last executing test programs: 3m22.69980512s ago: executing program 2 (id=433): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000170a010100000000bafe000000000200000a0900010073797a4492e8c5727c482c1b3026c312440f93300000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000020000100000000000000000002200000000000000000000005001500"], 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) connect$x25(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24044050) 3m15.668537958s ago: executing program 2 (id=445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040040000800", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r3, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r4, 0x2000, 0x0) io_uring_setup(0xf06, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x2, 0x8ec2, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x20, 0x3, 0x6, [{@empty, 0x7}, {@local, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x3, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @noop, @cipso={0x86, 0x15, 0x1, [{0x5, 0xf, "51581cb1be76d19782873b2579"}]}, @cipso={0x86, 0x6, 0x1}, @rr={0x7, 0x17, 0x15, [@loopback, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000480)={'tunl0\x00', r8, 0x1, 0x7, 0x8, 0x5, {{0xc, 0x4, 0x1, 0x3a, 0x30, 0x68, 0x0, 0xfd, 0x4, 0x0, @private=0xa010100, @multicast2, {[@generic={0x88, 0xc, "4c1dd6cf69ed7778b01b"}, @ra={0x94, 0x4, 0x1}, @generic={0xce, 0x9, "d3db41b18958f9"}]}}}}}) socket$kcm(0xa, 0x3, 0x3a) 3m13.218439598s ago: executing program 2 (id=449): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000380)=""/70) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) close(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a00)=""/4102, 0x1006}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000001640)=""/4115, 0x1013}, {&(0x7f00000015c0)=""/76, 0x4c}], 0x4}, 0x1801}], 0x1, 0x120, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c136", 0x68}, {&(0x7f0000001400)}], 0x3, &(0x7f0000002400)=[{0xd30, 0x1, 0x8, "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"}], 0xd30}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, 0x0, 0x0) 3m11.785366085s ago: executing program 2 (id=453): syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4, 0x79, 0x1, 0xc}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 3m9.915157073s ago: executing program 2 (id=457): r0 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e00000"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000008c10b400000100009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m6.986813565s ago: executing program 2 (id=463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c00018008000300"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m50.217223677s ago: executing program 32 (id=463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="318325bd700000000000190000000c00018008000300"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x0, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m48.128417413s ago: executing program 0 (id=501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1735c48291a13441110d9e074ad8d8d891cc61d30bd34a4d3ae42f513f0fc7c410a8c0b5d44adb0595"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000a00)={0x5, 0x0, [{0x0, 0x8e, &(0x7f0000000400)=""/142}, {0x2, 0x0, 0x0}, {0xeeee8000, 0x35, &(0x7f0000000780)=""/53}, {0x41000, 0x36, &(0x7f00000007c0)=""/54}, {0x30000, 0xc3, &(0x7f0000000900)=""/195}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)}], 0x1}, 0x40) ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000300)=0x6) syz_clone(0x20004000, &(0x7f0000000280)="c96880d0af51593ffa6084aa1390fa6fe2beb05c68d265dae9dc5ede29132cfad449e2ae680cda0928f8cbf9f39279", 0x2f, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)="fd4727ef53bfe39322ed3255c79ad9dab03dd61047c6a67b5a576e420b69e484315697f7761afe") 2m46.145995599s ago: executing program 0 (id=503): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x684000, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0xa2a00) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/108) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x604000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xde, 0x2, 0x6, 0x9}, 0x7, 0x4, &(0x7f00000001c0)={{0xffffff07, 0x4, 0x7, 0x8}, &(0x7f0000000180)={{0xd, 0x7, 0xe, 0x6}}}, 0x5, 0x0, 0x3}}) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) read(r0, &(0x7f0000000180)=""/78, 0x4e) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 2m41.097405542s ago: executing program 0 (id=515): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0c0102202d8487e1ab3e8ffa1ffb508c01000000c885e7a3f10ce7fc01b8ccf8b56471684438fb632bd999f71ee5b2d9939c1f157e247c9a3779ba6309c19de76352a435ac897c4b3f8e3472491d449f91a6ecd6eb242329e4a234080f"], 0xf) 2m40.87360222s ago: executing program 0 (id=516): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f6755a626"], 0x7) 2m40.664489633s ago: executing program 0 (id=518): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x4, 0x8001, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x86, 0x10, "11026d34c3279adc3f6e49160ed8"}, @generic={0x44, 0x9, "3cd2a8bb679289"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8808c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000007001000040002fe0400000000000000a7ef84138febb0673583876f37815afcbee60f434f5392b4e31629225e0403be8f8e24c30f40b89233bd3644665cce91d86f9e8b89a70840c3496da7e118b34a27e233c9069b4568adc52395a2acb8d182d1f99cbcfb5ddd", @ANYRES32, @ANYRES64=r3, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = mq_open(&(0x7f00000001c0)='nl80211\x00', 0x8c0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0xb45, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) mremap(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) write(r9, &(0x7f0000000280), 0x0) 2m38.023655709s ago: executing program 0 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) sendmsg$can_j1939(r2, 0x0, 0x40010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x8, 0xd215) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0x4004e502, &(0x7f0000000240)=0x9) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_DISCONNECT(r9, 0xab08) close_range(r6, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 2m22.405978011s ago: executing program 33 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) sendmsg$can_j1939(r2, 0x0, 0x40010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x8, 0xd215) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0x4004e502, &(0x7f0000000240)=0x9) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_DISCONNECT(r9, 0xab08) close_range(r6, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 57.590146487s ago: executing program 4 (id=1032): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00') pread64(r1, &(0x7f0000000000)=""/190, 0xbe, 0xa0000000000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) 57.381383368s ago: executing program 4 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x929, 0x200000000005) 57.097169919s ago: executing program 4 (id=1038): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0045b0f, &(0x7f0000000000)={0x103, 0x200, 0x0, 0x101, 0x5, 0x7f77901d}) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) 54.086660431s ago: executing program 4 (id=1050): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x42}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) 54.020961098s ago: executing program 4 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 53.970853348s ago: executing program 4 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.718560086s ago: executing program 34 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.918247774s ago: executing program 5 (id=1174): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x6, 0x8, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x7, 0x1fa, 0x401}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x5, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 28.61257481s ago: executing program 5 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket$inet_udp(0x2, 0x2, 0x0) 27.671550417s ago: executing program 5 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 26.88101157s ago: executing program 5 (id=1188): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 26.814146636s ago: executing program 5 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffd, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x80c84d0a, 0x0) 26.289301173s ago: executing program 5 (id=1191): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x9) mount$bind(0x0, 0x0, 0x0, 0x2102404, 0xfeffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 25.990577096s ago: executing program 35 (id=1191): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x9) mount$bind(0x0, 0x0, 0x0, 0x2102404, 0xfeffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.142921278s ago: executing program 6 (id=1269): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28400, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x22f4b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000020000000000000e04000000000000000000000000000001050000000800e7c42291f0b24963000700000000000000"], 0x0, 0x60}, 0x28) setns(r1, 0x8020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setns(r4, 0x80) 7.030219322s ago: executing program 3 (id=1271): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0xfffffee4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, 0x0, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(0xffffffffffffffff, 0x26a2, 0x4, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$kcm(0xa, 0x922000000003, 0x11) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xf, 0x1}, {0x9, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 6.879501537s ago: executing program 6 (id=1273): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6.750216966s ago: executing program 7 (id=1275): msgctl$IPC_RMID(0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) 5.770265129s ago: executing program 7 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r8) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) setgroups(0x8, &(0x7f00000005c0)=[0x0, 0x0, r4, r6, r8, r9, r10, 0x0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 5.536784014s ago: executing program 3 (id=1278): syz_open_dev$video4linux(&(0x7f0000000100), 0xb, 0xc02) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.53101482s ago: executing program 8 (id=1279): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 5.417027326s ago: executing program 6 (id=1280): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 4.50174851s ago: executing program 7 (id=1281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.269628892s ago: executing program 8 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) 3.875386061s ago: executing program 3 (id=1285): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x63) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x93, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={r6}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x15, 0x200, &(0x7f0000000880)="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"}) syz_emit_ethernet(0x0, 0x0, 0x0) 3.247622342s ago: executing program 8 (id=1287): syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_uring_setup(0x3138, &(0x7f0000000300)={0x0, 0x2aa1, 0x40, 0x1, 0x0, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.144726735s ago: executing program 8 (id=1288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000000c0)="aa8737", 0x0}, 0x20) 3.087549752s ago: executing program 1 (id=1289): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0xfffffee4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, 0x0, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_enter(0xffffffffffffffff, 0x26a2, 0x4, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$kcm(0xa, 0x922000000003, 0x11) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xf, 0x1}, {0x9, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 3.085188147s ago: executing program 7 (id=1290): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) 2.309516152s ago: executing program 3 (id=1291): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x8000000000000000, 0x200, 0x100, 0x2, 0x9, 0x5, 0x8000000000000001}, &(0x7f0000000180)={0x8, 0xa3, 0x6, 0x7fffffffffffffff, 0x1, 0x401, 0x7f, 0x2}, &(0x7f0000000280)={0xa74f, 0x3045, 0x5, 0x2, 0x4, 0x7fff, 0x3, 0x7ff}, &(0x7f00000002c0), 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) pipe(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) utime(&(0x7f0000000000)='.\x00', 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.637192753s ago: executing program 8 (id=1292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6d2, &(0x7f0000000000)=0x4, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0xa, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0xffffffffffffffff, 0xd, 0x0, 0xd4e2, 0x6], 0x0, 0x302240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.435261838s ago: executing program 1 (id=1293): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000002c0)=0x3, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.36510483s ago: executing program 6 (id=1294): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x2f9}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.322996408s ago: executing program 3 (id=1295): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.286749147s ago: executing program 7 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01360300000000001c0012800b0001006d616373656300000c000280050007000100000008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x0) 1.224775774s ago: executing program 1 (id=1297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1101, 0x44}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd04, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.224176556s ago: executing program 6 (id=1298): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40c000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1.079488178s ago: executing program 6 (id=1299): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000004c0)={{0x0, 0x6, 0xffffffffffff0000, 0x7, 0x5f, 0x64, 0x2, 0xc4b, 0x60a5, 0x5, 0x7, 0x2, 0x20000000000000, 0x1, 0x8001}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 746.071938ms ago: executing program 1 (id=1300): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 602.71634ms ago: executing program 8 (id=1301): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 540.489729ms ago: executing program 7 (id=1302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 497.017475ms ago: executing program 1 (id=1303): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000380)=""/70) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) close(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a00)=""/4102, 0x1006}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000001640)=""/4115, 0x1013}, {&(0x7f00000015c0)=""/76, 0x4c}], 0x4}, 0x1801}], 0x1, 0x120, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c136", 0x68}, {&(0x7f0000001400)}], 0x3, &(0x7f0000002400)=[{0xf10, 0x1, 0x8, "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"}], 0xf10}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, 0x0, 0x0) 25.127254ms ago: executing program 3 (id=1304): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x4) write$nci(r0, &(0x7f0000000140)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x3, {0x8, 0xb8, 0x20, 0x1, 0x3, 0x80000001}}, 0xc) 0s ago: executing program 1 (id=1305): inotify_init1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$caif_stream(0x25, 0x1, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x6) pselect6(0x40, &(0x7f0000000240)={0x8, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x9, 0x0, 0xf, 0x80000006, 0x1}, 0x0, 0x0) kernel console output (not intermixed with test programs): ummy_hcd [ 417.900679][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 417.940392][ T5922] usb 7-1: USB disconnect, device number 2 [ 417.951662][ T5871] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 418.001470][ T5871] usb 4-1: config 0 has no interface number 0 [ 418.007569][ T5871] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 418.056513][ T5871] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 418.098408][ T5871] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 418.136381][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.157979][ T5871] usb 4-1: Product: syz [ 418.167013][ T9175] fido_id[9175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 418.171908][ T5871] usb 4-1: Manufacturer: syz [ 418.223623][ T5871] usb 4-1: SerialNumber: syz [ 418.270960][ T5871] usb 4-1: config 0 descriptor?? [ 418.341849][ T30] audit: type=1400 audit(2000000085.470:544): avc: denied { write } for pid=9189 comm="syz.5.779" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 418.665914][ T5871] radio-si470x 4-1:0.35: this is not a si470x device. [ 418.745595][ T5871] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 418.957950][ T5871] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 