_writev+0x13e/0x340 [ 412.680914][T11107] ? __pfx_do_writev+0x10/0x10 [ 412.685670][T11107] do_syscall_64+0x115/0x870 [ 412.690239][T11107] ? clear_bhb_loop+0x70/0xc0 [ 412.694898][T11107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.700770][T11107] RIP: 0033:0x7f0a0ed9e0d9 [ 412.705166][T11107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.724755][T11107] RSP: 002b:00007f0a0fc68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 412.733148][T11107] RAX: ffffffffffffffda RBX: 00007f0a0f025fa0 RCX: 00007f0a0ed9e0d9 [ 412.741099][T11107] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 412.749045][T11107] RBP: 00007f0a0ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 412.756996][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.764943][T11107] R13: 00007f0a0f026038 R14: 00007f0a0f025fa0 R15: 00007ffc33dbb7d8 [ 412.772910][T11107] [ 412.776097][T11107] Kernel Offset: disabled [ 412.780394][T11107] Rebooting in 86400 seconds..