419.024753][ T5871] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 419.058886][ T5871] usb 4-1: USB disconnect, device number 14 [ 419.137636][ T9215] netlink: 68 bytes leftover after parsing attributes in process `syz.6.788'. [ 419.138028][ T5871] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 419.200865][ T5922] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 419.296859][ T30] audit: type=1400 audit(2000000086.420:545): avc: denied { accept } for pid=9214 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 419.546552][ T5922] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 419.569951][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.604142][ T5922] usb 2-1: Product: syz [ 419.616443][ T5922] usb 2-1: Manufacturer: syz [ 419.633759][ T5922] usb 2-1: SerialNumber: syz [ 419.656466][ T5922] usb 2-1: config 0 descriptor?? [ 419.735787][ T5922] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 419.774848][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 419.821768][ T5922] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 419.866619][ T5922] usb 2-1: media controller created [ 419.910907][ T9205] dvb-usb: bulk message failed: -22 (7/0) [ 419.950484][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.031860][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 420.085287][ T9242] overlayfs: failed to clone upperpath [ 420.178778][ T5922] DVB: Unable to find symbol mt352_attach() [ 420.379897][ T5922] DVB: Unable to find symbol nxt6000_attach() [ 420.431363][ T5922] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 420.490933][ T793] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 420.503586][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 420.588170][ T5922] dvb-usb: schedule remote query interval to 1000 msecs. [ 420.618612][ T5922] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 420.665651][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.683497][ T5922] dvb-usb: bulk message failed: -22 (7/0) [ 420.696517][ T5922] dvb-usb: bulk message failed: -22 (7/0) [ 420.727985][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.752837][ T5922] usb 2-1: USB disconnect, device number 13 [ 420.768215][ T793] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 420.830944][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.912842][ T793] usb 6-1: config 0 descriptor?? [ 420.923234][ T5922] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 420.942604][ T5879] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 421.140731][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 421.150765][ T5879] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 421.163656][ T5879] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 421.199557][ T5879] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.218046][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.380477][ T793] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 421.457281][ T10] usb 7-1: USB disconnect, device number 3 [ 421.464732][ T5922] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 421.490738][ T5813] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 421.574831][ T793] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 421.631646][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 421.638487][ T5922] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 421.646898][ T5922] usb 2-1: config 0 has no interface number 0 [ 421.655379][ T5922] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 421.660656][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 421.664719][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.676590][ T5813] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 421.681775][ T5922] usb 2-1: Product: syz [ 421.692253][ T5922] usb 2-1: Manufacturer: syz [ 421.695746][ T5813] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 421.696836][ T5922] usb 2-1: SerialNumber: syz [ 421.704219][ T5922] usb 2-1: config 0 descriptor?? [ 421.717863][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 421.721592][ T5922] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 421.726814][ T5813] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 421.742815][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.752207][ T5813] usb 5-1: Product: syz [ 421.756587][ T5813] usb 5-1: Manufacturer: syz [ 421.761282][ T5813] usb 5-1: SerialNumber: syz [ 421.768114][ T5813] usb 5-1: config 0 descriptor?? [ 421.777044][ T793] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 421.789049][ T793] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71 [ 421.804351][ T793] usb 6-1: USB disconnect, device number 7 [ 421.853476][ T9295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.813'. [ 421.930696][ T5922] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 421.943446][ T5879] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 421.956190][ T5922] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 422.032604][ T5813] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 422.101005][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 422.122877][ T5879] usb 7-1: config index 0 descriptor too short (expected 52, got 45) [ 422.145191][ T5879] usb 7-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 422.181830][ T5879] usb 7-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 422.199212][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.216600][ T5879] usb 7-1: Product: syz [ 422.221388][ T5879] usb 7-1: Manufacturer: syz [ 422.225977][ T5879] usb 7-1: SerialNumber: syz [ 422.318919][ T5922] usb 5-1: USB disconnect, device number 7 [ 422.354528][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 422.373279][ T10] usb 2-1: USB disconnect, device number 14 [ 422.397518][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 422.435110][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 422.457217][ T10] quatech2 2-1:0.51: device disconnected [ 422.531426][ T5879] usb 7-1: USB disconnect, device number 4 [ 423.132569][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 423.432190][ T5808] Bluetooth: Wrong link type (-71) [ 424.010796][ T5813] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 424.050024][ T30] audit: type=1400 audit(2000000091.170:546): avc: denied { remount } for pid=9360 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 424.185838][ T5813] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 424.234337][ T5813] usb 4-1: config 0 has no interface number 0 [ 424.283181][ T5813] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 424.345638][ T5808] Bluetooth: hci2: unexpected cc 0x1004 length: 84 > 11 [ 424.353171][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.397770][ T5813] usb 4-1: Product: syz [ 424.429374][ T5813] usb 4-1: Manufacturer: syz [ 424.469880][ T5813] usb 4-1: SerialNumber: syz [ 424.512352][ T5813] usb 4-1: config 0 descriptor?? [ 424.850760][ T5813] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 424.890241][ T5813] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 424.916358][ T9337] delete_channel: no stack [ 424.938278][ T5813] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 424.990655][ T5813] usb 4-1: media controller created [ 425.052174][ T9356] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 425.166344][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.689215][ T5813] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 425.841840][ T9397] netlink: 68 bytes leftover after parsing attributes in process `syz.5.852'. [ 426.180549][ T5813] usb 4-1: USB disconnect, device number 15 [ 426.341554][ T5922] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 426.430409][ T5808] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 426.484081][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.859'. [ 426.503958][ T5922] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 426.522442][ T5922] usb 2-1: config 0 has no interface number 0 [ 426.548950][ T5922] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 426.585480][ T5922] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.601123][ T5813] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 426.619531][ T5922] usb 2-1: config 0 interface 113 has no altsetting 0 [ 426.667038][ T5922] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 426.696527][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.724055][ T5922] usb 2-1: Product: syz [ 426.735711][ T5922] usb 2-1: Manufacturer: syz [ 426.744004][ T5922] usb 2-1: SerialNumber: syz [ 426.744929][ T9425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.750510][ T5922] usb 2-1: config 0 descriptor?? [ 426.781631][ C0] usb 2-1: NFC: Urb failure (status -71) [ 426.789721][ T5922] usb 2-1: NFC: Unable to get FW version [ 426.799647][ T5922] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 426.816079][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 426.844140][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.888318][ T5813] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 426.939034][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.026054][ T5922] usb 2-1: USB disconnect, device number 15 [ 427.104585][ T5813] usb 4-1: config 0 descriptor?? [ 427.171640][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 427.243058][ T5808] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 427.514920][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 427.593769][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 427.631649][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 427.653876][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 427.657002][ T5813] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 427.667826][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 427.713363][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.738415][ T10] usb 7-1: config 0 descriptor?? [ 428.029880][ T10] hdpvr 7-1:0.0: firmware version 0x0 dated [ 428.062739][ T10] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 428.153628][ T5879] usb 4-1: USB disconnect, device number 16 [ 428.469393][ T10] hdpvr 7-1:0.0: Could not setup controls [ 428.498849][ T10] hdpvr 7-1:0.0: registering videodev failed [ 428.529634][ T10] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 428.569322][ T10] usb 7-1: USB disconnect, device number 5 [ 428.647517][ T9449] capability: warning: `syz.4.872' uses deprecated v2 capabilities in a way that may be insecure [ 428.676949][ T9471] loop2: detected capacity change from 0 to 7 [ 428.693990][ T9471] Dev loop2: unable to read RDB block 7 [ 428.707050][ T9471] loop2: AHDI p1 p2 p3 [ 428.711398][ T9471] loop2: partition table partially beyond EOD, truncated [ 428.719372][ T9471] loop2: p1 start 1818582900 is beyond EOD, truncated [ 428.726412][ T9471] loop2: p3 start 335544320 is beyond EOD, truncated [ 429.769714][ T9480] comedi: valid board names for 8255 driver are: [ 429.796502][ T9480] 8255 [ 429.799278][ T9480] comedi: valid board names for vmk80xx driver are: [ 429.852376][ T9480] vmk80xx [ 429.868741][ T9480] comedi: valid board names for usbduxsigma driver are: [ 429.890398][ T9480] usbduxsigma [ 429.902951][ T9480] comedi: valid board names for usbduxfast driver are: [ 429.919284][ T9480] usbduxfast [ 429.930150][ T9480] comedi: valid board names for usbdux driver are: [ 429.931669][ T30] audit: type=1400 audit(2000000097.050:547): avc: denied { load_policy } for pid=9481 comm="syz.6.885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 429.944935][ T9480] usbdux [ 429.958714][ T9482] SELinux: ebitmap: map size 2097152 does not match my size 64 (high bit was 0) [ 429.974455][ T9480] comedi: valid board names for ni6501 driver are: [ 429.975724][ T9482] SELinux: failed to load policy [ 429.990936][ T9480] ni6501 [ 429.995025][ T9480] comedi: valid board names for dt9812 driver are: [ 430.008062][ T9480] dt9812 [ 430.014192][ T9480] comedi: valid board names for ni_labpc_cs driver are: [ 430.028613][ T9480] ni_labpc_cs [ 430.040235][ T9480] comedi: valid board names for ni_daq_700 driver are: [ 430.056073][ T9480] ni_daq_700 [ 430.062727][ T9480] comedi: valid board names for labpc_pci driver are: [ 430.086767][ T9480] labpc_pci [ 430.120350][ T9480] comedi: valid board names for adl_pci9118 driver are: [ 430.161767][ T9480] pci9118dg [ 430.168764][ T9480] pci9118hg [ 430.174910][ T9486] netlink: 'syz.3.886': attribute type 12 has an invalid length. [ 430.177637][ T9480] pci9118hr [ 430.191173][ T9480] comedi: valid board names for 8255_pci driver are: [ 430.201603][ T9486] netlink: 'syz.3.886': attribute type 29 has an invalid length. [ 430.208699][ T9480] 8255_pci [ 430.213623][ T9480] comedi: valid board names for s526 driver are: [ 430.221179][ T9486] netlink: 148 bytes leftover after parsing attributes in process `syz.3.886'. [ 430.226468][ T9480] s526 [ 430.236652][ T9486] netlink: 59 bytes leftover after parsing attributes in process `syz.3.886'. [ 430.246831][ T9480] comedi: valid board names for multiq3 driver are: [ 430.280427][ T9480] multiq3 [ 430.287964][ T9480] comedi: valid board names for pcmuio driver are: [ 430.300689][ T9480] pcmuio48 [ 430.312555][ T9480] pcmuio96 [ 430.323286][ T9480] comedi: valid board names for pcmmio driver are: [ 430.344024][ T5808] Bluetooth: hci4: Malformed LE Event: 0x0d [ 430.360064][ T9480] pcmmio [ 430.365294][ T9480] comedi: valid board names for pcmda12 driver are: [ 430.380086][ T9480] pcmda12 [ 430.390654][ T9480] comedi: valid board names for pcmad driver are: [ 430.410646][ T9480] pcmad12 [ 430.413717][ T9480] pcmad16 [ 430.416762][ T9480] comedi: valid board names for ni_labpc driver are: [ 430.423904][ T9480] lab-pc-1200 [ 430.431682][ T9480] lab-pc-1200ai [ 430.438886][ T9480] lab-pc+ [ 430.452942][ T9480] comedi: valid board names for atmio16 driver are: [ 430.468915][ T9480] atmio16 [ 430.471031][ T5879] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 430.474911][ T5808] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 430.488270][ T5808] Bluetooth: hci3: Injecting HCI hardware error event [ 430.496283][ T5808] Bluetooth: hci3: hardware error 0x00 [ 430.515904][ T9480] atmio16d [ 430.519076][ T9480] comedi: valid board names for ni_at_ao driver are: [ 430.528222][ T9480] at-ao-6 [ 430.531487][ T9480] at-ao-10 [ 430.534755][ T9480] comedi: valid board names for ni_at_a2150 driver are: [ 430.544162][ T9480] ni_at_a2150 [ 430.547994][ T9480] comedi: valid board names for adq12b driver are: [ 430.555408][ T9480] adq12b [ 430.559024][ T9480] comedi: valid board names for mpc624 driver are: [ 430.565831][ T9480] mpc624 [ 430.572513][ T9480] comedi: valid board names for c6xdigio driver are: [ 430.582170][ T9480] c6xdigio [ 430.585318][ T9480] comedi: valid board names for aio_iiro_16 driver are: [ 430.590004][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 430.592458][ T9480] aio_iiro_16 [ 430.592469][ T9480] comedi: valid board names for aio_aio12_8 driver are: [ 430.592478][ T9480] aio_aio12_8 [ 430.592484][ T9480] aio_ai12_8 [ 430.592491][ T9480] aio_ao12_4 [ 430.592497][ T9480] comedi: valid board names for fl512 driver are: [ 430.592506][ T9480] fl512 [ 430.592512][ T9480] comedi: valid board names for dmm32at driver are: [ 430.592520][ T9480] dmm32at [ 430.592526][ T9480] comedi: valid board names for dt282x driver are: [ 430.592534][ T9480] dt2821 [ 430.592540][ T9480] dt2821-f [ 430.592547][ T9480] dt2821-g [ 430.592553][ T9480] dt2823 [ 430.592559][ T9480] dt2824-pgh [ 430.592566][ T9480] dt2824-pgl [ 430.592572][ T9480] dt2825 [ 430.592578][ T9480] dt2827 [ 430.592584][ T9480] dt2828 [ 430.592590][ T9480] dt2829 [ 430.592597][ T9480] dt21-ez [ 430.592604][ T9480] dt23-ez [ 430.658755][ T5879] usb 7-1: unable to get BOS descriptor or descriptor too short [ 430.659733][ T9480] dt24-ez [ 430.677342][ T5879] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 430.683638][ T9480] dt24-ez-pgl [ 430.707934][ T9480] comedi: valid board names for dt2817 driver are: [ 430.716980][ T9480] dt2817 [ 430.720106][ T9480] comedi: valid board names for dt2815 driver are: [ 430.750044][ T5879] usb 7-1: can't read configurations, error -71 [ 430.766543][ T9480] dt2815 [ 431.752121][ T9508] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 431.784249][ T9480] comedi: valid board names for dt2814 driver are: [ 431.800814][ T9480] dt2814 [ 431.813885][ T9480] comedi: valid board names for dt2811 driver are: [ 431.835386][ T9480] dt2811-pgh [ 431.838673][ T9480] dt2811-pgl [ 431.851515][ T9480] comedi: valid board names for dt2801 driver are: [ 431.868182][ T9480] dt2801 [ 431.871377][ T9480] comedi: valid board names for das6402 driver are: [ 431.877946][ T9480] das6402-12 [ 431.890645][ T9480] das6402-16 [ 431.900636][ T9480] comedi: valid board names for das1800 driver are: [ 431.910905][ T9480] das-1701st [ 431.914188][ T9480] das-1701st-da [ 431.927882][ T9480] das-1702st [ 431.931408][ T9480] das-1702st-da [ 431.934940][ T9480] das-1702hr [ 431.948373][ T9480] das-1702hr-da [ 431.952028][ T9480] das-1701ao [ 431.955302][ T9480] das-1702ao [ 431.968720][ T9480] das-1801st [ 431.972082][ T9480] das-1801st-da [ 431.975625][ T9480] das-1802st [ 431.989045][ T9480] das-1802st-da [ 431.993061][ T9480] das-1802hr [ 431.996339][ T9480] das-1802hr-da [ 432.010021][ T9480] das-1801hc [ 432.013574][ T9480] das-1802hc [ 432.016850][ T9480] das-1801ao [ 432.030303][ T9480] das-1802ao [ 432.033747][ T9480] comedi: valid board names for das800 driver are: [ 432.040236][ T9480] das-800 [ 432.050789][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 432.072244][ T9480] cio-das800 [ 432.076038][ T9480] das-801 [ 432.079060][ T9480] cio-das801 [ 432.090733][ T9480] das-802 [ 432.093949][ T9480] cio-das802 [ 432.104630][ T9480] cio-das802/16 [ 432.111699][ T9480] comedi: valid board names for isa-das08 driver are: [ 432.132107][ T9480] isa-das08 [ 432.135309][ T9480] das08-pgm [ 432.138496][ T9480] das08-pgh [ 432.150688][ T9480] das08-pgl [ 432.160923][ T9480] das08-aoh [ 432.164181][ T9480] das08-aol [ 432.170825][ T9480] das08-aom [ 432.174050][ T9480] das08/jr-ao [ 432.180755][ T9480] das08jr-16-ao [ 432.184330][ T9480] pc104-das08 [ 432.190771][ T9480] das08jr/16 [ 432.197855][ T9480] comedi: valid board names for das16m1 driver are: [ 432.210518][ T9480] das16m1 [ 432.212236][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 432.216906][ T9480] comedi: valid board names for dac02 driver are: [ 432.232266][ T10] usb 5-1: config 1 has no interface number 0 [ 432.235693][ T9480] dac02 [ 432.246982][ T9480] comedi: valid board names for rti802 driver are: [ 432.250003][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 432.263696][ T9480] rti802 [ 432.267929][ T9480] comedi: valid board names for rti800 driver are: [ 432.295951][ T9480] rti800 [ 432.309145][ T9480] rti815 [ 432.312449][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 432.315403][ T9480] comedi: valid board names for pcm3724 driver are: [ 432.337395][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.362969][ T9480] pcm3724 [ 432.371366][ T9480] comedi: valid board names for pcl818 driver are: [ 432.374679][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 432.390734][ T9480] pcl818l [ 432.397059][ T9480] pcl818h [ 432.403545][ T9480] pcl818hd [ 432.409943][ T9480] pcl818hg [ 432.416399][ T9480] pcl818 [ 432.419399][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.422613][ T9480] pcl718 [ 432.432168][ T10] usb 5-1: Product: syz [ 432.436327][ T10] usb 5-1: Manufacturer: syz [ 432.449032][ T10] usb 5-1: SerialNumber: syz [ 432.456890][ T9480] pcm3718 [ 432.466712][ T9480] comedi: valid board names for pcl816 driver are: [ 432.473951][ T9511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.487387][ T9480] pcl816 [ 432.500680][ T9480] pcl814b [ 432.503918][ T9480] comedi: valid board names for pcl812 driver are: [ 432.510409][ T9480] pcl812 [ 432.550943][ T9480] pcl812pg [ 432.554057][ T9480] acl8112pg [ 432.557241][ T9480] acl8112dg [ 432.560426][ T9480] acl8112hg [ 432.591024][ T9480] a821pgl [ 432.594053][ T9480] a821pglnda [ 432.611746][ T9480] a821pgh [ 432.614803][ T9480] a822pgl [ 432.617819][ T9480] a822pgh [ 432.631517][ T5808] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 432.632516][ T9480] a823pgl [ 432.652621][ T9480] a823pgh [ 432.655646][ T9480] pcl813 [ 432.658568][ T9480] pcl813b [ 432.680683][ T9480] acl8113 [ 432.683706][ T9480] iso813 [ 432.686632][ T9480] acl8216 [ 432.689643][ T9480] a826pg [ 432.707574][ T9480] comedi: valid board names for pcl730 driver are: [ 432.713963][ T9511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 432.719724][ T9480] pcl730 [ 432.725076][ T9480] iso730 [ 432.728005][ T9480] acl7130 [ 432.735362][ T9480] pcm3730 [ 432.738380][ T9480] pcl725 [ 432.787873][ T9480] p8r8dio [ 432.792617][ T9480] acl7225b [ 432.797558][ T9480] p16r16dio [ 432.802685][ T9480] pcl733 [ 432.805618][ T9480] pcl734 [ 432.808538][ T9480] opmm-1616-xt [ 432.815674][ T9480] pearl-mm-p [ 432.819969][ T9480] ir104-pbf [ 432.823432][ T9480] comedi: valid board names for pcl726 driver are: [ 432.832210][ T5879] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 432.869614][ T9480] pcl726 [ 432.876527][ T9480] pcl727 [ 432.879516][ T9480] pcl728 [ 432.882723][ T9480] acl6126 [ 432.885736][ T9480] acl6128 [ 432.888790][ T9480] comedi: valid board names for pcl724 driver are: [ 432.895623][ T9480] pcl724 [ 432.898548][ T9480] pcl722 [ 432.901741][ T9480] pcl731 [ 432.904664][ T9480] acl7122 [ 432.907720][ T9480] acl7124 [ 432.915754][ T9480] pet48dio [ 432.922718][ T9480] pcmio48 [ 432.925898][ T9480] onyx-mm-dio [ 432.929303][ T9480] comedi: valid board names for pcl711 driver are: [ 432.936636][ T9480] pcl711 [ 432.939609][ T9480] pcl711b [ 432.943221][ T9480] acl8112hg [ 432.946497][ T9480] acl8112dg [ 432.949721][ T9480] comedi: valid board names for amplc_pc263 driver are: [ 432.957062][ T9480] pc263 [ 432.959975][ T9480] comedi: valid board names for amplc_pc236 driver are: [ 432.967663][ T9480] pc36at [ 432.983079][ T9480] comedi: valid board names for amplc_dio200 driver are: [ 432.990245][ T9480] pc212e [ 432.993726][ T9480] pc214e [ 432.996696][ T9480] pc215e [ 432.999654][ T9480] pc218e [ 433.004916][ T10] usb 5-1: Incompatible driver and firmware versions [ 433.005409][ T9480] pc272e [ 433.021616][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.026318][ T10] usb 5-1: USB disconnect, device number 8 [ 433.029712][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.043264][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.051099][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.058915][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.066691][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.074452][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.081907][ T9480] comedi: valid board names for comedi_parport driver are: [ 433.082258][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.096269][ T9480] comedi_parport [ 433.097110][ T9556] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 433.103105][ T9480] comedi: valid board names for comedi_test driver are: [ 433.122620][ T9480] comedi_test [ 433.126091][ T9480] comedi: valid board names for comedi_bond driver are: [ 433.136788][ T9480] comedi_bond [ 434.097107][ T5879] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 434.111018][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 434.111916][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.340653][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 434.371485][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 434.375637][ T5879] usb 7-1: Product: syz [ 434.383924][ T5879] usb 7-1: Manufacturer: syz [ 434.388508][ T5879] usb 7-1: SerialNumber: syz [ 434.397549][ T5879] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.405674][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.405698][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.429201][ T5912] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 434.447887][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.474278][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.492169][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.525467][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 434.547089][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.788716][ T9] usb 6-1: usb_control_msg returned -32 [ 434.809607][ T9] usbtmc 6-1:16.0: can't read capabilities [ 435.437134][ T9] usb 6-1: USB disconnect, device number 8 [ 435.452160][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 435.481475][ T5813] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 435.500892][ T5912] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 435.507966][ T5912] ath9k_htc: Failed to initialize the device [ 435.547671][ T5912] usb 7-1: ath9k_htc: USB layer deinitialized [ 435.610656][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 435.617030][ T5879] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 435.626941][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.643831][ T5813] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 435.656088][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.667340][ T5879] usb 5-1: config 0 descriptor?? [ 435.672469][ T5813] usb 2-1: Product: syz [ 435.677179][ T5813] usb 2-1: Manufacturer: syz [ 435.682603][ T5813] usb 2-1: SerialNumber: syz [ 435.700555][ T5879] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 435.707448][ T5813] usb 2-1: config 0 descriptor?? [ 436.030647][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 436.118376][ T5813] usb 2-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (62) [ 436.181925][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 436.191653][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.201447][ T9] usb 4-1: config 0 descriptor?? [ 436.210231][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 436.230655][ T5922] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 436.319527][ T5813] usb 2-1: Read permanent extended address 4e:a1:b3:a4:ad:7e:21:09 from device [ 436.329162][ T5813] usb 2-1: atusb_probe: initialization failed, error = -524 [ 436.337416][ T5813] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 436.395222][ T5922] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.405216][ T5922] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.423741][ T5922] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.433145][ T9] gp8psk: usb in 128 operation failed. [ 436.438679][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.524490][ T10] usb 2-1: USB disconnect, device number 16 [ 436.648482][ T9] gp8psk: usb in 146 operation failed. [ 436.659948][ T9] gp8psk: failed to get FW version [ 436.665461][ T5922] usb 6-1: usb_control_msg returned -32 [ 436.671295][ T5922] usbtmc 6-1:16.0: can't read capabilities [ 436.677194][ T9] gp8psk: usb in 149 operation failed. [ 436.684488][ T9] gp8psk: failed to get FPGA version [ 436.690764][ T5879] gspca_vc032x: reg_w err -71 [ 436.702206][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.707488][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.713016][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.718290][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.725064][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.730346][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.735770][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.741754][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.747114][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.752728][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.758060][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.764508][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.769825][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.775771][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.790629][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.795904][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.804919][ T5813] usb 7-1: USB disconnect, device number 8 [ 436.810836][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.820304][ T5879] gspca_vc032x: I2c Bus Busy Wait 00 [ 436.828268][ T5879] gspca_vc032x: Unknown sensor... [ 436.834709][ T5879] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 436.851192][ T5879] usb 5-1: USB disconnect, device number 9 [ 436.865169][ T30] audit: type=1400 audit(2000000103.990:548): avc: denied { bind } for pid=9624 comm="syz.6.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.889778][ T9625] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 436.899658][ T9] gp8psk: usb out operation failed. [ 436.909258][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 436.926425][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 436.940278][ T9] usb 4-1: USB disconnect, device number 17 [ 437.024108][ T9628] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 437.031202][ T2099] block nbd0: Possible stuck request ffff8880282d0000: control (read@0,1024B). Runtime 120 seconds [ 437.041963][ T2099] block nbd0: Possible stuck request ffff8880282d0200: control (read@1024,1024B). Runtime 120 seconds [ 437.053167][ T2099] block nbd0: Possible stuck request ffff8880282d0400: control (read@2048,1024B). Runtime 120 seconds [ 437.064290][ T2099] block nbd0: Possible stuck request ffff8880282d0600: control (read@3072,1024B). Runtime 120 seconds [ 437.080943][ T5922] usb 6-1: USB disconnect, device number 9 [ 437.360651][ T5879] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 437.522582][ T5879] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.571090][ T5879] usb 7-1: config 1 interface 0 has no altsetting 0 [ 437.604849][ T5879] usb 7-1: string descriptor 0 read error: -22 [ 437.614282][ T5879] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 437.651663][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.678450][ T9644] netlink: 'syz.1.928': attribute type 3 has an invalid length. [ 437.912350][ T9654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.940897][ T5922] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 438.112481][ T5922] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 438.130685][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.148324][ T5879] hid_parser_main: 35 callbacks suppressed [ 438.148342][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.152613][ T5922] usb 5-1: config 0 descriptor?? [ 438.163308][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.175894][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.186297][ T5922] cp210x 5-1:0.0: cp210x converter detected [ 438.187343][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.232488][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.265761][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.273442][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.286559][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.301489][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.308442][ T5879] lenovo 0003:17EF:6047.000F: unknown main item tag 0x0 [ 438.380708][ T5879] lenovo 0003:17EF:6047.000F: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 438.598836][ T5922] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 438.602946][ T5879] lenovo 0003:17EF:6047.000F: Failed to switch middle button: -71 [ 438.631985][ T5879] lenovo 0003:17EF:6047.000F: Fn-lock setting failed: -71 [ 438.643879][ T5879] lenovo 0003:17EF:6047.000F: Sensitivity setting failed: -71 [ 438.675414][ T5879] usb 7-1: USB disconnect, device number 9 [ 438.835401][ T5922] usb 5-1: cp210x converter now attached to ttyUSB0 [ 439.076286][ T5879] usb 5-1: USB disconnect, device number 10 [ 439.100953][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 439.138377][ T5879] cp210x 5-1:0.0: device disconnected [ 439.160620][ T30] audit: type=1400 audit(2000000106.280:549): avc: denied { name_bind } for pid=9660 comm="syz.5.934" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 439.344362][ T30] audit: type=1400 audit(2000000106.470:550): avc: denied { set_context_mgr } for pid=9667 comm="syz.6.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 439.647829][ T9678] SELinux: failed to load policy [ 439.690867][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 439.818304][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 440.110757][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 440.592520][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 440.612673][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 440.621921][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.641861][ T10] usb 6-1: config 0 descriptor?? [ 440.649800][ T9672] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.660837][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 440.667334][ T5879] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 440.679232][ T5879] usb 5-1: config 0 has no interface number 0 [ 440.685388][ T5879] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.709202][ T5879] usb 5-1: config 0 interface 85 has no altsetting 0 [ 440.720877][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 440.729942][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.738419][ T5879] usb 5-1: Product: syz [ 440.742755][ T5879] usb 5-1: Manufacturer: syz [ 440.747337][ T5879] usb 5-1: SerialNumber: syz [ 440.757624][ T5879] usb 5-1: config 0 descriptor?? [ 440.990641][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 441.070999][ T10] hid-corsair-void 0003:1B1C:1B25.0010: collection stack underflow [ 441.078917][ T10] hid-corsair-void 0003:1B1C:1B25.0010: item 0 0 0 12 parsing failed [ 441.087550][ T10] hid-corsair-void 0003:1B1C:1B25.0010: parse failed (reason: -22) [ 441.095707][ T10] hid-corsair-void 0003:1B1C:1B25.0010: probe with driver hid-corsair-void failed with error -22 [ 441.141152][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 441.150979][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.166956][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.178939][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.195589][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.204821][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.216334][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.223934][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.232920][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.244345][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.251799][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.260804][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.271700][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.287663][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.289270][ T5871] usb 6-1: USB disconnect, device number 10 [ 441.296577][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.320427][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.328764][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.337735][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.348814][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.357272][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.366289][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.377266][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.384789][ T5879] appletouch 5-1:0.85: Geyser mode initialized. [ 441.385124][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.392849][ T5879] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14 [ 441.399980][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.423098][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.434855][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 441.443975][ T5878] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 441.454821][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 441.463196][ T9] usb 7-1: Product: syz [ 441.467348][ T9] usb 7-1: Manufacturer: syz [ 441.480614][ T9] usb 7-1: SerialNumber: syz [ 441.491967][ T9] usb 7-1: config 0 descriptor?? [ 441.513240][ T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 441.604786][ T9] usb 5-1: USB disconnect, device number 11 [ 441.610795][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 441.620403][ T5878] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 441.630743][ T5878] usb 4-1: config 0 has no interface number 0 [ 441.638992][ T5878] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 441.649201][ T5878] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 441.660395][ T5878] usb 4-1: config 0 interface 41 has no altsetting 0 [ 441.669850][ T9] appletouch 5-1:0.85: input: appletouch disconnected [ 441.678873][ T5878] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 441.688594][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.697912][ T5878] usb 4-1: Product: syz [ 441.702369][ T5878] usb 4-1: Manufacturer: syz [ 441.706990][ T5878] usb 4-1: SerialNumber: syz [ 441.720193][ T5878] usb 4-1: config 0 descriptor?? [ 441.725817][ T9703] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.733967][ T9703] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.811564][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 441.819131][ T10] usb 7-1: USB disconnect, device number 10 [ 441.829544][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 441.948116][ T9703] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 441.959737][ T9703] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 442.390663][ T5879] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 442.430639][ T5871] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 442.540826][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 442.548723][ T5879] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 442.569037][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.572179][ T5878] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 442.578683][ T5879] usb 6-1: Product: syz [ 442.605651][ T5871] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 442.614347][ T5879] usb 6-1: Manufacturer: syz [ 442.618941][ T5879] usb 6-1: SerialNumber: syz [ 442.632101][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.632469][ T9723] KVM: debugfs: duplicate directory 9723-4 [ 442.658707][ T5879] usb 6-1: config 0 descriptor?? [ 442.665663][ T5871] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.678044][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.691559][ T5879] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 442.699882][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 442.705822][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.721193][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.731417][ T5879] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 442.740219][ T5879] usb 6-1: media controller created [ 442.746055][ T5871] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 442.753563][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.771157][ T5871] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.783748][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.793597][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 442.813750][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 442.826118][ T5878] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 442.826819][ T5871] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 442.863506][ T5878] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 442.889794][ T5878] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 442.890684][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 442.905063][ T5878] usb 4-1: USB disconnect, device number 18 [ 442.917954][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 442.961306][ T5871] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.991467][ T5879] DVB: Unable to find symbol mt352_attach() [ 442.997368][ T5879] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 443.006234][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 443.024844][ T5871] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 443.079775][ T5871] usb 5-1: string descriptor 0 read error: -22 [ 443.090814][ T5871] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.099840][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.111766][ T5879] rc_core: IR keymap rc-dvico-portable not found [ 443.118094][ T5879] Registered IR keymap rc-empty [ 443.129007][ T5879] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 443.145392][ T5879] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input15 [ 443.157723][ T5871] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 443.168145][ T5879] dvb-usb: schedule remote query interval to 100 msecs. [ 443.177128][ T5879] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 443.194178][ T5879] usb 6-1: USB disconnect, device number 11 [ 443.210684][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 443.253375][ T5879] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 443.372792][ T5871] usb 5-1: USB disconnect, device number 12 [ 443.388587][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.406531][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.426017][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 443.439886][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.453193][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.463392][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.473460][ T9732] rdma_rxe: rxe_newlink: failed to add bond0 [ 443.480096][ T9] usb 2-1: config 0 descriptor?? [ 443.486175][ T9732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.961'. [ 443.504485][ T9732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.516089][ T9732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.525785][ T9732] bond0 (unregistering): Released all slaves [ 443.769926][ T5878] hid_parser_main: 4070 callbacks suppressed [ 443.769945][ T5878] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 443.802572][ T5878] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.870666][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 443.907748][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 443.980646][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 444.006756][ T9744] net_ratelimit: 45 callbacks suppressed [ 444.006771][ T9744] openvswitch: netlink: Message has 12 unknown bytes. [ 444.019837][ T9744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.022084][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 444.049570][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 444.071030][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 444.082868][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 444.095503][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 444.110902][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.118916][ T10] usb 4-1: Product: syz [ 444.125370][ T10] usb 4-1: Manufacturer: syz [ 444.131074][ T10] usb 4-1: SerialNumber: syz [ 444.139930][ T10] usb 4-1: config 0 descriptor?? [ 444.165047][ T5878] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 444.184485][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.206199][ T5878] usb 6-1: Product: syz [ 444.210514][ T5878] usb 6-1: Manufacturer: syz [ 444.215513][ T5878] usb 6-1: SerialNumber: syz [ 444.261139][ T5878] usb 6-1: config 0 descriptor?? [ 444.302489][ T5878] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 444.417329][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 444.440367][ T5878] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 444.458291][ T10] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 444.520786][ T5878] usb 6-1: media controller created [ 444.559059][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.653822][ T5878] DVB: Unable to find symbol mt352_attach() [ 444.742527][ T5871] usb 4-1: USB disconnect, device number 19 [ 444.761960][ T5878] DVB: Unable to find symbol nxt6000_attach() [ 444.768036][ T5878] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 444.786936][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 444.805965][ T5879] usb 2-1: USB disconnect, device number 17 [ 444.818371][ T5878] dvb-usb: schedule remote query interval to 1000 msecs. [ 444.840790][ T5878] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 444.861365][ T5878] dvb-usb: bulk message failed: -22 (7/0) [ 444.875002][ T5878] dvb-usb: bulk message failed: -22 (7/0) [ 445.010928][ T5878] usb 6-1: USB disconnect, device number 12 [ 445.280826][ T5879] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 445.518395][ T5878] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 445.533053][ T5879] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 445.576431][ T5879] usb 5-1: config 1 interface 0 has no altsetting 0 [ 445.592822][ T5879] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 445.607120][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.619388][ T9773] overlayfs: failed to clone upperpath [ 445.640882][ T5879] usb 5-1: Product: syz [ 445.645187][ T5879] usb 5-1: Manufacturer: syz [ 445.649996][ T5879] usb 5-1: SerialNumber: syz [ 445.674897][ T9769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 445.692570][ T9777] kvm: Disabled LAPIC found during irq injection [ 445.713559][ T55] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 445.788061][ T55] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.860711][ T9781] fido_id[9781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 445.900816][ T5813] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 445.934437][ T9785] overlayfs: failed to clone upperpath [ 446.039165][ T30] audit: type=1400 audit(2000000113.160:551): avc: denied { map } for pid=9791 comm="syz.5.981" path="socket:[25153]" dev="sockfs" ino=25153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.108659][ T30] audit: type=1400 audit(2000000113.160:552): avc: denied { read } for pid=9791 comm="syz.5.981" path="socket:[25153]" dev="sockfs" ino=25153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.132816][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.147113][ T5813] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 446.165187][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.270857][ T5912] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 446.302883][ T5813] usb 2-1: config 0 descriptor?? [ 446.470753][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 446.484802][ T5912] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 446.522025][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.539698][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 446.565095][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.575438][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.588739][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.590777][ T55] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 446.598045][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.753767][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.763006][ T55] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 446.764307][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.779455][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.784178][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.791828][ T30] audit: type=1400 audit(2000000113.910:553): avc: denied { write } for pid=9799 comm="syz.5.986" path="socket:[25169]" dev="sockfs" ino=25169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 446.821224][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.824181][ T55] usb 4-1: config 0 descriptor?? [ 446.828197][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.843039][ T30] audit: type=1400 audit(2000000113.970:554): avc: denied { read } for pid=9799 comm="syz.5.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 446.869135][ T55] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 446.872623][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.887203][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.895316][ T5813] lg-g15 0003:046D:C22E.0014: unknown main item tag 0x0 [ 446.902867][ T5813] lg-g15 0003:046D:C22E.0014: item fetching failed at offset 70/235 [ 446.912445][ T5813] lg-g15 0003:046D:C22E.0014: probe with driver lg-g15 failed with error -22 [ 447.013990][ T5813] usb 2-1: USB disconnect, device number 18 [ 447.080665][ T55] gp8psk: usb in 128 operation failed. [ 447.291768][ T55] gp8psk: usb in 146 operation failed. [ 447.297264][ T55] gp8psk: failed to get FW version [ 447.320720][ T55] gp8psk: usb in 149 operation failed. [ 447.326170][ T55] gp8psk: failed to get FPGA version [ 447.447928][ T9809] usbtmc 7-1:16.0: simple usb_control_msg failed -32 [ 447.458885][ T5912] usb 7-1: USB disconnect, device number 11 [ 447.542434][ T55] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 447.570678][ T55] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 447.754357][ T5912] usb 4-1: USB disconnect, device number 20 [ 448.090645][ T5879] rtl8150 5-1:1.0: couldn't reset the device [ 448.097124][ T5879] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 448.113810][ T9817] input: syz0 as /devices/virtual/input/input18 [ 448.144808][ T5879] usb 5-1: USB disconnect, device number 13 [ 448.162598][ T9821] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 448.460964][ T5879] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 448.687811][ T5879] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.687825][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 448.807305][ T9835] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 448.838093][ T5879] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 448.862051][ T9835] syzkaller0: linktype set to 823 [ 448.869313][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.891332][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 448.915269][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 448.915781][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 448.940420][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.957740][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.968789][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.980936][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.993573][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.006805][ T5879] usb 5-1: Product: syz [ 449.007032][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 449.067952][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.076523][ T5879] usb 5-1: Manufacturer: syz [ 449.125470][ T5879] usb 5-1: SerialNumber: syz [ 449.157193][ T5879] hub 5-1:1.0: bad descriptor, ignoring hub [ 449.177297][ T5879] hub 5-1:1.0: probe with driver hub failed with error -5 [ 449.340039][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 449.346903][ T10] usbtmc 7-1:16.0: can't read capabilities [ 449.405265][ T5879] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 449.619301][ T9860] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 449.632658][ T10] usb 7-1: USB disconnect, device number 12 [ 449.633529][ T9829] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 449.647383][ T9860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 449.941039][ T5878] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 450.220881][ T5912] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 450.221311][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 450.260189][ T5912] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 450.268970][ T30] audit: type=1800 audit(2000000117.390:555): pid=9877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1015" name="bus" dev="overlay" ino=535 res=0 errno=0 [ 450.431101][ T5879] usb 5-1: USB disconnect, device number 14 [ 450.452081][ T5879] usblp1: removed [ 450.631188][ T55] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 450.680661][ T5878] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 450.790628][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 450.796555][ T30] audit: type=1400 audit(2000000117.920:556): avc: denied { read } for pid=9894 comm="syz.5.1023" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 450.797605][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.830366][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.841799][ T55] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.860900][ T5878] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.873444][ T5878] usb 2-1: config 0 has no interface number 0 [ 450.886740][ T55] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 450.897751][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.906594][ T5878] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 450.917463][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.928020][ T55] usb 4-1: config 0 descriptor?? [ 450.933338][ T5878] usb 2-1: Product: syz [ 450.938674][ T5878] usb 2-1: Manufacturer: syz [ 450.944474][ T5878] usb 2-1: SerialNumber: syz [ 450.971982][ T5878] usb 2-1: config 0 descriptor?? [ 451.015838][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 451.188602][ T5878] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 451.212631][ T5878] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 451.246988][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 451.263947][ T5878] usb 2-1: media controller created [ 451.302299][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.366577][ T55] hid_parser_main: 54 callbacks suppressed [ 451.366594][ T55] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 451.386866][ T55] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 451.397320][ T55] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 451.404686][ T55] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 451.412914][ T55] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 451.431734][ T55] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 451.460685][ T5878] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 451.530832][ T55] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 451.565691][ T55] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 451.591474][ T9881] netlink: 472 bytes leftover after parsing attributes in process `syz.3.1017'. [ 451.673608][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 451.692371][ T55] usb 4-1: USB disconnect, device number 21 [ 451.721207][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 451.738868][ T9916] netlink: 'syz.5.1030': attribute type 3 has an invalid length. [ 451.748510][ T9701] thermal thermal_zone0: Temperature check failed (-19) [ 451.786778][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 451.828475][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 451.914527][ T30] audit: type=1400 audit(2000000119.040:557): avc: denied { read } for pid=9919 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 452.223202][ T30] audit: type=1400 audit(2000000119.350:558): avc: denied { read write } for pid=5803 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.275039][ T30] audit: type=1400 audit(2000000119.350:559): avc: denied { open } for pid=5803 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.315219][ T30] audit: type=1400 audit(2000000119.350:560): avc: denied { ioctl } for pid=5803 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.381324][ T5808] Bluetooth: hci4: command 0x0c1a tx timeout [ 452.382403][ T5912] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 452.402681][ T5912] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 452.465822][ T30] audit: type=1400 audit(2000000119.590:561): avc: denied { read } for pid=9926 comm="syz.4.1035" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 452.505712][ T9931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 452.521507][ T9931] block device autoloading is deprecated and will be removed. [ 452.529093][ T30] audit: type=1400 audit(2000000119.590:562): avc: denied { open } for pid=9926 comm="syz.4.1035" path="/234/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 452.561958][ T5878] usb 2-1: USB disconnect, device number 19 [ 452.610963][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 452.770642][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 452.777038][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.788694][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 452.795375][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 452.804484][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.813716][ T9] usb 4-1: config 0 descriptor?? [ 452.880634][ T5879] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 452.960714][ T5878] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 453.030624][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 453.036858][ T5879] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 453.045253][ T5879] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.055450][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.065199][ T5879] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.075144][ T5879] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.088353][ T5879] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.108798][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.119677][ T5878] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 453.149827][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.161395][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.172182][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 453.186671][ T5878] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 453.196709][ T5878] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 453.205491][ T5878] usb 6-1: Manufacturer: syz [ 453.231964][ T5878] usb 6-1: config 0 descriptor?? [ 453.249912][ T9] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 453.340187][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.355500][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.379051][ T5879] usb 5-1: usb_control_msg returned -32 [ 453.388301][ T5879] usbtmc 5-1:16.0: can't read capabilities [ 453.734767][ T30] audit: type=1400 audit(2000000120.860:563): avc: denied { map_create } for pid=9947 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.771177][ T30] audit: type=1400 audit(2000000120.860:564): avc: denied { map_read map_write } for pid=9947 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.773288][ T5878] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 453.795303][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.808356][ T30] audit: type=1400 audit(2000000120.880:565): avc: denied { prog_load } for pid=9947 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.841188][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.850473][ T5878] appleir 0003:05AC:8243.0017: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 453.858452][ T30] audit: type=1400 audit(2000000120.880:566): avc: denied { bpf } for pid=9947 comm="syz.1.1043" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.894962][ T5879] usb 4-1: USB disconnect, device number 22 [ 454.410666][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 454.460695][ T5912] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 454.467013][ T5912] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 454.472210][ T5808] Bluetooth: hci2: command 0x0c1a tx timeout [ 454.562228][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 454.568806][ T5879] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 454.577984][ T5879] usb 2-1: config 0 has no interface number 0 [ 454.584119][ T5879] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.593991][ T5879] usb 2-1: config 0 interface 89 has no altsetting 0 [ 454.602370][ T5879] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 454.611450][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.619400][ T5879] usb 2-1: Product: syz [ 454.623567][ T5879] usb 2-1: Manufacturer: syz [ 454.628154][ T5879] usb 2-1: SerialNumber: syz [ 454.635279][ T5879] usb 2-1: config 0 descriptor?? [ 454.642908][ T5879] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 454.652563][ T5879] em28xx 2-1:0.89: Video interface 89 found: [ 455.246687][ T5879] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 455.625303][ T5878] usb 5-1: USB disconnect, device number 15 [ 455.733237][ T5813] usb 6-1: USB disconnect, device number 13 [ 455.862372][ T5879] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 455.889617][ T5879] em28xx 2-1:0.89: board has no eeprom [ 455.951357][ T5879] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 455.958740][ T5879] em28xx 2-1:0.89: analog set to bulk mode. [ 455.964990][ T5813] em28xx 2-1:0.89: Registering V4L2 extension [ 455.991443][ T5879] usb 2-1: USB disconnect, device number 20 [ 456.008284][ T5879] em28xx 2-1:0.89: Disconnecting em28xx [ 456.022420][ T5813] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 456.029781][ T5813] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 456.036889][ T5813] em28xx 2-1:0.89: No AC97 audio processor [ 456.063773][ T5813] usb 2-1: Decoder not found [ 456.075727][ T5813] em28xx 2-1:0.89: failed to create media graph [ 456.089163][ T5813] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 456.102692][ T5813] em28xx 2-1:0.89: Registering snapshot button... [ 456.121017][ T5813] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input20 [ 456.137921][ T5813] em28xx 2-1:0.89: Remote control support is not available for this card. [ 456.183201][ T5879] em28xx 2-1:0.89: Closing input extension [ 456.192958][ T5879] em28xx 2-1:0.89: Deregistering snapshot button [ 456.244027][ T5879] em28xx 2-1:0.89: Freeing device [ 456.630664][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 457.780460][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 457.851170][ T5878] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 458.010749][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 458.062487][ T5878] usb 7-1: config 0 has no interfaces? [ 458.077647][ T5878] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 458.095230][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.124555][ T5878] usb 7-1: Product: syz [ 458.160624][ T5878] usb 7-1: Manufacturer: syz [ 458.170834][ T5878] usb 7-1: SerialNumber: syz [ 458.200063][ T5878] usb 7-1: config 0 descriptor?? [ 458.237841][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 458.237857][ T30] audit: type=1400 audit(2000000125.360:581): avc: denied { map } for pid=10024 comm="syz.1.1073" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 458.299737][ T30] audit: type=1400 audit(2000000125.400:582): avc: denied { execute } for pid=10024 comm="syz.1.1073" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 459.301598][T10042] overlayfs: failed to clone upperpath [ 459.440472][T10008] comedi comedi3: reset error (fatal) [ 459.477618][ T5878] usb 7-1: USB disconnect, device number 13 [ 459.650976][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 459.818515][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.838639][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.859645][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.880632][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.908445][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.942084][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.970301][ T10] usb 2-1: Product: syz [ 460.018565][ T10] usb 2-1: Manufacturer: syz [ 460.056030][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 460.084841][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 460.113672][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 460.139911][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 460.307514][ T10] usb 2-1: USB disconnect, device number 21 [ 460.813240][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 460.985012][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.008274][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.049969][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.067440][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.087823][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.097024][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.105295][ T10] usb 2-1: Product: syz [ 461.109544][ T10] usb 2-1: Manufacturer: syz [ 461.122343][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 461.128127][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 461.135320][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 461.142845][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 461.440651][ T5813] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 461.592642][ T5813] usb 7-1: unable to get BOS descriptor or descriptor too short [ 461.602697][ T5813] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 461.611884][ T5879] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 461.619466][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.627516][ T5813] usb 7-1: Product: syz [ 461.631707][ T5813] usb 7-1: Manufacturer: syz [ 461.636283][ T5813] usb 7-1: SerialNumber: syz [ 461.684493][ T30] audit: type=1400 audit(2000000128.810:583): avc: denied { read write } for pid=10043 comm="syz.1.1081" name="cdc-wdm0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 461.709358][ T30] audit: type=1400 audit(2000000128.810:584): avc: denied { open } for pid=10043 comm="syz.1.1081" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 461.822593][ T5879] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 461.830985][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.841595][ T5879] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 461.850731][ T5879] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 461.858722][ T5879] usb 6-1: Manufacturer: syz [ 461.871407][ T5879] usb 6-1: config 0 descriptor?? [ 461.912913][ T5912] usb 2-1: USB disconnect, device number 22 [ 461.930673][ T5879] rc_core: IR keymap rc-hauppauge not found [ 461.936595][ T5879] Registered IR keymap rc-empty [ 461.947901][ T5879] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 461.961640][ T5879] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 462.081955][ T5879] usb 6-1: USB disconnect, device number 14 [ 462.552945][T10093] kvm: kvm [10092]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x10 [ 462.563724][T10093] kvm: kvm [10092]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xfa [ 462.952949][ T55] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 463.094462][ T10] usb 7-1: USB disconnect, device number 14 [ 463.112467][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.133282][ T55] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 463.150951][ T55] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.174472][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 463.195853][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.204068][ T55] usb 2-1: Product: syz [ 463.208235][ T55] usb 2-1: Manufacturer: syz [ 463.213039][ T55] usb 2-1: SerialNumber: syz [ 463.221247][ T55] hub 2-1:1.0: bad descriptor, ignoring hub [ 463.227143][ T55] hub 2-1:1.0: probe with driver hub failed with error -5 [ 463.296669][T10104] overlayfs: failed to clone upperpath [ 463.433141][ T55] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 463.690737][ T30] audit: type=1400 audit(2000000130.810:585): avc: denied { read write } for pid=10098 comm="syz.1.1096" name="lp0" dev="devtmpfs" ino=3257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 463.737437][ T30] audit: type=1400 audit(2000000130.810:586): avc: denied { open } for pid=10098 comm="syz.1.1096" path="/dev/usb/lp0" dev="devtmpfs" ino=3257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 466.222917][T10136] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1107'. [ 466.254193][T10136] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1107'. [ 466.760644][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 466.920799][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 466.927209][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.939291][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.949831][ T9] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 466.958948][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.968365][ T9] usb 7-1: config 0 descriptor?? [ 467.101499][ T2099] block nbd0: Possible stuck request ffff8880282d0000: control (read@0,1024B). Runtime 150 seconds [ 467.112372][ T2099] block nbd0: Possible stuck request ffff8880282d0200: control (read@1024,1024B). Runtime 150 seconds [ 467.123383][ T2099] block nbd0: Possible stuck request ffff8880282d0400: control (read@2048,1024B). Runtime 150 seconds [ 467.134439][ T2099] block nbd0: Possible stuck request ffff8880282d0600: control (read@3072,1024B). Runtime 150 seconds [ 467.145719][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 467.302137][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 467.310924][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.321304][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 467.330386][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.347781][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 467.357570][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 467.365793][ T10] usb 4-1: Product: syz [ 467.370016][ T10] usb 4-1: Manufacturer: syz [ 467.385153][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 467.392617][ T9] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 467.399507][ T9] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 467.406420][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 467.471557][T10154] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 467.478167][T10154] binder: 10153:10154 ioctl 4018620d 200000000100 returned -1 [ 467.488966][T10154] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 467.496373][T10154] binder: 10153:10154 ioctl 4018620d 200000004a80 returned -1 [ 467.591799][ T9] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 467.792535][ T9] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 467.993267][ T9] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 468.218298][ T9] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 468.236399][ T9] usb 7-1: USB disconnect, device number 15 [ 468.962896][ T55] usb 2-1: USB disconnect, device number 23 [ 468.970387][ T10] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 468.983640][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 469.001171][ T55] usblp0: removed [ 469.012577][ T10] usb 4-1: USB disconnect, device number 23 [ 469.148775][ T30] audit: type=1400 audit(2000000136.270:587): avc: denied { allowed } for pid=10168 comm="syz.1.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 469.360631][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 469.750717][ T5813] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 469.911368][ T10] usb 4-1: device descriptor read/all, error -71 [ 469.917313][ T5813] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.930758][ T5813] usb 6-1: config 1 interface 0 has no altsetting 0 [ 469.941842][ T5813] usb 6-1: string descriptor 0 read error: -22 [ 469.948128][ T5813] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 469.962669][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.707492][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.727897][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.736464][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.744005][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.752254][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.759248][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.768013][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.780537][ T5813] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 470.899774][ T5813] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 471.465499][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.475743][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.483899][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.492728][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.501339][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.528280][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.536029][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.545312][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.553977][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.562926][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.883858][ T5813] lenovo 0003:17EF:6047.0019: Failed to switch middle button: -71 [ 471.898149][ T5813] lenovo 0003:17EF:6047.0019: Fn-lock setting failed: -71 [ 471.920491][ T5813] lenovo 0003:17EF:6047.0019: Sensitivity setting failed: -71 [ 471.955573][ T5813] usb 6-1: USB disconnect, device number 15 [ 473.142126][T10210] chnl_net:caif_netlink_parms(): no params data found [ 473.369574][T10210] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.408738][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.452372][T10210] bridge_slave_0: entered allmulticast mode [ 473.475128][T10210] bridge_slave_0: entered promiscuous mode [ 473.508980][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.530432][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.565068][T10210] bridge_slave_1: entered allmulticast mode [ 473.580695][ T5810] Bluetooth: hci0: command tx timeout [ 473.597551][T10210] bridge_slave_1: entered promiscuous mode [ 473.669455][T10210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.694576][T10210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.826447][T10210] team0: Port device team_slave_0 added [ 473.853288][T10210] team0: Port device team_slave_1 added [ 473.988037][T10210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.000778][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.066003][T10210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.092076][T10210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.111665][T10210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.172006][T10210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.270158][T10210] hsr_slave_0: entered promiscuous mode [ 474.301107][T10210] hsr_slave_1: entered promiscuous mode [ 474.307004][T10210] debugfs: 'hsr0' already exists in 'hsr' [ 474.330681][T10210] Cannot create hsr debugfs directory [ 474.658136][T10210] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 474.686128][T10210] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 474.712149][T10210] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 474.721547][T10210] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 474.859327][T10210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.902697][T10210] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.921206][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.928258][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.947380][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.954446][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.177620][ T30] audit: type=1400 audit(2000000142.300:588): avc: denied { sys_module } for pid=10210 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 475.224558][T10269] tipc: Started in network mode [ 475.229527][T10269] tipc: Node identity 66af4dcbb73a, cluster identity 4711 [ 475.237088][T10269] tipc: Enabled bearer , priority 0 [ 475.282776][T10269] syzkaller0: entered promiscuous mode [ 475.288354][T10269] syzkaller0: entered allmulticast mode [ 475.294504][T10269] tipc: Resetting bearer [ 475.383569][T10267] tipc: Resetting bearer [ 475.664079][ T5810] Bluetooth: hci0: command tx timeout [ 477.011379][ T5922] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 477.089161][T10267] tipc: Disabling bearer [ 477.116147][ T793] tipc: Node number set to 3516222923 [ 477.154453][T10210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.191400][ T5922] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.212847][ T5922] usb 4-1: config 0 has no interface number 0 [ 477.224213][T10307] syzkaller0: entered promiscuous mode [ 477.236310][ T5922] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.248390][T10307] syzkaller0: entered allmulticast mode [ 477.269148][ T5922] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.281256][ T5922] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 477.290352][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.343785][ T5922] usb 4-1: config 0 descriptor?? [ 477.741138][ T5810] Bluetooth: hci0: command tx timeout [ 477.788305][T10210] veth0_vlan: entered promiscuous mode [ 477.794582][ T5922] prodikeys 0003:041E:2801.001A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 477.810897][ T5912] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 477.812042][T10210] veth1_vlan: entered promiscuous mode [ 477.824875][ T5922] hid_prodikeys: hid-prodikeys: failed to find output report [ 477.824875][ T5922] [ 477.903083][T10210] veth0_macvtap: entered promiscuous mode [ 477.942628][T10210] veth1_macvtap: entered promiscuous mode [ 477.994553][ T9] usb 4-1: USB disconnect, device number 26 [ 478.021124][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 478.034416][T10210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.051505][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 478.071940][ T5912] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 478.085747][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.091548][T10210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.107497][ T5912] usb 6-1: Product: syz [ 478.112235][ T2995] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.122266][ T2995] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.134000][ T5912] usb 6-1: Manufacturer: syz [ 478.139613][ T2995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.150742][ T5912] usb 6-1: SerialNumber: syz [ 478.164128][ T2995] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.197751][ T5912] usb 6-1: config 0 descriptor?? [ 478.208270][ T5912] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 478.218430][ T5912] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 478.338849][ T6284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.355412][ T6284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.447140][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.455623][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.502876][ T30] audit: type=1400 audit(2000000145.620:589): avc: denied { mounton } for pid=10210 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 478.823542][ T5912] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 479.312003][ T30] audit: type=1400 audit(2000000146.430:590): avc: denied { create } for pid=10343 comm="syz.6.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 479.430847][T10347] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1165'. [ 479.731360][ T30] audit: type=1400 audit(2000000146.850:591): avc: denied { map } for pid=10349 comm="syz.3.1167" path="/dev/video5" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 479.824222][ T5810] Bluetooth: hci0: command tx timeout [ 479.933944][ T5912] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 479.960024][ T5912] em28xx 6-1:0.0: board has no eeprom [ 480.200959][ T5912] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 480.224741][ T5912] em28xx 6-1:0.0: dvb set to bulk mode. [ 480.232312][ T793] em28xx 6-1:0.0: Binding DVB extension [ 480.278290][ T5912] usb 6-1: USB disconnect, device number 16 [ 480.318554][ T5912] em28xx 6-1:0.0: Disconnecting em28xx [ 480.432730][ T793] em28xx 6-1:0.0: Registering input extension [ 480.461664][ T5912] em28xx 6-1:0.0: Closing input extension [ 480.543147][ T5912] em28xx 6-1:0.0: Freeing device [ 481.254213][ T30] audit: type=1400 audit(2000000148.380:592): avc: denied { create } for pid=10381 comm="syz.7.1178" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 481.314647][ T30] audit: type=1400 audit(2000000148.430:593): avc: denied { mounton } for pid=10381 comm="syz.7.1178" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 481.414453][ T30] audit: type=1400 audit(2000000148.530:594): avc: denied { unlink } for pid=10210 comm="syz-executor" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 481.780624][ T55] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 481.798517][T10393] Bluetooth: MGMT ver 1.23 [ 481.885662][T10395] kvm: pic: single mode not supported [ 481.885729][T10395] kvm: pic: level sensitive irq not supported [ 481.898995][T10395] kvm: pic: non byte read [ 481.918852][T10395] kvm: pic: non byte read [ 481.928601][T10395] kvm: pic: non byte read [ 481.938190][T10395] kvm: pic: non byte read [ 481.943367][ T55] usb 8-1: Using ep0 maxpacket: 32 [ 481.952313][T10395] kvm: pic: single mode not supported [ 481.952358][T10395] kvm: pic: non byte read [ 481.969765][ T55] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 481.984278][T10395] kvm: pic: non byte read [ 481.989850][ T55] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 481.990103][T10395] kvm: pic: non byte read [ 482.006837][T10395] kvm: pic: level sensitive irq not supported [ 482.006895][T10395] kvm: pic: non byte read [ 482.017936][T10395] kvm: pic: non byte read [ 482.030738][ T55] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.050637][ T55] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 482.077634][ T55] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 482.090785][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.108322][ T55] usb 8-1: Product: syz [ 482.114787][ T55] usb 8-1: Manufacturer: syz [ 482.124886][ T55] usb 8-1: SerialNumber: syz [ 482.140709][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 482.163751][ T55] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input23 [ 482.360647][ T55] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 482.373960][ T55] (id 0x00) [ 482.440631][ T55] rc_core: IR keymap rc-imon-pad not found [ 482.446444][ T55] Registered IR keymap rc-empty [ 482.455824][ T55] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 482.476279][ T55] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 482.561174][ T55] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0 [ 482.583390][ T55] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input24 [ 482.607473][ T55] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 482.945695][T10416] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 483.211298][ T55] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 483.380668][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 483.432706][ T55] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 483.451090][ T55] usb 4-1: config 0 has no interface number 0 [ 483.478490][ T55] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 483.480680][ T6284] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.508637][ T55] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 483.540231][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.572325][ T55] usb 4-1: Product: syz [ 483.586814][ T55] usb 4-1: Manufacturer: syz [ 483.599264][ T55] usb 4-1: SerialNumber: syz [ 483.605281][ T6284] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.640744][ T55] usb 4-1: config 0 descriptor?? [ 483.651548][T10412] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.687558][ T6284] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.772383][ T6284] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.886442][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.899798][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.911773][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.920867][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.930813][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.957862][T10412] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.984508][T10428] imon:send_packet: packet tx failed (-71) [ 483.995644][ T5813] usb 8-1: USB disconnect, device number 2 [ 484.001025][T10428] imon:vfd_write: send packet #3 failed [ 484.207538][ T30] audit: type=1400 audit(2000000151.330:595): avc: denied { execute } for pid=10434 comm="syz.1.1196" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 484.628367][ T6284] bridge_slave_1: left allmulticast mode [ 484.635009][ T6284] bridge_slave_1: left promiscuous mode [ 484.645770][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.661980][ T6284] bridge_slave_0: left allmulticast mode [ 484.675652][ T6284] bridge_slave_0: left promiscuous mode [ 484.697796][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.884104][ T6284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.894835][ T6284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.904469][ T6284] bond0 (unregistering): Released all slaves [ 485.057951][ T6284] tipc: Left network mode [ 485.237124][T10424] chnl_net:caif_netlink_parms(): no params data found [ 485.343890][ T6284] hsr_slave_0: left promiscuous mode [ 485.363160][ T6284] hsr_slave_1: left promiscuous mode [ 485.381756][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.389134][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.403702][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.412422][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.440943][ T6284] veth1_macvtap: left promiscuous mode [ 485.447073][ T6284] veth0_macvtap: left promiscuous mode [ 485.463608][ T6284] veth1_vlan: left promiscuous mode [ 485.470699][ T5912] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 485.492828][ T6284] veth0_vlan: left promiscuous mode [ 485.667580][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 485.673482][ T55] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 485.686779][ T55] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 485.698251][ T5912] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.698351][ T55] asix 4-1:0.188: probe with driver asix failed with error -71 [ 485.728766][ T5912] usb 8-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 485.731223][ T55] usb 4-1: USB disconnect, device number 27 [ 485.742814][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.761708][ T5912] usb 8-1: Product: syz [ 485.768366][ T5912] usb 8-1: Manufacturer: syz [ 485.784982][ T5912] usb 8-1: SerialNumber: syz [ 485.831947][ T5912] usb 8-1: config 0 descriptor?? [ 485.937645][T10480] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1205'. [ 485.991232][ T5808] Bluetooth: hci2: command tx timeout [ 486.107774][ T30] audit: type=1400 audit(2000000153.220:596): avc: denied { cmd } for pid=10458 comm="syz.7.1201" path="socket:[30804]" dev="sockfs" ino=30804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 486.112992][ T6284] team0 (unregistering): Port device team_slave_1 removed [ 486.259078][ T6284] team0 (unregistering): Port device team_slave_0 removed [ 486.272588][ T5912] msi2500 8-1:0.0: Registered as swradio24 [ 486.280667][ T5912] msi2500 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 486.313774][ T5912] usb 8-1: USB disconnect, device number 3 [ 487.201199][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.209913][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.218228][T10424] bridge_slave_0: entered allmulticast mode [ 487.225988][T10424] bridge_slave_0: entered promiscuous mode [ 487.244222][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.262241][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.284738][T10424] bridge_slave_1: entered allmulticast mode [ 487.309469][T10424] bridge_slave_1: entered promiscuous mode [ 487.388884][T10505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.453111][T10424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.488622][T10424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.071630][ T5808] Bluetooth: hci2: command tx timeout [ 488.093071][T10489] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 488.102421][T10489] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 488.112874][T10489] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 488.168143][ T30] audit: type=1400 audit(2000000000.400:597): avc: denied { firmware_load } for pid=10485 comm="syz.3.1207" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 488.218765][T10424] team0: Port device team_slave_0 added [ 488.248466][T10424] team0: Port device team_slave_1 added [ 488.365127][T10424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.402894][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.492115][T10424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.562216][T10424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.596632][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.706961][T10424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.168343][T10424] hsr_slave_0: entered promiscuous mode [ 489.185769][T10424] hsr_slave_1: entered promiscuous mode [ 489.208504][T10424] debugfs: 'hsr0' already exists in 'hsr' [ 489.224734][T10424] Cannot create hsr debugfs directory [ 489.398681][T10537] overlayfs: failed to clone upperpath [ 489.407821][T10424] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 489.431337][T10424] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 489.560432][T10541] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1217'. [ 489.821289][T10546] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1216'. [ 489.958674][T10424] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.047706][T10424] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.142311][ T5808] Bluetooth: hci2: command tx timeout [ 490.407453][T10424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.869826][T10424] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.913986][T10568] veth1: entered promiscuous mode [ 490.928953][T10568] macsec1: entered allmulticast mode [ 490.935468][T10568] veth1: entered allmulticast mode [ 490.947472][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.954583][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.073328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.080392][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.878797][T10424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.220682][ T5808] Bluetooth: hci2: command tx timeout [ 492.492969][ T30] audit: type=1400 audit(2000000004.780:598): avc: denied { append } for pid=10601 comm="syz.7.1225" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 492.790511][T10424] veth0_vlan: entered promiscuous mode [ 492.834707][T10424] veth1_vlan: entered promiscuous mode [ 492.962563][ T5912] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 492.970459][T10424] veth0_macvtap: entered promiscuous mode [ 492.982683][ T5813] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 493.004664][T10424] veth1_macvtap: entered promiscuous mode [ 493.087301][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.126170][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.145992][T10621] syzkaller0: entered allmulticast mode [ 493.150717][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 493.162189][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.174253][ T5912] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 493.190856][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.203793][ T5912] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 493.220922][ T5912] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.238323][ T5912] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 493.238454][ T5813] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 493.261287][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.269640][ T5813] usb 4-1: Product: syz [ 493.274929][ T5813] usb 4-1: Manufacturer: syz [ 493.280077][ T5912] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 493.295052][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.303196][ T5813] usb 4-1: SerialNumber: syz [ 493.310455][ T1021] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.313924][ T5813] usb 4-1: config 0 descriptor?? [ 493.325074][ T5912] usb 7-1: Product: syz [ 493.329653][ T5912] usb 7-1: Manufacturer: syz [ 493.357090][ T5912] usb 7-1: SerialNumber: syz [ 493.368767][ T5813] usb 4-1: ucan: probing device on interface #0 [ 493.376449][ T1021] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.382636][ T5813] usb 4-1: ucan: invalid EP count (0) [ 493.405029][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 493.412717][ T1021] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.415434][ T5912] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input25 [ 493.441074][ T5813] usb 4-1: ucan: probe failed; try to update the device firmware [ 493.461601][ T1021] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.496020][ T30] audit: type=1400 audit(2000000005.780:599): avc: denied { mounton } for pid=10631 comm="syz.7.1230" path="/14/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 493.634969][ T6284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.640622][ T5912] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 493.651464][ T6284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.685386][ T5912] (id 0x00) [ 493.799161][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.820780][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.920901][ T5912] rc_core: IR keymap rc-imon-pad not found [ 493.926721][ T5912] Registered IR keymap rc-empty [ 493.960683][ T5912] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 494.005730][ T5912] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 494.123858][ T5912] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 494.316029][T10647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.343395][ T5912] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input26 [ 494.354532][T10647] bond0: (slave rose0): Enslaving as an active interface with an up link [ 494.427113][ T5912] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:16> initialized [ 494.445940][ T30] audit: type=1400 audit(2000000006.710:600): avc: denied { call } for pid=10653 comm="syz.7.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 494.531167][ T5912] usb 7-1: USB disconnect, device number 16 [ 495.905443][T10693] overlayfs: failed to clone upperpath [ 495.906909][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.046349][ T793] usb 4-1: USB disconnect, device number 28 [ 496.182319][ T30] audit: type=1400 audit(2000000008.470:601): avc: denied { remount } for pid=10696 comm="syz.6.1242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 496.259856][ T30] audit: type=1400 audit(2000000008.530:602): avc: denied { write } for pid=10701 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 497.181596][ T2099] block nbd0: Possible stuck request ffff8880282d0000: control (read@0,1024B). Runtime 180 seconds [ 497.192447][ T2099] block nbd0: Possible stuck request ffff8880282d0200: control (read@1024,1024B). Runtime 180 seconds [ 497.205720][ T2099] block nbd0: Possible stuck request ffff8880282d0400: control (read@2048,1024B). Runtime 180 seconds [ 497.216699][ T2099] block nbd0: Possible stuck request ffff8880282d0600: control (read@3072,1024B). Runtime 180 seconds [ 497.331347][ T793] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 497.510691][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 497.541932][ T793] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 497.573842][ T793] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.610149][ T30] audit: type=1400 audit(2000000009.890:603): avc: denied { bind } for pid=10729 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 497.611286][ T793] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.661126][ T793] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.689166][ T793] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.733249][ T793] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.733300][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.975664][ T793] usb 4-1: GET_CAPABILITIES returned 0 [ 497.975707][ T793] usbtmc 4-1:16.0: can't read capabilities [ 498.067287][ T30] audit: type=1400 audit(2000000010.350:604): avc: denied { create } for pid=10742 comm="syz.6.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 498.067960][ T30] audit: type=1400 audit(2000000010.350:605): avc: denied { ioctl } for pid=10742 comm="syz.6.1252" path="socket:[32289]" dev="sockfs" ino=32289 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 498.374575][ T793] usb 4-1: USB disconnect, device number 29 [ 498.554575][ T30] audit: type=1400 audit(2000000010.840:606): avc: denied { write } for pid=10742 comm="syz.6.1252" path="socket:[32289]" dev="sockfs" ino=32289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 498.558843][T10742] lec:lec_atm_close: lec0: Shut down! [ 498.744526][ T30] audit: type=1400 audit(2000000011.030:607): avc: denied { read } for pid=10763 comm="syz.6.1254" dev="nsfs" ino=4026534202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 498.744701][ T30] audit: type=1400 audit(2000000011.030:608): avc: denied { open } for pid=10763 comm="syz.6.1254" path="net:[4026534202]" dev="nsfs" ino=4026534202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 499.135098][T10777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 499.279956][ T30] audit: type=1400 audit(2000000011.560:609): avc: denied { unmount } for pid=10424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 499.561677][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 499.660742][ T5912] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 499.713982][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.714022][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 499.714046][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 499.714070][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 499.714090][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 499.715802][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 499.715828][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 499.715846][ T9] usb 4-1: Product: syz [ 499.715877][ T9] usb 4-1: Manufacturer: syz [ 499.715891][ T9] usb 4-1: SerialNumber: syz [ 499.744280][ T9] usb 4-1: config 0 descriptor?? [ 499.829643][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.829683][ T5912] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 499.829705][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.833596][ T5912] usb 2-1: config 0 descriptor?? [ 499.840756][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 499.958047][ T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 499.958183][ T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 500.159028][ T9] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 500.159169][ T9] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 500.159314][ T9] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 500.254506][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 500.255198][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 500.260061][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 500.267991][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 500.269261][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 500.270295][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 500.280947][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 500.282615][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 500.283831][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 500.363465][ T9] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 500.498813][ T5912] pwc: recv_control_msg error -71 req 02 val 2400 [ 500.512120][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 500.530447][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 500.559222][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 500.577434][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 500.591205][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 500.600334][T10810] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 500.610110][ T5912] pwc: Registered as video103. [ 500.620365][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 500.657459][ T5912] usb 2-1: USB disconnect, device number 24 [ 500.680637][ T9701] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 500.967263][ T9701] usb 9-1: Using ep0 maxpacket: 8 [ 501.081987][ T9701] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.101953][ T9701] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 501.111506][ T9701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.125103][ T9701] usb 9-1: config 0 descriptor?? [ 501.352165][ T9701] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 501.879843][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 501.894851][ T9] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 501.915578][ T30] audit: type=1400 audit(2000000014.200:610): avc: denied { read } for pid=10809 comm="syz.6.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 501.919065][ T9] usb 4-1: USB disconnect, device number 30 [ 501.979130][ T5912] usb 9-1: USB disconnect, device number 2 [ 501.985400][ C1] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 502.396972][T10845] netlink: 'syz.1.1267': attribute type 3 has an invalid length. [ 502.409655][T10845] netlink: 'syz.1.1267': attribute type 3 has an invalid length. [ 503.446932][ T5472] lec:lec_start_xmit: lec0:No lecd attached [ 505.430632][ T793] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 505.660776][ T793] usb 7-1: Using ep0 maxpacket: 8 [ 505.689146][ T793] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 505.701610][ T793] usb 7-1: config 0 has no interface number 0 [ 505.860635][ T793] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 505.955144][ T793] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 506.027543][ T793] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 506.281453][ T793] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.321342][T10917] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1285'. [ 506.340402][ T793] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 506.380657][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.400994][ T793] usb 7-1: config 0 descriptor?? [ 506.435996][ T793] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 507.685701][ T10] usb 7-1: USB disconnect, device number 17 [ 507.722605][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 508.460610][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 508.469001][ C0] lec:lec_tx_timeout: lec0 [ 508.473588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 508.557358][T10964] binder_alloc: 10963: binder_alloc_buf size 64800 failed, no address space [ 508.591526][T10964] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 508.860369][T10975] veth1: entered promiscuous mode [ 508.866458][T10975] macsec1: entered allmulticast mode [ 508.871966][T10975] veth1: entered allmulticast mode [ 509.410983][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 509.730731][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 509.738825][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 509.755078][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.773595][ T9] usb 9-1: Product: syz [ 509.777800][ T9] usb 9-1: Manufacturer: syz [ 509.788342][ T9] usb 9-1: SerialNumber: syz [ 509.814564][ T9] usb 9-1: config 0 descriptor?? [ 509.831494][ T9701] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 510.010820][ T9701] usb 8-1: Using ep0 maxpacket: 32 [ 510.018302][ T9701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.037243][ T9701] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.047596][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 510.056216][ T9701] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 510.065695][ T9701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.076893][ T9701] usb 8-1: config 0 descriptor?? [ 510.530943][ T9701] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 510.622082][ T31] INFO: task syz.0.520:8352 blocked for more than 143 seconds. [ 510.629648][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.680661][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.689981][ T31] task:syz.0.520 state:D stack:27992 pid:8352 tgid:8350 ppid:5805 task_flags:0x400040 flags:0x00080002 [ 510.702736][ T30] audit: type=1400 audit(2000000022.980:611): avc: denied { write } for pid=5790 comm="syz-executor" path="pipe:[5193]" dev="pipefs" ino=5193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 510.790621][ T31] Call Trace: [ 510.793915][ T31] [ 510.796851][ T31] __schedule+0xfee/0x6120 [ 510.901527][ T31] ? __lock_acquire+0x4a5/0x2630 [ 510.906643][ T31] ? __pfx___schedule+0x10/0x10 [ 510.975746][ T31] ? find_held_lock+0x2b/0x80 [ 510.985339][ T31] ? schedule+0x2bf/0x390 [ 510.989776][ T31] schedule+0xdd/0x390 [ 511.051149][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.056677][ T31] __mutex_lock+0xc9a/0x1b90 [ 511.113547][ T31] ? preempt_schedule_irq+0x7b/0x90 [ 511.118766][ T31] ? bdev_open+0x41a/0xe40 [ 511.235515][ T31] ? irqentry_exit+0x180/0x670 [ 511.240308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.265404][ T31] ? iput.part.0+0x117/0xf50 [ 511.270011][ T31] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 511.420810][ T31] ? bdev_open+0x41a/0xe40 [ 511.425258][ T31] bdev_open+0x41a/0xe40 [ 511.429495][ T31] ? iput+0x3a/0x40 [ 511.441031][T11003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.450592][ T31] blkdev_open+0x34e/0x4f0 [ 511.460596][ T31] do_dentry_open+0x6d8/0x1660 [ 511.465376][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 511.470320][ T31] vfs_open+0x82/0x3f0 [ 511.474435][ T31] path_openat+0x208c/0x31a0 [ 511.479484][ T31] ? __pfx_path_openat+0x10/0x10 [ 511.484510][ T31] do_file_open+0x20e/0x430 [ 511.489011][ T31] ? __pfx_do_file_open+0x10/0x10 [ 511.494324][ T31] ? alloc_fd+0x476/0x790 [ 511.498654][ T31] ? do_getname+0x191/0x390 [ 511.503442][ T31] do_sys_openat2+0x10d/0x1e0 [ 511.508172][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.535828][ T31] __x64_sys_openat+0x12d/0x210 [ 511.543845][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 511.549226][ T31] ? __pfx___schedule+0x10/0x10 [ 511.560700][ T31] do_syscall_64+0x106/0xf80 [ 511.565298][ T31] ? clear_bhb_loop+0x40/0x90 [ 511.580608][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.586508][ T31] RIP: 0033:0x7fb818d5cfce [ 511.600624][ T31] RSP: 002b:00007fb819cffb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.609038][ T31] RAX: ffffffffffffffda RBX: 00007fb819d006c0 RCX: 00007fb818d5cfce [ 511.650624][ T31] RDX: 0000000000105201 RSI: 00007fb819cffc00 RDI: ffffffffffffff9c [ 511.658654][ T31] RBP: 00007fb819cffc00 R08: 0000000000000000 R09: 0000000000000000 [ 511.690641][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 511.698640][ T31] R13: 00007fb819016128 R14: 00007fb819016090 R15: 00007ffcc8f09d28 [ 511.720701][ T31] [ 511.760598][ T31] INFO: task syz.0.520:8353 blocked for more than 144 seconds. [ 511.768166][ T31] Tainted: G L syzkaller #0 [ 511.838474][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.900648][ T31] task:syz.0.520 state:D stack:27720 pid:8353 tgid:8350 ppid:5805 task_flags:0x400040 flags:0x00080002 [ 511.930739][ T31] Call Trace: [ 511.934038][ T31] [ 511.936977][ T31] __schedule+0xfee/0x6120 [ 511.960603][ T31] ? __lock_acquire+0x4a5/0x2630 [ 511.965583][ T31] ? __pfx___schedule+0x10/0x10 [ 511.970445][ T31] ? find_held_lock+0x2b/0x80 [ 511.990807][ T31] ? schedule+0x2bf/0x390 [ 511.995300][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 512.010634][ T31] schedule+0xdd/0x390 [ 512.014711][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.020165][ T31] __mutex_lock+0xc9a/0x1b90 [ 512.070633][ T31] ? bdev_open+0x41a/0xe40 [ 512.090030][ T31] ? find_held_lock+0x2b/0x80 [ 512.095566][ T31] ? find_inode_fast+0x5e3/0x910 [ 512.100511][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.105630][ T31] ? find_inode_fast+0x1fa/0x910 [ 512.111664][ T31] ? bdev_open+0x41a/0xe40 [ 512.116085][ T31] bdev_open+0x41a/0xe40 [ 512.120370][ T31] ? iput+0x3a/0x40 [ 512.124240][ T31] blkdev_open+0x34e/0x4f0 [ 512.128657][ T31] do_dentry_open+0x6d8/0x1660 [ 512.133490][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 512.140729][ T31] vfs_open+0x82/0x3f0 [ 512.144804][ T31] path_openat+0x208c/0x31a0 [ 512.149401][ T31] ? __pfx_path_openat+0x10/0x10 [ 512.154516][ T31] do_file_open+0x20e/0x430 [ 512.159034][ T31] ? __pfx_do_file_open+0x10/0x10 [ 512.164113][ T31] ? alloc_fd+0x476/0x790 [ 512.168442][ T31] ? do_getname+0x191/0x390 [ 512.173044][ T31] do_sys_openat2+0x10d/0x1e0 [ 512.177722][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.200580][ T31] ? find_held_lock+0x2b/0x80 [ 512.205291][ T31] __x64_sys_openat+0x12d/0x210 [ 512.210139][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 512.216345][ T31] do_syscall_64+0x106/0xf80 [ 512.230761][ T31] ? clear_bhb_loop+0x40/0x90 [ 512.235444][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.250610][ T31] RIP: 0033:0x7fb818d5cfce [ 512.260731][ T31] RSP: 002b:00007fb819cdeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.269144][ T31] RAX: ffffffffffffffda RBX: 00007fb819cdf6c0 RCX: 00007fb818d5cfce [ 512.277397][ T31] RDX: 0000000000000400 RSI: 00007fb819cdec00 RDI: ffffffffffffff9c [ 512.290612][ T31] RBP: 00007fb819cdec00 R08: 0000000000000000 R09: 0000000000000000 [ 512.301048][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 512.309034][ T31] R13: 00007fb819016218 R14: 00007fb819016180 R15: 00007ffcc8f09d28 [ 512.330633][ T31] [ 512.336110][ T31] [ 512.336110][ T31] Showing all locks held in the system: [ 512.345893][ T31] 1 lock held by khungtaskd/31: [ 512.350920][ T31] #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 512.360971][ T31] 3 locks held by kworker/u8:7/1021: [ 512.366247][ T31] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 512.390588][ T31] #1: ffffc90004eafd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 512.401148][ T31] #2: ffffffff90611468 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 512.410249][ T31] 1 lock held by udevd/7966: [ 512.420581][ T31] #0: ffff88802825b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 512.429923][ T31] 1 lock held by syz.0.520/8352: [ 512.435332][ T31] #0: ffff88802825b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 512.444810][ T31] 1 lock held by syz.0.520/8353: [ 512.449734][ T31] #0: ffff88802825b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 512.459330][ T31] 2 locks held by kworker/0:3/9701: [ 512.465090][ T31] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 512.475861][ T31] #1: ffffc90004ebfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 512.485835][ T31] 2 locks held by getty/9919: [ 512.491104][ T31] #0: ffff8880397990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 512.501024][ T31] #1: ffffc90003f532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 512.511296][ T31] 2 locks held by syz.6.1103/10127: [ 512.516479][ T31] #0: ffffffff90611468 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 512.525699][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 512.535947][ T31] 2 locks held by syz.8.1301/10983: [ 512.541333][ T31] #0: ffff888088d94ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 512.552071][ T31] #1: ffff888088d940c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 512.561918][ T31] 4 locks held by syz.7.1302/10991: [ 512.567100][ T31] #0: ffff888088f54ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 512.576953][ T31] #1: ffff888088f540c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 512.586798][ T31] #2: ffffffff908a9808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 512.597505][ T31] #3: ffff8880253cd2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 512.607029][ T31] 1 lock held by syz.3.1304/11003: [ 512.612305][ T31] 1 lock held by syz.1.1306/11029: [ 512.617399][ T31] #0: ffffffff90611468 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 512.626614][ T31] 1 lock held by dhcpcd/11043: [ 512.631532][ T31] #0: ffff8880474a0208 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 512.642243][ T31] 2 locks held by dhcpcd/11044: [ 512.647078][ T31] #0: ffff88804749ccc8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 512.657945][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 512.668598][ T31] [ 512.687627][ T31] ============================================= [ 512.687627][ T31] [ 512.708332][ T31] NMI backtrace for cpu 0 [ 512.708347][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 512.708370][ T31] Tainted: [L]=SOFTLOCKUP [ 512.708376][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.708385][ T31] Call Trace: [ 512.708391][ T31] [ 512.708397][ T31] dump_stack_lvl+0x100/0x190 [ 512.708428][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 512.708446][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 512.708475][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 512.708506][ T31] sys_info+0x141/0x190 [ 512.708529][ T31] watchdog+0xd25/0x1050 [ 512.708559][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.708583][ T31] ? __kthread_parkme+0x18c/0x230 [ 512.708610][ T31] ? kthread+0x13a/0x450 [ 512.708624][ T31] ? __pfx_watchdog+0x10/0x10 [ 512.708645][ T31] kthread+0x370/0x450 [ 512.708660][ T31] ? __pfx_kthread+0x10/0x10 [ 512.708677][ T31] ret_from_fork+0x754/0xd80 [ 512.708696][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.708715][ T31] ? __switch_to+0x7b4/0x1120 [ 512.708735][ T31] ? __pfx_kthread+0x10/0x10 [ 512.708753][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.708785][ T31] [ 512.708791][ T31] Sending NMI from CPU 0 to CPUs 1: [ 512.834113][ C1] NMI backtrace for cpu 1 [ 512.834127][ C1] CPU: 1 UID: 0 PID: 11003 Comm: syz.3.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.834146][ C1] Tainted: [L]=SOFTLOCKUP [ 512.834151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.834158][ C1] RIP: 0010:stack_access_ok+0x48/0x1d0 [ 512.834178][ C1] Code: 89 fb 48 83 ec 08 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 8b 13 85 d2 74 65 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 08 <48> 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 24 01 00 00 48 8d 7b 10 4c [ 512.834190][ C1] RSP: 0018:ffffc900061bf638 EFLAGS: 00000202 [ 512.834201][ C1] RAX: dffffc0000000000 RBX: ffffc900061bf6d8 RCX: ffffffff91768b5e [ 512.834210][ C1] RDX: 0000000000000001 RSI: ffffc900061bfec8 RDI: ffffc900061bf6e0 [ 512.834218][ C1] RBP: ffffc900061bfec8 R08: ffffffff91768b62 R09: 0000000000000007 [ 512.834226][ C1] R10: 0000000000000200 R11: 000000000000aa3a R12: 0000000000000008 [ 512.834234][ C1] R13: ffffc900061bf6d8 R14: ffffc900061bfed0 R15: ffffc900061bf70c [ 512.834243][ C1] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 512.834256][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.834265][ C1] CR2: 00007ffc571b8190 CR3: 000000000e598000 CR4: 00000000003526f0 [ 512.834273][ C1] Call Trace: [ 512.834278][ C1] [ 512.834283][ C1] unwind_next_frame+0xb0b/0x1ea0 [ 512.834299][ C1] ? arch_do_signal_or_restart+0x91/0x7a0 [ 512.834317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 512.834340][ C1] arch_stack_walk+0x94/0xf0 [ 512.834356][ C1] ? arch_do_signal_or_restart+0x91/0x7a0 [ 512.834373][ C1] stack_trace_save+0x8e/0xc0 [ 512.834389][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 512.834405][ C1] ? __lock_acquire+0x4a5/0x2630 [ 512.834419][ C1] save_stack+0x162/0x1e0 [ 512.834437][ C1] ? __pfx_save_stack+0x10/0x10 [ 512.834455][ C1] ? __free_frozen_pages+0x7e1/0x10d0 [ 512.834469][ C1] ? vfree.part.0+0x12b/0x9d0 [ 512.834482][ C1] ? vfree+0x55/0x80 [ 512.834493][ C1] ? kcov_close+0x34/0x60 [ 512.834509][ C1] ? __fput+0x3ff/0xb40 [ 512.834522][ C1] ? task_work_run+0x150/0x240 [ 512.834535][ C1] ? do_exit+0x8b8/0x2b60 [ 512.834551][ C1] ? do_group_exit+0xd5/0x2a0 [ 512.834568][ C1] ? get_signal+0x1ec7/0x21e0 [ 512.834583][ C1] ? arch_do_signal_or_restart+0x91/0x7a0 [ 512.834600][ C1] ? page_ext_put+0x3e/0xd0 [ 512.834619][ C1] __reset_page_owner+0x84/0x190 [ 512.834638][ C1] __free_frozen_pages+0x7e1/0x10d0 [ 512.834655][ C1] vfree.part.0+0x12b/0x9d0 [ 512.834668][ C1] ? __pfx___might_resched+0x10/0x10 [ 512.834683][ C1] ? __pfx_kcov_close+0x10/0x10 [ 512.834698][ C1] ? rcu_is_watching+0x12/0xc0 [ 512.834712][ C1] ? __pfx_kcov_close+0x10/0x10 [ 512.834728][ C1] vfree+0x55/0x80 [ 512.834740][ C1] kcov_close+0x34/0x60 [ 512.834755][ C1] __fput+0x3ff/0xb40 [ 512.834770][ C1] ? cleanup_mnt+0x263/0x450 [ 512.834783][ C1] task_work_run+0x150/0x240 [ 512.834796][ C1] ? __pfx_task_work_run+0x10/0x10 [ 512.834812][ C1] do_exit+0x8b8/0x2b60 [ 512.834828][ C1] ? __pfx___might_resched+0x10/0x10 [ 512.834843][ C1] ? __pfx_do_exit+0x10/0x10 [ 512.834860][ C1] ? do_raw_spin_lock+0x128/0x260 [ 512.834873][ C1] ? find_held_lock+0x2b/0x80 [ 512.834888][ C1] ? get_signal+0x7e0/0x21e0 [ 512.834904][ C1] do_group_exit+0xd5/0x2a0 [ 512.834922][ C1] get_signal+0x1ec7/0x21e0 [ 512.834940][ C1] ? __pfx_get_signal+0x10/0x10 [ 512.834954][ C1] ? __pfx___file_ref_put+0x10/0x10 [ 512.834969][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 512.834986][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 512.835008][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 512.835021][ C1] do_syscall_64+0x67c/0xf80 [ 512.835037][ C1] ? clear_bhb_loop+0x40/0x90 [ 512.835051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.835064][ C1] RIP: 0033:0x7f1d2379c799 [ 512.835074][ C1] Code: Unable to access opcode bytes at 0x7f1d2379c76f. [ 512.835079][ C1] RSP: 002b:00007f1d245c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.835091][ C1] RAX: 000000000000001c RBX: 00007f1d23a15fa0 RCX: 00007f1d2379c799 [ 512.835099][ C1] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 512.835107][ C1] RBP: 00007f1d23832c99 R08: 0000000000000000 R09: 0000000000000000 [ 512.835115][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.835123][ C1] R13: 00007f1d23a16038 R14: 00007f1d23a15fa0 R15: 00007ffdc81833d8 [ 512.835136][ C1] [ 513.274126][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 513.280976][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 513.291638][ T31] Tainted: [L]=SOFTLOCKUP [ 513.295941][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.305975][ T31] Call Trace: [ 513.309225][ T31] [ 513.312127][ T31] dump_stack_lvl+0x100/0x190 [ 513.316784][ T31] vpanic+0x552/0x970 [ 513.320734][ T31] ? __pfx_vpanic+0x10/0x10 [ 513.325206][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 513.331343][ T31] panic+0xd1/0xe0 [ 513.335045][ T31] ? __pfx_panic+0x10/0x10 [ 513.339438][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 513.345578][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 513.351718][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 513.357856][ T31] ? watchdog.cold+0x198/0x1ca [ 513.362598][ T31] ? watchdog+0xd35/0x1050 [ 513.366998][ T31] watchdog.cold+0x1a9/0x1ca [ 513.371572][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.376231][ T31] ? __kthread_parkme+0x18c/0x230 [ 513.381240][ T31] ? kthread+0x13a/0x450 [ 513.385459][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.390114][ T31] kthread+0x370/0x450 [ 513.394160][ T31] ? __pfx_kthread+0x10/0x10 [ 513.398727][ T31] ret_from_fork+0x754/0xd80 [ 513.403295][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 513.408387][ T31] ? __switch_to+0x7b4/0x1120 [ 513.413043][ T31] ? __pfx_kthread+0x10/0x10 [ 513.417610][ T31] ret_from_fork_asm+0x1a/0x30 [ 513.422363][ T31] [ 513.425548][ T31] Kernel Offset: disabled [ 513.429845][ T31] Rebooting in 86400 seconds..